$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/787c578e-08b0-3b91-88ff-17238feca7dc.roa File: 787c578e-08b0-3b91-88ff-17238feca7dc.roa (raw, json) Hash identifier: EvCYpCGX/x6n3eAcYD0+Pt/SuP8d25TNh+EgTtDEJpk= Subject key identifier: E7:15:37:94:B7:75:91:DF:7A:4F:A5:B8:D7:0D:2F:AE:00:1D:0B:84 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584996C4A003D83C9CFB9B0A5B80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/787c578e-08b0-3b91-88ff-17238feca7dc.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 0 IP address blocks: 157.133.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:a0:03:d8:3c:9c:fb:9b:0a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=d2be84c6-ef81-4e6d-970d-291384a111d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:17:ee:e5:76:4a:83:51:ad:3e:57:e1:8d: 97:05:1d:18:50:0d:97:73:20:96:d3:f0:cb:a0:7e: a7:9a:a7:f7:e8:42:32:e6:65:7b:2f:25:7a:68:a8: d0:c0:f4:71:b0:a4:2b:44:ba:3f:ee:d5:e5:4f:4a: c0:1f:b8:6d:2c:4c:c1:29:5d:9d:16:9e:9e:c9:3c: b5:69:7f:19:18:10:f0:8b:17:a0:3b:2a:f5:7f:a7: 54:24:64:56:ba:15:eb:86:f6:e8:c2:ac:b2:c6:44: fc:32:f8:81:ae:2f:2e:91:34:63:7e:84:11:cd:b5: 8a:fe:f7:5c:1f:8d:15:29:f5:11:ce:bd:42:7c:bb: d6:55:77:39:97:11:df:20:56:6f:4d:ea:6a:a9:7e: 1d:33:e2:24:71:7a:37:b8:e6:b8:84:df:c4:b4:d7: 82:a6:a0:0e:e5:7e:9c:99:11:97:ad:3a:1a:3a:8b: 13:48:93:e2:30:b0:06:ff:33:01:14:9c:56:bd:70: c3:c6:ea:82:d8:4e:26:4a:32:10:2d:07:11:77:2d: 15:82:4b:41:48:80:2e:08:ff:99:62:f0:82:36:08: 7f:66:42:cc:ca:94:a9:c4:b5:2d:74:dd:1e:24:b5: 8a:d6:1a:1b:d6:3d:08:78:dc:1e:f6:33:bc:54:d4: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:15:37:94:B7:75:91:DF:7A:4F:A5:B8:D7:0D:2F:AE:00:1D:0B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/787c578e-08b0-3b91-88ff-17238feca7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:dc:b4:31:c9:c1:5b:e0:f3:65:74:d3:9b:e7:6f:74:2a:b2: a4:05:27:57:d6:91:50:4d:fa:37:bd:72:34:93:8a:31:0b:c4: a5:25:11:de:df:55:b4:ad:e1:32:4f:6e:15:30:ae:64:57:0f: 41:16:c2:2b:5f:1e:4a:15:05:5c:1b:6c:dd:92:6e:bf:de:12: 2f:18:00:b8:0d:51:e2:3d:49:d7:d6:c1:cb:71:22:fe:e1:89: 2c:b7:25:f8:32:cc:34:5a:03:6c:bd:f1:2c:6d:7c:3e:8c:fd: 9e:c5:76:dc:94:72:69:68:76:ae:d3:ab:82:1c:e8:93:cc:19: fb:38:8f:55:7d:a3:02:43:20:ae:2c:22:bc:18:93:ad:94:30: 10:8a:a5:20:70:41:f6:66:3d:e8:11:b5:5d:60:e8:54:e3:00: 5d:bc:dc:34:33:59:a8:95:85:a5:74:2d:b7:96:9a:85:10:d5: 81:d6:da:98:d3:e2:e6:f9:4f:67:43:42:7b:8d:ea:75:53:19: 82:c2:44:cc:be:df:52:89:99:d2:d5:91:aa:6c:90:db:00:dc: a1:c3:64:62:a9:dd:ad:19:f8:ed:33:80:49:ae:ec:49:67:fa: 7e:29:e9:7c:35:7b:4f:7c:25:bb:5a:23:7b:af:79:6f:cf:22: 0f:ae:38:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxKAD2Dyc+5sKW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZDJiZTg0YzYtZWY4MS00ZTZkLTk3MGQtMjkxMzg0YTExMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1kX7uV2SoNRrT5X4Y2XBR0YUA2XcyCW0/DL oH6nmqf36EIy5mV7LyV6aKjQwPRxsKQrRLo/7tXlT0rAH7htLEzBKV2dFp6eyTy1 aX8ZGBDwixegOyr1f6dUJGRWuhXrhvbowqyyxkT8MviBri8ukTRjfoQRzbWK/vdc H40VKfURzr1CfLvWVXc5lxHfIFZvTepqqX4dM+IkcXo3uOa4hN/EtNeCpqAO5X6c mRGXrToaOosTSJPiMLAG/zMBFJxWvXDDxuqC2E4mSjIQLQcRdy0VgktBSIAuCP+Z YvCCNgh/ZkLMypSpxLUtdN0eJLWK1hob1j0IeNwe9jO8VNSYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcVN5S3dZHfek+luNcNL64AHQuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNzg3YzU3OGUtMDhiMC0z YjkxLTg4ZmYtMTcyMzhmZWNhN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ctDHJwVvg82V005vnb3QqsqQFJ1fWkVBN+je9cjSTijELxKUlEd7f VbSt4TJPbhUwrmRXD0EWwitfHkoVBVwbbN2Sbr/eEi8YALgNUeI9SdfWwctxIv7h iSy3JfgyzDRaA2y98SxtfD6M/Z7FdtyUcmlodq7Tq4Ic6JPMGfs4j1V9owJDIK4s IrwYk62UMBCKpSBwQfZmPegRtV1g6FTjAF283DQzWaiVhaV0LbeWmoUQ1YHW2pjT 4ub5T2dDQnuN6nVTGYLCRMy+31KJmdLVkapskNsA3KHDZGKp3a0Z+O0zgEmu7Eln +n4p6Xw1e098JbtaI3uveW/PIg+uOOk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:20 2025 by rpki-client