$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa File: a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa (raw, json) Hash identifier: S0jOwOZlfRkmQPv56N3Bn31nDwOfizDg4l0RuLN4AYU= Subject key identifier: DF:31:CD:66:E5:E7:AE:1E:77:D0:50:7A:47:2A:05:10:88:46:DF:EA Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285849D9B62DFD84DD09ACCB7300C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa Signing time: Wed 14 May 2025 12:31:18 +0000 ROA not before: Wed 14 May 2025 12:31:18 +0000 ROA not after: Tue 12 Aug 2025 12:31:18 +0000 asID: 14114 IP address blocks: 157.133.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:b6:2d:fd:84:dd:09:ac:cb:73:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: May 14 12:31:18 2025 GMT Not After : Aug 12 12:31:18 2025 GMT Subject: CN=e2dd3d02-1ac1-4a84-a104-65c15662952c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:ec:91:b4:c1:d2:37:65:ba:44:62:04:c1: 5f:1a:42:28:a6:ce:cf:36:c2:45:be:9f:26:f0:a2: 78:38:94:d1:d1:a7:04:2a:47:4b:b8:d7:04:c2:b3: a2:7b:35:ba:05:05:f1:5f:d8:c9:bd:1e:cd:07:4c: 3e:dc:2c:c6:eb:9f:42:33:ea:3d:5f:3c:6f:50:b5: 39:09:5d:0b:12:08:f1:e4:9b:bc:80:d1:0c:4b:4d: 28:29:aa:fd:d5:14:d8:60:d6:8f:a3:51:7a:41:82: 05:c5:85:65:db:5a:72:7c:ba:2d:c7:cf:e1:10:0f: ca:42:2d:b1:43:8b:82:9b:77:c4:72:d1:24:67:b1: da:27:9a:86:33:7e:d5:ec:29:a3:21:b8:91:a1:1a: 45:86:87:ea:68:dc:59:f4:a6:d6:1e:5e:54:38:ee: 56:4a:90:75:9b:c0:82:38:93:37:25:bb:87:57:5c: 31:6f:67:b3:ad:30:7d:ad:f6:bd:8c:f0:37:0a:43: 99:88:12:16:8f:3f:b0:fa:1f:6b:a9:c6:d4:46:a1: 78:78:e3:4b:ab:a1:44:f5:50:d8:e7:6b:17:60:86: e2:47:94:42:09:cb:d4:f1:00:f6:d4:f5:48:c6:6e: 4a:92:43:df:8a:5a:91:d2:02:97:5d:5b:46:64:14: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:31:CD:66:E5:E7:AE:1E:77:D0:50:7A:47:2A:05:10:88:46:DF:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e6:42:2d:a5:b8:da:b5:ae:0f:bc:13:95:f3:e1:3f:92:ef: d8:b4:49:e1:8e:c4:f3:47:54:2a:62:ee:d1:13:39:15:68:da: 99:2f:ad:39:f8:ed:da:c2:7a:eb:c6:21:16:d0:c1:f7:23:6a: fa:fc:28:b4:c6:7e:a4:3e:4f:ff:d2:d7:86:77:14:01:1a:88: 64:e7:be:08:12:7a:ed:ce:cf:9d:4a:7d:25:e4:7e:b4:6b:a8: aa:a7:b1:b9:8e:03:66:ad:66:2a:14:a4:d4:dc:ec:76:af:6f: b7:51:f3:22:f8:50:ee:54:5b:d8:22:02:ba:cb:9b:d1:c8:68: f7:b3:79:54:45:83:4c:ff:89:48:ee:bd:1c:93:a8:9e:8e:41: 3e:f9:31:c4:77:16:b2:f5:36:cd:e4:7f:b8:14:fd:e8:c7:65: 7c:46:28:9e:4d:db:99:6e:69:17:37:de:e1:0a:99:72:31:3d: dc:e4:0b:92:f5:8e:bc:37:67:b4:be:ff:39:5c:a9:56:2e:cb: 80:f8:f3:ad:12:84:c4:f2:e2:d9:61:65:26:77:7f:38:2b:83: 35:6e:51:41:ef:06:0d:bb:af:5b:40:71:66:24:f3:36:4e:03: 6e:c9:9b:c0:77:01:f7:f5:e1:84:e3:a3:b7:14:01:55:ad:a8: b2:63:6e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZti39hN0JrMtzAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDUxNDEyMzExOFoXDTI1MDgxMjEyMzExOFowLzEtMCsGA1UEAxMk ZTJkZDNkMDItMWFjMS00YTg0LWExMDQtNjVjMTU2NjI5NTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/bskbTB0jdlukRiBMFfGkIops7PNsJFvp8m 8KJ4OJTR0acEKkdLuNcEwrOiezW6BQXxX9jJvR7NB0w+3CzG659CM+o9XzxvULU5 CV0LEgjx5Ju8gNEMS00oKar91RTYYNaPo1F6QYIFxYVl21pyfLotx8/hEA/KQi2x Q4uCm3fEctEkZ7HaJ5qGM37V7CmjIbiRoRpFhofqaNxZ9KbWHl5UOO5WSpB1m8CC OJM3JbuHV1wxb2ezrTB9rfa9jPA3CkOZiBIWjz+w+h9rqcbURqF4eONLq6FE9VDY 52sXYIbiR5RCCcvU8QD21PVIxm5KkkPfilqR0gKXXVtGZBT8hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8xzWbl564ed9BQekcqBRCIRt/qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYTYwZjM5MGUtNmM4MS0z YWZmLWI4ZTAtZTgxNzYwYjJjZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYVIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXmQi2luNq1rg+8E5Xz4T+S79i0SeGOxPNHVCpi7tETORVo2pkvrTn4 7drCeuvGIRbQwfcjavr8KLTGfqQ+T//S14Z3FAEaiGTnvggSeu3Oz51KfSXkfrRr qKqnsbmOA2atZioUpNTc7Havb7dR8yL4UO5UW9giArrLm9HIaPezeVRFg0z/iUju vRyTqJ6OQT75McR3FrL1Ns3kf7gU/ejHZXxGKJ5N25luaRc33uEKmXIxPdzkC5L1 jrw3Z7S+/zlcqVYuy4D4860ShMTy4tlhZSZ3fzgrgzVuUUHvBg27r1tAcWYk8zZO A27Jm8B3Aff14YTjo7cUAVWtqLJjbmk= -----END CERTIFICATE-----Generated at Mon Jun 16 15:28:20 2025 by rpki-client