$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa File: dab1f656-370e-3952-a1d7-0dd4adb670a3.roa (raw, json) Hash identifier: dj4pqtRvW+ZNGjPGQIY8+6qvqtCQewglLZP+in29614= Subject key identifier: 7B:85:5D:10:69:C5:1C:41:4E:88:D8:5C:7E:D7:E9:FE:5A:BF:0D:6D Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A0D6A97501DA19C21195D7A00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 0 IP address blocks: 157.133.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:97:50:1d:a1:9c:21:19:5d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=632498cb-0ae8-400e-b639-e26912a62fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:7f:59:1d:c4:d7:69:d8:06:82:47:1d:4a: dc:51:a4:4e:3d:5d:9d:ce:fd:50:d3:23:d8:8c:74: 97:ed:68:08:73:d2:2e:92:26:1a:5a:c9:44:3f:5a: 9d:4f:2c:13:c7:90:05:cf:16:2e:99:dd:57:1b:78: 3c:87:5a:c2:a6:41:49:19:33:93:1a:17:19:1f:46: 65:7e:72:58:2c:79:a9:13:04:21:b3:9e:ee:1a:a1: a6:2f:ec:fd:2c:62:80:67:55:76:31:69:0e:2d:d6: 34:15:d4:eb:64:b7:e3:1d:c2:2f:f5:61:62:04:3d: 69:58:d8:1b:c1:a0:f5:ba:df:68:0a:6a:30:8d:f8: 6f:75:61:0f:ea:32:0f:e8:84:11:49:8d:4f:91:d9: 96:a6:d6:b6:f1:4d:af:01:1a:93:76:4d:2c:32:0e: 9d:a9:9e:ae:8c:fb:6a:5d:ac:ff:f8:42:94:23:cf: b0:4f:2b:fd:85:29:62:26:4c:4a:66:94:a8:64:5a: cc:4a:9f:25:73:2b:63:fb:06:56:b4:c7:6f:a3:67: 63:95:fc:c0:d5:06:79:51:1d:8e:13:cf:39:1c:99: a1:93:56:96:62:32:82:27:c6:77:12:7f:27:cb:13: 9d:5e:4d:f5:27:62:e6:6b:7f:b3:a5:ac:42:80:c7: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:85:5D:10:69:C5:1C:41:4E:88:D8:5C:7E:D7:E9:FE:5A:BF:0D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/dab1f656-370e-3952-a1d7-0dd4adb670a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f9:45:85:d9:9f:32:d8:3d:54:bd:0f:3b:aa:d3:2f:1e:4a: 25:9f:32:82:78:3c:34:21:10:92:7f:6c:59:7c:cc:7e:6d:90: bf:d3:51:95:fe:10:5b:5a:97:3d:37:23:43:b7:8c:e9:2f:da: 19:71:df:19:f1:f5:e3:6d:74:16:27:13:79:51:b2:94:67:27: b2:03:b3:8d:d4:44:05:72:87:3b:78:b9:91:03:7f:37:ef:e0: 77:4c:2a:84:32:e4:e5:8d:57:46:b1:d3:42:c6:f8:a4:91:2a: 1a:be:a7:14:a6:a8:de:37:89:58:0a:d1:3b:61:71:c7:e1:66: e3:76:67:6f:23:a7:cd:f8:0a:db:7c:ed:28:e4:9d:94:2e:e8: cd:20:18:be:c6:f4:9f:76:e7:fb:37:f6:0b:2e:02:13:b6:d2: e0:d2:34:76:6f:8d:c7:9a:2f:11:c2:f9:45:5e:af:2e:af:22: e3:e9:47:f7:29:7c:29:d3:78:b4:48:fc:26:df:68:59:4b:af: 97:6b:49:80:97:7f:bf:fe:7d:3c:57:d0:b9:3b:91:33:5c:bb: ae:b6:d8:52:93:eb:67:83:8c:64:ff:4a:77:51:0c:10:ca:e8: a8:a3:0e:0f:0f:05:e8:c9:de:cb:89:5f:5f:6a:b4:62:ab:39: 13:b3:73:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNapdQHaGcIRldegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk NjMyNDk4Y2ItMGFlOC00MDBlLWI2MzktZTI2OTEyYTYyZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTp/WR3E12nYBoJHHUrcUaROPV2dzv1Q0yPY jHSX7WgIc9IukiYaWslEP1qdTywTx5AFzxYumd1XG3g8h1rCpkFJGTOTGhcZH0Zl fnJYLHmpEwQhs57uGqGmL+z9LGKAZ1V2MWkOLdY0FdTrZLfjHcIv9WFiBD1pWNgb waD1ut9oCmowjfhvdWEP6jIP6IQRSY1PkdmWpta28U2vARqTdk0sMg6dqZ6ujPtq Xaz/+EKUI8+wTyv9hSliJkxKZpSoZFrMSp8lcytj+wZWtMdvo2djlfzA1QZ5UR2O E885HJmhk1aWYjKCJ8Z3En8nyxOdXk31J2Lma3+zpaxCgMcfIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuFXRBpxRxBTojYXH7X6f5avw1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGFiMWY2NTYtMzcwZS0z OTUyLWExZDctMGRkNGFkYjY3MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD5RYXZnzLYPVS9Dzuq0y8eSiWfMoJ4PDQhEJJ/bFl8zH5tkL/TUZX+ EFtalz03I0O3jOkv2hlx3xnx9eNtdBYnE3lRspRnJ7IDs43URAVyhzt4uZEDfzfv 4HdMKoQy5OWNV0ax00LG+KSRKhq+pxSmqN43iVgK0TthccfhZuN2Z28jp834Ctt8 7SjknZQu6M0gGL7G9J925/s39gsuAhO20uDSNHZvjceaLxHC+UVery6vIuPpR/cp fCnTeLRI/CbfaFlLr5drSYCXf7/+fTxX0Lk7kTNcu6622FKT62eDjGT/SndRDBDK 6KijDg8PBejJ3suJX19qtGKrOROzc0o= -----END CERTIFICATE-----Generated at Sun Jun 15 18:37:25 2025 by rpki-client