$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa File: db38879e-c78c-33bc-8a09-d58a3db0e3db.roa (raw, json) Hash identifier: 6HVRiyRCMEV0arqgooSn/cYxmMAA4ZRmI1hs5kQfses= Subject key identifier: AF:EB:34:5A:B5:DB:19:1B:6F:18:60:8E:C4:15:6F:64:1D:D4:8B:72 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285849D9B790123E0D4D9CF7FD9D60 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa Signing time: Wed 14 May 2025 12:34:06 +0000 ROA not before: Wed 14 May 2025 12:34:06 +0000 ROA not after: Tue 12 Aug 2025 12:34:06 +0000 asID: 14114 IP address blocks: 157.133.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:b7:90:12:3e:0d:4d:9c:f7:fd:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: May 14 12:34:06 2025 GMT Not After : Aug 12 12:34:06 2025 GMT Subject: CN=c3c46550-e152-4982-846a-ca5057ddcb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:e6:ec:96:26:4b:32:1c:03:fc:17:c5:76: 3b:bd:e2:45:a5:a9:41:8c:8c:03:b3:cc:6c:46:fd: 30:9e:cd:4d:f0:09:f3:6f:4c:b1:c1:54:eb:0d:8d: ba:4f:f0:f3:a1:34:89:3e:0f:e8:12:ea:b7:02:e5: 08:29:3c:cc:24:fb:26:04:ba:3f:7e:81:9f:21:0e: 96:dd:65:c3:c9:44:a0:21:17:e4:69:8b:59:e3:d1: f3:ca:f5:0d:34:2f:ae:93:ea:0e:cc:54:07:5a:94: df:3c:1b:4b:9c:96:ef:05:80:64:a8:81:15:a7:4b: d5:5a:79:fa:a5:ac:a1:a6:0e:df:14:63:78:51:d9: 30:a6:7f:32:cf:dd:2a:01:07:e1:94:1b:b2:ee:37: 4a:7a:13:1a:ad:8d:93:45:90:66:aa:4f:4b:9b:28: c5:fc:43:a4:98:e2:7c:47:0e:7f:63:e4:88:62:d0: f7:1e:69:1c:39:b2:bf:91:63:8d:07:b7:04:13:4f: 81:9f:46:4e:39:10:5e:cb:a3:eb:87:75:a2:2d:6c: 7c:8b:e0:34:c7:a2:e0:14:20:f7:4b:44:9a:9b:86: 09:3f:42:4e:75:17:16:47:26:3d:63:0d:e3:a9:1d: f2:17:93:28:a4:48:9f:6d:77:4b:18:b8:7e:d0:99: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:34:5A:B5:DB:19:1B:6F:18:60:8E:C4:15:6F:64:1D:D4:8B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:32:2a:d6:ee:71:c9:44:44:81:8c:b2:93:25:29:5c:f8:c8: 59:87:30:b7:36:b1:02:5e:26:51:83:b4:98:2d:ac:ad:ae:6b: 5e:2b:95:0e:23:b2:d3:fb:99:b2:66:dd:c3:23:95:b7:2d:85: 16:09:5f:2d:95:ff:52:b6:e7:3d:15:fa:39:65:90:75:b6:8f: 74:97:6b:71:c6:f9:0e:38:cd:31:ae:86:b7:af:cd:49:43:0e: b3:04:ee:1c:25:3e:82:60:7c:17:ba:da:c6:f0:c5:65:c0:94: e7:8b:f1:d8:d0:75:b4:94:70:50:cd:f3:43:a7:08:11:cf:e3: e1:64:74:29:c2:78:91:be:f3:13:6c:8a:a9:c5:51:28:25:b9: ac:42:d3:99:3e:f2:2d:d0:00:97:97:05:ae:d4:51:01:40:ac: 42:9e:06:92:68:e7:02:67:43:2e:da:d1:ce:b9:e7:e0:03:23: 85:9c:17:08:6d:26:10:4c:68:2e:ce:8d:a4:48:55:9b:a1:8e: 22:f4:c2:70:b5:2e:98:33:3f:e1:a7:a3:c4:36:54:0c:fc:3a: 1a:88:27:45:08:2b:35:e2:8e:bb:ab:33:64:6a:26:40:37:5c: cc:08:dd:7d:52:18:06:a1:ba:d0:69:11:08:eb:a9:81:b6:a4: 31:51:c3:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZt5ASPg1NnPf9nWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDUxNDEyMzQwNloXDTI1MDgxMjEyMzQwNlowLzEtMCsGA1UEAxMk YzNjNDY1NTAtZTE1Mi00OTgyLTg0NmEtY2E1MDU3ZGRjYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hfm7JYmSzIcA/wXxXY7veJFpalBjIwDs8xs Rv0wns1N8Anzb0yxwVTrDY26T/DzoTSJPg/oEuq3AuUIKTzMJPsmBLo/foGfIQ6W 3WXDyUSgIRfkaYtZ49HzyvUNNC+uk+oOzFQHWpTfPBtLnJbvBYBkqIEVp0vVWnn6 payhpg7fFGN4Udkwpn8yz90qAQfhlBuy7jdKehMarY2TRZBmqk9LmyjF/EOkmOJ8 Rw5/Y+SIYtD3HmkcObK/kWONB7cEE0+Bn0ZOORBey6Prh3WiLWx8i+A0x6LgFCD3 S0Sam4YJP0JOdRcWRyY9Yw3jqR3yF5MopEifbXdLGLh+0Jm6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/rNFq12xkbbxhgjsQVb2Qd1ItyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGIzODg3OWUtYzc4Yy0z M2JjLThhMDktZDU4YTNkYjBlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYyKtbucclERIGMspMlKVz4yFmHMLc2sQJeJlGDtJgtrK2ua14rlQ4j stP7mbJm3cMjlbcthRYJXy2V/1K25z0V+jllkHW2j3SXa3HG+Q44zTGuhrevzUlD DrME7hwlPoJgfBe62sbwxWXAlOeL8djQdbSUcFDN80OnCBHP4+FkdCnCeJG+8xNs iqnFUSgluaxC05k+8i3QAJeXBa7UUQFArEKeBpJo5wJnQy7a0c655+ADI4WcFwht JhBMaC7OjaRIVZuhjiL0wnC1LpgzP+Gno8Q2VAz8OhqIJ0UIKzXijrurM2RqJkA3 XMwI3X1SGAahutBpEQjrqYG2pDFRw9k= -----END CERTIFICATE-----Generated at Sun Jun 15 13:55:26 2025 by rpki-client