$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa File: db38879e-c78c-33bc-8a09-d58a3db0e3db.roa (raw, json) Hash identifier: Yjlt7+NUuWNycTDLqigZevr5aTiAw9KFxKmr/3816vQ= Subject key identifier: 85:6E:1F:D5:98:E9:2D:82:51:41:34:D9:5B:B8:60:AA:C0:D8:EF:4A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584AB91C08667A676A44D66FC7C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 14114 IP address blocks: 157.133.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:08:66:7a:67:6a:44:d6:6f:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1e3ec51c-4305-4568-ac36-edaef9909649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:cf:fb:64:86:d7:d6:9b:1d:02:5e:c8:69: ed:cd:56:42:21:b9:38:d6:d6:77:db:f4:74:59:af: 4b:08:a3:1c:21:16:9b:ee:6a:25:14:90:71:76:59: b8:da:a0:0f:50:24:26:48:d8:d2:e2:3f:48:48:0c: 09:ef:4e:97:1a:23:ef:8a:08:cf:49:bd:f1:39:22: 35:da:a8:01:ea:b3:c6:e9:77:a4:29:f5:ea:4e:09: 09:1b:dd:f0:c2:ab:3d:02:61:d5:e6:5a:5f:98:f0: 53:75:4f:7a:2a:5c:12:f3:af:aa:40:37:b6:fe:96: 3f:ed:f7:52:66:34:1c:87:c7:df:1b:18:3b:70:19: 4c:16:b7:83:1e:88:44:66:76:b0:2a:bf:09:72:3a: 6c:45:9f:51:ef:9a:3c:46:12:3e:05:ad:3a:18:9e: 54:71:c2:30:aa:b5:29:c4:89:62:15:bc:1a:82:25: d4:67:b6:1f:b0:25:97:1a:37:58:73:5b:15:f7:d7: 91:37:73:51:a1:ab:e2:fa:7c:01:dd:d1:19:21:89: 70:7a:c5:c5:a6:0c:55:c0:5e:13:bb:09:68:6a:a5: 13:e6:08:6b:32:9f:47:76:f6:b5:a8:54:70:07:6b: 95:86:b0:94:0a:d8:2f:94:94:cd:a8:48:a1:ea:08: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:1F:D5:98:E9:2D:82:51:41:34:D9:5B:B8:60:AA:C0:D8:EF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/db38879e-c78c-33bc-8a09-d58a3db0e3db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d6:c2:05:e9:3d:bb:1a:ac:50:2c:1e:73:3c:d7:fb:8b:52: 8e:a8:3f:a5:fc:4f:5b:d8:ff:5a:6d:66:38:21:76:bb:66:c8: 18:30:64:5c:82:4c:53:51:41:45:da:e8:af:e0:a8:b6:0b:43: a8:ec:51:a7:bf:02:68:c3:a2:50:9c:da:4e:53:e4:28:42:b7: 3e:61:dd:2d:d9:03:dd:55:58:4a:dc:92:72:42:98:cb:cc:05: b3:5a:ac:47:ff:f9:91:6a:82:7b:17:29:15:44:a3:a7:f1:1c: 44:99:f8:af:46:60:44:ac:80:43:5c:c8:20:8d:c0:9f:51:7a: 2f:47:b9:b4:d2:c0:cb:65:b4:c2:51:db:32:c0:a9:68:0d:09: 57:e0:7f:2a:c3:e1:3f:a8:f5:2a:f5:cb:7f:d4:4a:64:68:a0: 7c:9c:e2:d0:c3:b3:fe:e4:6e:57:05:33:d2:40:d1:62:05:35: 8b:04:8e:99:e2:92:ce:27:72:16:9e:46:65:8c:fa:91:e4:b1: 3e:e3:e5:8a:3a:4d:c5:a9:87:b7:30:09:9f:c4:b8:62:7f:14: 6e:70:67:6d:c1:26:23:87:f2:94:de:c2:b8:2c:09:ed:57:96: 40:5c:46:3d:45:e3:d2:b4:4e:8f:af:60:00:3f:4e:1d:cf:af: 86:39:7b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAhmemdqRNZvx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWUzZWM1MWMtNDMwNS00NTY4LWFjMzYtZWRhZWY5OTA5NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstHP+2SG19abHQJeyGntzVZCIbk41tZ32/R0 Wa9LCKMcIRab7molFJBxdlm42qAPUCQmSNjS4j9ISAwJ706XGiPvigjPSb3xOSI1 2qgB6rPG6XekKfXqTgkJG93wwqs9AmHV5lpfmPBTdU96KlwS86+qQDe2/pY/7fdS ZjQch8ffGxg7cBlMFreDHohEZnawKr8JcjpsRZ9R75o8RhI+Ba06GJ5UccIwqrUp xIliFbwagiXUZ7YfsCWXGjdYc1sV99eRN3NRoavi+nwB3dEZIYlwesXFpgxVwF4T uwloaqUT5ghrMp9Hdva1qFRwB2uVhrCUCtgvlJTNqEih6ggcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVuH9WY6S2CUUE02Vu4YKrA2O9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZGIzODg3OWUtYzc4Yy0z M2JjLThhMDktZDU4YTNkYjBlM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrWwgXpPbsarFAsHnM81/uLUo6oP6X8T1vY/1ptZjghdrtmyBgwZFyC TFNRQUXa6K/gqLYLQ6jsUae/AmjDolCc2k5T5ChCtz5h3S3ZA91VWErcknJCmMvM BbNarEf/+ZFqgnsXKRVEo6fxHESZ+K9GYESsgENcyCCNwJ9Rei9HubTSwMtltMJR 2zLAqWgNCVfgfyrD4T+o9Sr1y3/USmRooHyc4tDDs/7kblcFM9JA0WIFNYsEjpni ks4nchaeRmWM+pHksT7j5Yo6TcWph7cwCZ/EuGJ/FG5wZ23BJiOH8pTewrgsCe1X lkBcRj1F49K0To+vYAA/Th3Pr4Y5e5w= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:58 2025 by rpki-client