$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json) Hash identifier: 1DQcFhegO9hc2OCR0hVYV3SKPPQSFxfs9bW73WaXMQM= Subject key identifier: 49:6E:77:DC:39:EA:6E:27:28:69:B6:A5:1A:2D:C7:ED:8B:41:51:CD Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584A0D6A97F798685102FD90C9C0 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 16679 IP address blocks: 152.157.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:97:f7:98:68:51:02:fd:90:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=1ae4b1f9-561e-41c4-adf9-2ed05976bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:8c:db:30:03:43:62:e4:a1:6d:e0:06:7c: 6b:0d:cb:96:af:7c:8e:41:72:09:ce:2d:99:3e:65: b9:a8:49:cf:28:33:74:1d:95:52:c6:e8:58:12:0d: 74:89:96:ec:c6:ea:9a:af:34:87:e9:2f:f9:61:60: ff:97:23:6a:1e:99:7c:17:32:52:18:73:dc:17:fc: 5c:9c:78:63:aa:52:43:fb:ec:04:10:8d:a8:4e:fc: 8d:93:b9:15:d0:31:ff:03:2d:df:b9:34:58:44:26: 47:ff:84:36:b9:13:e7:50:3d:f6:47:44:10:15:d9: 20:45:d9:49:7d:93:f9:5e:92:ad:66:62:df:98:bb: 05:e0:f1:85:80:9f:10:84:6c:b5:96:21:d8:47:9f: 70:3e:6a:3d:e6:fa:bc:3c:b0:93:b8:f4:f8:23:b3: f9:2e:e3:6b:5b:d6:3f:46:7e:b9:7f:5d:8c:7f:72: 15:d8:56:e7:2c:fa:6c:c1:c6:2b:db:9b:73:a2:e6: f1:2d:53:91:28:1f:fa:27:ac:0e:46:f9:cf:9b:c7: e1:b4:cb:4a:7b:0b:90:82:d7:20:57:ec:74:6b:6a: 24:13:53:e1:de:25:38:f2:05:f0:71:8f:15:ae:a2: 27:a0:91:77:a4:ac:29:4d:17:06:cb:3e:2c:e0:49: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6E:77:DC:39:EA:6E:27:28:69:B6:A5:1A:2D:C7:ED:8B:41:51:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8e:c3:ad:42:75:66:0b:ca:f3:82:d5:e7:16:3c:b4:df:94: 4c:39:f3:29:12:d4:43:33:05:1c:97:63:94:72:aa:21:97:a2: 9c:bc:07:82:10:0a:98:b9:6b:33:d8:9d:6f:36:a1:06:77:8d: cf:9d:74:84:a4:49:14:dc:f8:d8:d8:dc:34:bb:ff:8c:71:52: 38:ee:81:a5:4e:06:5b:79:cd:98:9f:83:c7:cb:51:97:38:cd: 11:6e:82:db:14:7b:41:76:10:d9:dd:15:dd:f9:29:5d:fb:70: d2:d0:9a:26:1d:4b:3c:34:d9:d0:50:34:9e:21:07:4e:27:29: ac:73:6e:5f:d6:79:cf:30:fe:0c:52:90:63:ab:b4:ce:5a:b1: 52:ea:30:99:7b:ae:26:39:2a:42:c6:22:f4:a0:94:b4:d4:ce: 19:d4:45:c4:7d:54:cd:70:1f:af:5d:81:59:2a:7e:46:91:f7: 76:86:0c:1f:ba:32:fb:2a:f9:59:45:6e:06:a0:58:9d:51:0b: 74:ec:c9:91:f5:22:ad:3d:fa:b1:76:2d:e3:c0:5e:7c:c8:f8: 52:6f:64:ff:87:60:3c:70:04:74:04:46:ab:52:35:91:5f:b2: e0:39:e3:ae:48:34:06:70:b8:aa:f7:d2:2b:49:54:d5:1e:93: be:d3:7c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNapf3mGhRAv2QycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk MWFlNGIxZjktNTYxZS00MWM0LWFkZjktMmVkMDU5NzZiZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHiM2zADQ2LkoW3gBnxrDcuWr3yOQXIJzi2Z PmW5qEnPKDN0HZVSxuhYEg10iZbsxuqarzSH6S/5YWD/lyNqHpl8FzJSGHPcF/xc nHhjqlJD++wEEI2oTvyNk7kV0DH/Ay3fuTRYRCZH/4Q2uRPnUD32R0QQFdkgRdlJ fZP5XpKtZmLfmLsF4PGFgJ8QhGy1liHYR59wPmo95vq8PLCTuPT4I7P5LuNrW9Y/ Rn65f12Mf3IV2FbnLPpswcYr25tzoubxLVORKB/6J6wORvnPm8fhtMtKewuQgtcg V+x0a2okE1Ph3iU48gXwcY8VrqInoJF3pKwpTRcGyz4s4EkcTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElud9w56m4nKGm2pRotx+2LQVHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZjdhMGExMzItNzcwOS0z YzE0LTliOTgtMWIwMzViMDQyODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqOw61CdWYLyvOC1ecWPLTflEw58ykS1EMzBRyXY5RyqiGXopy8B4IQ Cpi5azPYnW82oQZ3jc+ddISkSRTc+NjY3DS7/4xxUjjugaVOBlt5zZifg8fLUZc4 zRFugtsUe0F2ENndFd35KV37cNLQmiYdSzw02dBQNJ4hB04nKaxzbl/Wec8w/gxS kGOrtM5asVLqMJl7riY5KkLGIvSglLTUzhnURcR9VM1wH69dgVkqfkaR93aGDB+6 Mvsq+VlFbgagWJ1RC3TsyZH1Iq09+rF2LePAXnzI+FJvZP+HYDxwBHQERqtSNZFf suA5465INAZwuKr30itJVNUek77TfJ4= -----END CERTIFICATE-----Generated at Sun Jun 15 18:03:20 2025 by rpki-client