$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json) Hash identifier: nETM8Mh0sdAVxjYUAzuj5383+94Ii/y8OdR1dCqXONk= Subject key identifier: E8:19:E5:8F:0A:30:5E:2E:97:31:47:53:DF:4A:DD:11:D6:16:6D:AE Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F432858492E13C8B697904F49B8C460C0 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 16679 IP address blocks: 152.157.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c8:b6:97:90:4f:49:b8:c4:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=68e6ccac-3686-4134-b810-cc210fac91c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:f1:9e:01:a8:59:8b:e2:3a:c9:8e:e6:53: a0:d4:30:d3:85:49:3c:43:88:78:33:58:a1:a2:92: 54:ee:41:1c:b9:32:a3:e1:62:c1:a0:e0:5d:75:b0: 25:4c:44:0d:aa:d9:64:d9:b3:ab:e9:d9:c8:bc:52: be:61:20:40:db:0e:ba:49:9d:37:4d:14:2b:64:77: a8:91:87:77:52:a8:40:21:7e:b0:8a:f6:e1:22:52: 5c:b4:92:0c:f0:5d:c6:d8:57:08:6d:9f:76:d5:4c: e1:2c:fd:02:53:4a:90:54:50:d3:b4:2e:36:df:aa: b0:bf:c7:24:75:88:6c:e5:af:71:e1:0e:f8:ea:09: 95:be:0a:29:5e:22:81:a0:15:44:08:55:d2:4f:14: 49:2c:e4:a7:52:f2:8a:cf:bb:2d:c8:73:f6:5e:59: 04:9e:01:e8:72:1f:9b:73:9f:34:8b:fe:64:20:97: a6:e9:e1:bd:cf:ac:86:b2:15:65:a5:9f:01:66:08: ad:71:18:a5:d4:81:23:05:27:bc:07:3c:71:d5:32: d4:1f:3c:a5:4c:ff:cc:55:79:f1:b2:df:f7:87:d4: fc:29:f9:7d:0b:82:69:96:d1:6f:a1:f2:f2:cb:ac: d5:a9:28:1a:19:f4:9d:dd:93:f4:95:f4:8b:e4:ab: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:19:E5:8F:0A:30:5E:2E:97:31:47:53:DF:4A:DD:11:D6:16:6D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b2:ef:d7:34:6e:60:63:5b:db:1c:bf:3c:05:b4:eb:cc:0c: c5:00:2e:5b:84:5a:f2:64:fd:8c:c2:41:c6:69:95:74:76:de: f5:bd:fb:3f:90:b3:74:72:71:78:80:7a:15:0e:d3:a4:45:d9: d7:41:3b:23:34:20:58:73:ea:da:e6:f5:e0:c4:3e:1d:ec:e8: d5:32:ed:8b:3a:a0:26:3b:cf:e5:c2:0b:a9:ff:8b:5b:43:1a: df:9c:c2:de:c7:ef:c6:f6:df:ca:4d:4c:dd:37:f1:1f:85:2b: 28:30:8c:c7:7e:27:6f:68:8b:b7:79:d3:da:7a:0f:60:1c:bc: 01:f7:67:95:da:25:d0:d3:9d:14:5a:17:0c:e2:92:a8:16:46: 1e:29:79:c6:7e:4b:e2:4c:3b:06:4f:78:8a:3c:09:ad:63:d1: a2:a1:6e:8d:3e:58:83:4c:5f:8c:cd:0e:66:a3:71:8e:d7:7c: 22:41:ab:0a:c4:3c:7c:70:83:30:2c:c1:86:f5:1d:12:50:38: 6b:33:1d:e0:84:11:1c:a1:a8:d5:a4:1d:cc:f5:68:8d:b9:fe: 6a:d7:62:30:74:6e:f8:ad:9a:58:25:58:30:63:ea:19:ca:47: aa:24:97:28:bb:c5:b8:0b:ba:60:81:60:a0:73:94:48:c6:3e: b7:a0:48:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8i2l5BPSbjEYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk NjhlNmNjYWMtMzY4Ni00MTM0LWI4MTAtY2MyMTBmYWM5MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbnxngGoWYviOsmO5lOg1DDThUk8Q4h4M1ih opJU7kEcuTKj4WLBoOBddbAlTEQNqtlk2bOr6dnIvFK+YSBA2w66SZ03TRQrZHeo kYd3UqhAIX6wivbhIlJctJIM8F3G2FcIbZ921UzhLP0CU0qQVFDTtC4236qwv8ck dYhs5a9x4Q746gmVvgopXiKBoBVECFXSTxRJLOSnUvKKz7styHP2XlkEngHoch+b c580i/5kIJem6eG9z6yGshVlpZ8BZgitcRil1IEjBSe8Bzxx1TLUHzylTP/MVXnx st/3h9T8Kfl9C4JpltFvofLyy6zVqSgaGfSd3ZP0lfSL5Ksy4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgZ5Y8KMF4ulzFHU99K3RHWFm2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZjdhMGExMzItNzcwOS0z YzE0LTliOTgtMWIwMzViMDQyODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmJ0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6y79c0bmBjW9scvzwFtOvMDMUALluEWvJk/YzCQcZplXR23vW9+z+Q s3RycXiAehUO06RF2ddBOyM0IFhz6trm9eDEPh3s6NUy7Ys6oCY7z+XCC6n/i1tD Gt+cwt7H78b238pNTN038R+FKygwjMd+J29oi7d509p6D2AcvAH3Z5XaJdDTnRRa FwzikqgWRh4pecZ+S+JMOwZPeIo8Ca1j0aKhbo0+WINMX4zNDmajcY7XfCJBqwrE PHxwgzAswYb1HRJQOGszHeCEERyhqNWkHcz1aI25/mrXYjB0bvitmlglWDBj6hnK R6oklyi7xbgLumCBYKBzlEjGPregSNs= -----END CERTIFICATE-----Generated at Sun Apr 27 22:05:10 2025 by rpki-client