$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa File: 9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa (raw, json) Hash identifier: /j+qmOaNwykEkPZBgBdm9QigEQllFVey1ZhitlediNs= Subject key identifier: 9D:68:78:6C:86:73:1E:45:AD:92:25:52:7B:52:22:E2:60:D5:BE:7D Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584A46A5AAD9EC2EDB3FCDC5EB80 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 46154 IP address blocks: 157.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:aa:d9:ec:2e:db:3f:cd:c5:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=a6e96353-ec0e-4ef0-80e1-b97b7360e973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:fb:fb:1b:5d:23:19:9d:35:0b:e4:f6:50: 2c:d2:96:5f:bc:71:82:87:d0:e3:33:44:a3:77:4b: 43:34:be:99:ac:99:6d:53:d0:d8:57:41:f4:ad:fc: 0d:1c:46:c3:55:73:5d:69:e7:05:95:bd:46:ae:d0: aa:24:fd:4c:6b:68:34:f2:4c:e7:91:ce:f1:cf:1e: a5:6a:22:d5:78:b9:70:dd:c5:f1:9a:c3:86:4e:1e: 3c:96:82:d9:ff:02:74:31:38:83:a0:f2:d9:8b:da: b5:6c:1e:27:19:71:57:07:c2:35:51:c0:a0:b9:42: 1e:c8:28:6c:55:1c:f5:79:0a:42:24:e2:e7:8c:fe: 5f:a4:47:e1:c7:2e:66:7c:4b:dc:e9:d3:32:6a:5f: c4:75:73:64:dd:6f:0d:d0:20:e5:90:d3:02:ab:0a: ed:f2:72:da:69:35:6c:d9:bd:79:fe:5a:1e:82:16: 6b:1c:4d:dc:66:08:e4:26:76:58:d5:9b:ba:82:86: 21:c8:06:85:71:22:c8:fa:1e:59:53:14:c8:7d:eb: ee:65:1c:31:f2:b1:33:dc:5d:d1:49:2b:17:5c:da: 8f:36:71:5c:2d:d2:87:ea:94:8d:13:b7:f5:45:ce: 7b:c3:82:2f:a2:83:34:b3:cc:43:66:04:89:5e:d0: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:68:78:6C:86:73:1E:45:AD:92:25:52:7B:52:22:E2:60:D5:BE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 157.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0c:aa:50:16:8b:bc:7e:e7:78:ac:93:e1:ae:5d:8f:5b:69: 71:ea:d6:55:bd:5b:38:f0:ae:1b:8e:b7:14:07:80:31:c3:25: 25:20:72:68:61:ac:52:9c:5e:a2:a0:1f:00:04:56:3d:67:0f: d0:46:1a:85:a3:68:8e:4b:16:9f:cc:8c:27:c5:0f:66:47:73: 2b:9a:94:a4:bf:0c:e0:45:20:55:f9:57:0b:4d:40:03:82:e5: 0e:30:6b:32:a2:99:50:61:aa:46:be:95:55:14:5f:56:f7:f6: 82:f3:aa:b5:14:b2:fd:45:c1:a0:fb:b6:62:d1:64:76:4c:a0: 7d:72:d7:89:11:50:45:e9:08:de:9d:18:d9:db:5c:96:a1:02: 19:4b:dd:1b:ac:5a:c7:db:f0:f2:43:79:26:d1:e2:91:f2:59: 1f:60:27:65:5e:ab:65:63:e5:2b:35:9b:43:a9:1d:2d:c7:35: 3d:e0:4f:e2:eb:d9:b4:07:47:64:f4:ae:76:2c:e9:12:4f:51: ad:0a:ed:f2:67:78:ea:03:9f:25:72:ad:f9:a8:33:af:ec:37: 6f:1e:5c:68:c9:dd:88:2d:05:88:f8:23:d0:e8:37:76:9b:20: a6:40:17:ca:76:90:92:0d:ba:a4:72:70:0d:e6:9d:47:41:54: 19:22:3e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGparZ7C7bP83F64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTZlOTYzNTMtZWMwZS00ZWYwLTgwZTEtYjk3YjczNjBlOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2b7+xtdIxmdNQvk9lAs0pZfvHGCh9DjM0Sj d0tDNL6ZrJltU9DYV0H0rfwNHEbDVXNdaecFlb1GrtCqJP1Ma2g08kznkc7xzx6l aiLVeLlw3cXxmsOGTh48loLZ/wJ0MTiDoPLZi9q1bB4nGXFXB8I1UcCguUIeyChs VRz1eQpCJOLnjP5fpEfhxy5mfEvc6dMyal/EdXNk3W8N0CDlkNMCqwrt8nLaaTVs 2b15/loeghZrHE3cZgjkJnZY1Zu6goYhyAaFcSLI+h5ZUxTIfevuZRwx8rEz3F3R SSsXXNqPNnFcLdKH6pSNE7f1Rc57w4IvooM0s8xDZgSJXtAx+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1oeGyGcx5FrZIlUntSIuJg1b59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvOWQ1MWY5NWEtMGMzMy0z YWEzLWI2ZWUtZGIwZmY4NDkxOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnTQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoMqlAWi7x+53isk+GuXY9baXHq1lW9WzjwrhuOtxQHgDHDJSUgcmhh rFKcXqKgHwAEVj1nD9BGGoWjaI5LFp/MjCfFD2ZHcyualKS/DOBFIFX5VwtNQAOC 5Q4wazKimVBhqka+lVUUX1b39oLzqrUUsv1FwaD7tmLRZHZMoH1y14kRUEXpCN6d GNnbXJahAhlL3RusWsfb8PJDeSbR4pHyWR9gJ2Veq2Vj5Ss1m0OpHS3HNT3gT+Lr 2bQHR2T0rnYs6RJPUa0K7fJneOoDnyVyrfmoM6/sN28eXGjJ3YgtBYj4I9DoN3ab IKZAF8p2kJINuqRycA3mnUdBVBkiPqs= -----END CERTIFICATE-----Generated at Fri Jul 4 13:26:32 2025 by rpki-client