$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa File: 02fd6998-8257-3284-8895-0fa240a0be15.roa (raw, json) Hash identifier: v1Za4EZVJOsmXRrtKQq5e9rxuHeWkd36pD41f9BlOGA= Subject key identifier: 0C:44:C1:20:DC:B9:FB:62:DD:57:23:F0:02:36:7F:50:C3:84:B5:21 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584996C48589723BE6279EB96300 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 14114 IP address blocks: 157.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:85:89:72:3b:e6:27:9e:b9:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=38048b5d-a103-46cb-81e6-bc23ce5068a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:01:91:80:84:09:a2:54:1d:83:bf:b9:db: e4:5e:8a:eb:25:fb:df:ec:2f:cb:8f:4b:5b:98:37: e7:10:4f:61:9b:73:28:4b:73:ef:f3:10:b0:22:04: f6:d5:58:fb:44:f2:a2:ec:4e:64:92:79:d1:44:9e: 76:f7:23:90:29:af:42:7f:ec:8c:69:08:f4:57:f3: 51:0f:b8:ca:07:a4:79:99:d8:64:63:c6:2e:6d:87: 7c:37:22:30:88:a6:44:60:41:6d:ae:7d:de:a5:7b: 7e:a9:77:3c:e4:a2:9c:da:b4:2a:40:87:2a:84:28: a7:3d:0c:75:ce:1c:64:72:2e:b3:60:21:0f:43:cb: c0:94:2f:81:ff:34:5b:5f:7c:29:46:1e:4c:da:98: 37:b4:d5:f3:ac:02:36:73:17:44:fb:32:4c:63:4c: 07:d9:d9:c9:b9:76:b1:53:b3:62:fd:69:37:8a:19: 52:16:bb:e1:29:70:ec:a4:32:31:53:f8:35:80:db: 6a:80:b4:ab:7c:29:6a:71:bf:6c:80:63:c6:8c:f6: 8b:12:dc:f6:8c:3b:b1:7d:e3:51:93:9b:e4:ce:3a: c8:37:58:fa:e6:fb:11:df:52:0c:59:0a:f5:15:ad: ae:41:8f:74:98:c9:1e:68:85:da:d0:b6:dc:a9:dc: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:C1:20:DC:B9:FB:62:DD:57:23:F0:02:36:7F:50:C3:84:B5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:24:ae:bd:44:46:b6:f2:8e:00:f1:1b:dc:47:63:f7:cd:d5: e8:3e:9f:bc:b8:b5:20:09:2b:3e:93:cf:a1:eb:e1:39:d0:4e: 18:ac:8d:f3:db:40:17:72:7e:15:1b:9d:50:9d:6d:ca:58:06: 0f:1b:24:cb:d9:ed:e8:49:51:e7:11:3c:9f:a3:b4:58:a6:ca: 59:09:ec:8b:a7:e7:57:5c:59:ff:ba:f0:8b:6a:91:46:33:ee: 96:47:9f:b6:1b:30:5a:2f:a7:69:06:7c:32:e6:74:8a:f5:b2: bf:e5:78:f8:f3:a4:15:68:b0:5e:b4:b1:c1:ba:02:88:00:6c: 3e:10:80:55:f3:34:36:da:b2:3b:9b:a0:34:8c:25:77:4e:d3: f5:94:60:8f:d6:91:0a:78:ce:2d:b7:73:e7:29:23:d8:65:63: 66:87:fb:16:55:c6:d0:4f:d4:76:6e:6e:c1:c7:db:ee:e4:91: 8c:52:45:4b:90:7c:55:90:66:99:18:fe:7e:58:5a:2d:1f:0a: 42:73:cb:39:e4:b7:fb:68:a4:07:a2:1a:2c:a9:04:11:5f:3f: 60:cf:d7:ae:b0:40:6b:0c:d9:2d:a2:f5:b4:76:89:ce:1b:69: 1c:6d:23:3c:8c:73:51:20:1b:a8:f8:dd:f7:d6:c3:94:c0:bd: 7f:e4:d3:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIWJcjvmJ565YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MzgwNDhiNWQtYTEwMy00NmNiLTgxZTYtYmMyM2NlNTA2OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKABkYCECaJUHYO/udvkXorrJfvf7C/Lj0tb mDfnEE9hm3MoS3Pv8xCwIgT21Vj7RPKi7E5kknnRRJ529yOQKa9Cf+yMaQj0V/NR D7jKB6R5mdhkY8YubYd8NyIwiKZEYEFtrn3epXt+qXc85KKc2rQqQIcqhCinPQx1 zhxkci6zYCEPQ8vAlC+B/zRbX3wpRh5M2pg3tNXzrAI2cxdE+zJMY0wH2dnJuXax U7Ni/Wk3ihlSFrvhKXDspDIxU/g1gNtqgLSrfClqcb9sgGPGjPaLEtz2jDuxfeNR k5vkzjrIN1j65vsR31IMWQr1Fa2uQY90mMkeaIXa0LbcqdwekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxEwSDcufti3Vcj8AI2f1DDhLUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDJmZDY5OTgtODI1Ny0z Mjg0LTg4OTUtMGZhMjQwYTBiZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0krr1ERrbyjgDxG9xHY/fN1eg+n7y4tSAJKz6Tz6Hr4TnQThisjfPb QBdyfhUbnVCdbcpYBg8bJMvZ7ehJUecRPJ+jtFimylkJ7Iun51dcWf+68ItqkUYz 7pZHn7YbMFovp2kGfDLmdIr1sr/lePjzpBVosF60scG6AogAbD4QgFXzNDbasjub oDSMJXdO0/WUYI/WkQp4zi23c+cpI9hlY2aH+xZVxtBP1HZubsHH2+7kkYxSRUuQ fFWQZpkY/n5YWi0fCkJzyznkt/topAeiGiypBBFfP2DP166wQGsM2S2i9bR2ic4b aRxtIzyMc1EgG6j43ffWw5TAvX/k0xU= -----END CERTIFICATE-----Generated at Sat May 10 13:22:18 2025 by rpki-client