$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa File: 20dd2557-9e73-38c0-8e96-577d764bbbdf.roa (raw, json) Hash identifier: l/J1gJh3YxZlWeSQ87Nep5xV9geCzFGZXCqCe+QGyr4= Subject key identifier: 58:02:12:77:1F:9F:94:19:19:8C:42:79:17:7A:41:67:20:69:BA:BD Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A497059F47A8E1B24B4C37D80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 14114 IP address blocks: 157.133.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:59:f4:7a:8e:1b:24:b4:c3:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=c248f2ab-90bb-4934-ac55-d11be2bd8d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5d:46:33:6e:90:cb:69:27:0f:02:0c:ee:31: d1:6c:b6:3e:b1:7f:95:9b:24:54:fb:9a:e1:01:d2: 38:bb:b7:4f:2f:7b:50:59:fa:ce:da:6e:c4:38:fb: 90:e7:a8:8b:6a:45:33:45:8d:39:e1:7a:f3:5d:06: bb:77:f1:44:dc:03:4b:5f:ac:79:fa:aa:63:45:37: 17:a1:c3:a0:56:0c:08:13:4e:2b:62:50:1f:26:3b: a7:67:c5:74:4d:fb:38:1d:1b:38:4c:4d:46:89:fe: f5:1a:09:92:96:8a:ad:6b:00:5c:91:c5:a4:c7:14: d7:ba:fe:76:8d:a8:3e:57:32:02:e7:3a:c1:0b:71: 6f:df:48:34:5b:7e:c6:06:43:b3:9b:ca:1c:85:c7: eb:5c:fb:52:49:89:ed:d6:c7:ca:b4:49:b7:15:90: e6:d1:68:58:01:68:42:39:08:fe:f5:69:1a:ea:60: 3b:1a:7f:65:58:56:43:4f:0c:cf:5a:4e:d8:59:cb: 76:4a:96:74:9a:b9:67:11:d7:f7:01:15:cf:cf:2d: a1:8c:43:ea:19:37:d1:9c:b2:75:8e:f0:ef:35:97: c1:7a:84:76:a1:c7:14:7b:e0:79:a0:c2:01:e4:32: cf:69:2d:ee:25:f4:41:4c:6b:c6:eb:2e:0a:dd:b1: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:02:12:77:1F:9F:94:19:19:8C:42:79:17:7A:41:67:20:69:BA:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/20dd2557-9e73-38c0-8e96-577d764bbbdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:11:3e:bb:3c:3d:32:eb:1f:c7:44:52:12:4a:3d:30:02:38: b4:b2:34:32:87:9a:d6:98:15:1d:b1:5c:17:c5:95:40:88:6b: 33:d8:34:42:18:36:db:ee:17:77:73:d0:b8:b0:42:bc:58:28: c4:ad:cb:5a:e8:cb:43:53:77:53:d2:1b:af:b3:f0:21:aa:ea: a1:fc:9e:5c:54:fa:61:d2:49:18:87:e2:6d:eb:d3:14:7b:6c: 3e:61:d4:73:d7:2f:6f:b1:b3:ac:18:51:87:9e:d6:e3:e7:e3: 8d:27:0a:f8:6e:dd:5c:9b:c7:53:b5:0f:be:ed:32:92:21:14: 4e:d9:32:b2:87:5e:fa:08:62:f1:9a:9a:c3:b4:62:ba:ae:79: 61:24:87:06:e8:cc:31:7c:21:75:9e:fa:ae:34:35:e8:1f:91: 9d:e9:54:12:64:69:e3:7d:2b:d1:58:4f:d0:19:56:87:06:b4: 26:2e:25:81:84:8b:f6:70:6c:ab:fa:be:32:85:85:65:da:52: 65:77:6e:e7:9f:77:a8:96:e8:a9:b4:91:a7:1e:de:ff:e1:68: 4f:17:2e:9b:37:f5:92:4b:f4:d1:81:75:6d:0e:d0:76:f0:fe: a9:0d:90:d8:bb:fe:35:2d:f0:8a:a8:56:e4:40:d5:33:52:ce: 83:97:0d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFn0eo4bJLTDfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk YzI0OGYyYWItOTBiYi00OTM0LWFjNTUtZDExYmUyYmQ4ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF1GM26Qy2knDwIM7jHRbLY+sX+VmyRU+5rh AdI4u7dPL3tQWfrO2m7EOPuQ56iLakUzRY054XrzXQa7d/FE3ANLX6x5+qpjRTcX ocOgVgwIE04rYlAfJjunZ8V0Tfs4HRs4TE1Gif71GgmSloqtawBckcWkxxTXuv52 jag+VzIC5zrBC3Fv30g0W37GBkOzm8ochcfrXPtSSYnt1sfKtEm3FZDm0WhYAWhC OQj+9Wka6mA7Gn9lWFZDTwzPWk7YWct2SpZ0mrlnEdf3ARXPzy2hjEPqGTfRnLJ1 jvDvNZfBeoR2occUe+B5oMIB5DLPaS3uJfRBTGvG6y4K3bE8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgCEncfn5QZGYxCeRd6QWcgabq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMjBkZDI1NTctOWU3My0z OGMwLThlOTYtNTc3ZDc2NGJiYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQRPrs8PTLrH8dEUhJKPTACOLSyNDKHmtaYFR2xXBfFlUCIazPYNEIY NtvuF3dz0LiwQrxYKMSty1roy0NTd1PSG6+z8CGq6qH8nlxU+mHSSRiH4m3r0xR7 bD5h1HPXL2+xs6wYUYee1uPn440nCvhu3Vybx1O1D77tMpIhFE7ZMrKHXvoIYvGa msO0YrqueWEkhwbozDF8IXWe+q40NegfkZ3pVBJkaeN9K9FYT9AZVocGtCYuJYGE i/ZwbKv6vjKFhWXaUmV3buefd6iW6Km0kace3v/haE8XLps39ZJL9NGBdW0O0Hbw /qkNkNi7/jUt8IqoVuRA1TNSzoOXDVs= -----END CERTIFICATE-----Generated at Mon Jun 30 05:20:09 2025 by rpki-client