$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa File: 2ffdaf98-6513-3f50-a698-66a5e58df24d.roa (raw, json) Hash identifier: DRDRQfWtOHzu7QzLIzGOQlBEg3SnfbrjhfGu4RuVizQ= Subject key identifier: 87:10:87:1F:8F:DB:ED:67:40:96:CA:A3:95:17:0F:E3:B9:FC:85:95 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F43285849D9B6FD0BA27E65B001B30880 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa Signing time: Wed 14 May 2025 12:32:56 +0000 ROA not before: Wed 14 May 2025 12:32:56 +0000 ROA not after: Tue 12 Aug 2025 12:32:56 +0000 asID: 14114 IP address blocks: 157.133.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:b6:fd:0b:a2:7e:65:b0:01:b3:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: May 14 12:32:56 2025 GMT Not After : Aug 12 12:32:56 2025 GMT Subject: CN=cc1c5191-d97e-4e5f-9f85-76f171f67a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:c7:40:5e:8d:de:df:0a:44:b9:3e:18:c6: ce:87:95:27:2a:fb:45:77:d5:da:47:fa:bb:70:83: ed:76:c7:9d:ec:a1:f3:90:87:04:18:9f:11:89:4f: f8:b9:24:bb:d5:15:b2:1b:57:62:8a:8f:7f:bc:29: 85:9b:16:72:36:c9:c2:90:f8:4e:e3:09:8a:4d:d0: 0e:fa:5c:e1:6b:0b:49:8a:9d:da:e4:b4:42:9c:34: 75:33:72:3e:8b:58:4c:d7:38:93:80:f3:e4:d7:14: ac:45:76:59:d4:55:74:8c:03:d5:89:ae:42:ca:b8: 9a:a6:d4:4a:27:a0:97:15:1c:c4:78:45:bb:14:75: f0:b2:b3:63:c6:64:aa:74:75:63:3d:a5:90:e9:47: c7:12:32:6c:11:4f:50:ce:e8:38:04:9e:75:d7:4b: bd:3d:a0:9e:26:e5:91:ba:d3:3d:4d:1a:4b:93:57: bb:c1:d6:3d:ce:13:20:8f:75:49:06:65:2d:32:df: 8a:b4:1d:fb:56:8d:a0:db:65:25:b6:c1:06:a6:27: c5:25:75:99:3c:76:1e:96:22:54:b6:c8:c1:97:d6: 1a:2c:65:44:2d:d2:11:0a:5c:22:17:0e:f7:f9:23: d3:0e:f6:6e:7f:b9:98:0b:8f:f0:94:0c:f0:79:82: 9c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:10:87:1F:8F:DB:ED:67:40:96:CA:A3:95:17:0F:E3:B9:FC:85:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/2ffdaf98-6513-3f50-a698-66a5e58df24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a4:08:76:5c:dd:5f:20:01:5f:90:47:18:c4:6e:db:a3:80: 15:13:04:98:b4:d2:c1:c4:2c:f9:bb:08:2d:7a:e5:c6:1e:7f: e1:4a:e1:cb:5f:3f:b7:13:32:34:5b:92:41:24:8a:31:74:7b: f1:e8:a8:12:f9:75:c6:6c:bd:86:25:d2:01:f1:bc:bd:61:36: c4:31:50:bf:b3:bd:b1:fa:f7:2f:c7:a9:a7:a0:34:e8:bf:1d: 04:00:0b:bd:92:de:ab:31:8a:c3:a9:44:e0:a2:3f:d0:c0:94: c7:cf:c8:87:89:3e:d1:90:4c:94:4c:65:e9:c4:23:c0:1a:0f: 09:4a:33:b9:9a:85:96:b6:8e:fa:70:be:12:a6:c1:b3:f7:42: 16:31:00:50:7c:62:a3:1e:13:f6:8b:ef:c8:a3:b3:8f:80:2e: 47:63:08:4a:bf:69:b6:e4:58:71:1f:13:0a:d0:3d:73:39:7d: cd:59:7c:59:8c:b8:07:ec:f4:7b:06:a5:49:fd:08:3a:42:04: 15:cc:97:39:d5:68:9e:d7:22:e1:4a:61:da:95:01:5b:11:55: 32:71:94:1a:b9:54:f5:e4:a6:3b:74:f1:ac:1e:89:67:15:e8: 42:62:c0:39:bb:34:3f:1f:1a:0a:2d:82:60:8b:a5:e3:86:c0: c1:57:2a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZtv0Lon5lsAGzCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDUxNDEyMzI1NloXDTI1MDgxMjEyMzI1NlowLzEtMCsGA1UEAxMk Y2MxYzUxOTEtZDk3ZS00ZTVmLTlmODUtNzZmMTcxZjY3YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9vHQF6N3t8KRLk+GMbOh5UnKvtFd9XaR/q7 cIPtdsed7KHzkIcEGJ8RiU/4uSS71RWyG1diio9/vCmFmxZyNsnCkPhO4wmKTdAO +lzhawtJip3a5LRCnDR1M3I+i1hM1ziTgPPk1xSsRXZZ1FV0jAPVia5CyriaptRK J6CXFRzEeEW7FHXwsrNjxmSqdHVjPaWQ6UfHEjJsEU9Qzug4BJ5110u9PaCeJuWR utM9TRpLk1e7wdY9zhMgj3VJBmUtMt+KtB37Vo2g22UltsEGpifFJXWZPHYeliJU tsjBl9YaLGVELdIRClwiFw73+SPTDvZuf7mYC4/wlAzweYKcKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcQhx+P2+1nQJbKo5UXD+O5/IWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMmZmZGFmOTgtNjUxMy0z ZjUwLWE2OTgtNjZhNWU1OGRmMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEykCHZc3V8gAV+QRxjEbtujgBUTBJi00sHELPm7CC165cYef+FK4ctf P7cTMjRbkkEkijF0e/HoqBL5dcZsvYYl0gHxvL1hNsQxUL+zvbH69y/HqaegNOi/ HQQAC72S3qsxisOpROCiP9DAlMfPyIeJPtGQTJRMZenEI8AaDwlKM7mahZa2jvpw vhKmwbP3QhYxAFB8YqMeE/aL78ijs4+ALkdjCEq/abbkWHEfEwrQPXM5fc1ZfFmM uAfs9HsGpUn9CDpCBBXMlznVaJ7XIuFKYdqVAVsRVTJxlBq5VPXkpjt08aweiWcV 6EJiwDm7ND8fGgotgmCLpeOGwMFXKsA= -----END CERTIFICATE-----Generated at Mon Jun 30 04:37:19 2025 by rpki-client