$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa File: 32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa (raw, json) Hash identifier: 4gZSFO3dSJMP2VIUJH7dL5KmClsuxyk3CHt8sECxn78= Subject key identifier: 06:ED:C8:81:3F:09:7C:DE:DA:D5:6D:C8:FF:15:33:95:68:D4:39:2B Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F432858499294623E2E14FCE0D99CEB80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 14114 IP address blocks: 157.133.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:62:3e:2e:14:fc:e0:d9:9c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=3b9fe2db-d196-421e-b6d1-83953146ba6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:49:21:60:04:22:fb:5e:7a:7a:94:e6:02: df:34:27:b4:88:1a:a4:2e:69:68:42:40:21:0c:f8: b4:bf:f5:f2:41:a6:c0:dc:f1:2f:a7:de:1e:a8:8b: 47:bf:a3:78:dd:cc:78:52:64:1f:fd:0a:be:4a:d0: bb:7c:1e:00:f6:2c:75:9c:8f:85:ca:c0:f8:4d:ad: d6:84:8d:04:e5:be:e8:b6:54:15:36:1f:bf:79:d0: c8:b3:4c:b8:40:6f:ea:94:6a:c6:fb:0d:7d:85:d6: bc:0b:91:6c:c5:3c:14:65:81:6d:f0:4a:c3:ea:ba: 90:4c:6b:bd:7b:37:6c:cc:3e:61:11:8e:17:c9:9d: 35:80:74:82:63:3f:8a:1b:40:e8:a3:85:08:97:79: 34:c7:a8:41:61:e9:62:a7:a3:f9:f7:e5:e5:42:d9: ef:94:68:af:9a:80:cf:63:c7:d5:04:1c:db:09:25: 6f:bc:10:97:21:8a:8a:61:7d:48:77:39:be:36:b6: 33:7a:7a:4a:e5:94:29:ca:81:48:99:c3:dd:70:33: 8c:f2:4d:e2:66:01:19:6d:fd:7f:d0:fa:a3:5e:bc: 36:c6:df:63:2e:0a:9f:7c:f7:2a:95:ef:a8:2b:36: ec:08:e9:89:23:12:7a:b8:34:d4:4e:39:7b:3f:47: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:ED:C8:81:3F:09:7C:DE:DA:D5:6D:C8:FF:15:33:95:68:D4:39:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/32e917f7-8439-3dab-8e9b-a859cb6d8e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5e:ff:bf:f3:a0:dc:a9:33:1d:bb:4e:46:8a:c2:12:d6:03: f4:88:19:02:5c:d0:bd:bb:1f:b5:f5:2e:34:f8:50:02:4c:8f: 9c:d6:ac:7f:77:0d:af:1b:a4:b3:6e:da:0e:0c:a1:68:1a:84: 88:99:ba:f4:cf:f3:7a:1b:bb:56:85:02:7f:9f:8e:b7:16:db: 9d:6c:07:36:4e:77:88:f1:d1:3f:db:69:66:6a:1d:1d:70:5a: a0:78:f7:0f:b3:5d:37:e0:6c:ca:9f:90:33:9f:f2:d4:2e:20: 5e:31:d1:31:71:ed:73:35:9d:24:a9:b4:7e:d0:02:25:6c:a3: 46:dc:af:e9:66:ef:91:64:ec:d5:ce:bd:4c:5a:fc:48:7d:7d: a0:8c:85:63:96:46:e6:17:9d:6d:fa:74:17:44:96:c2:82:e6: c1:b6:ba:ef:a1:04:00:3f:17:87:44:87:75:17:55:c0:f3:6a: 52:71:be:81:a7:53:43:2e:3c:02:74:69:22:55:50:76:1d:a0: 73:3b:b9:c9:05:1c:44:9a:1a:ce:be:29:9d:62:f8:37:a5:26: d9:16:77:e9:b0:d8:53:04:22:30:4f:21:60:9a:de:1e:b6:9e: b0:fa:ca:35:8e:35:b0:8b:cf:1c:1f:e2:1d:5c:7e:aa:e2:03: 14:3e:33:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlGI+LhT84Nmc64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk M2I5ZmUyZGItZDE5Ni00MjFlLWI2ZDEtODM5NTMxNDZiYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaRJIWAEIvteenqU5gLfNCe0iBqkLmloQkAh DPi0v/XyQabA3PEvp94eqItHv6N43cx4UmQf/Qq+StC7fB4A9ix1nI+FysD4Ta3W hI0E5b7otlQVNh+/edDIs0y4QG/qlGrG+w19hda8C5FsxTwUZYFt8ErD6rqQTGu9 ezdszD5hEY4XyZ01gHSCYz+KG0Doo4UIl3k0x6hBYelip6P59+XlQtnvlGivmoDP Y8fVBBzbCSVvvBCXIYqKYX1Idzm+NrYzenpK5ZQpyoFImcPdcDOM8k3iZgEZbf1/ 0PqjXrw2xt9jLgqffPcqle+oKzbsCOmJIxJ6uDTUTjl7P0fxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbtyIE/CXze2tVtyP8VM5Vo1DkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzJlOTE3ZjctODQzOS0z ZGFiLThlOWItYTg1OWNiNmQ4ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJe/7/zoNypMx27TkaKwhLWA/SIGQJc0L27H7X1LjT4UAJMj5zWrH93 Da8bpLNu2g4MoWgahIiZuvTP83obu1aFAn+fjrcW251sBzZOd4jx0T/baWZqHR1w WqB49w+zXTfgbMqfkDOf8tQuIF4x0TFx7XM1nSSptH7QAiVso0bcr+lm75Fk7NXO vUxa/Eh9faCMhWOWRuYXnW36dBdElsKC5sG2uu+hBAA/F4dEh3UXVcDzalJxvoGn U0MuPAJ0aSJVUHYdoHM7uckFHESaGs6+KZ1i+DelJtkWd+mw2FMEIjBPIWCa3h62 nrD6yjWONbCLzxwf4h1cfqriAxQ+M4M= -----END CERTIFICATE-----Generated at Tue May 6 07:40:49 2025 by rpki-client