$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa File: 996680e8-cf66-37bf-a1d6-3f519c7383ea.roa (raw, json) Hash identifier: ZqOyR0CAdsahX9BqyRYXeH0aH4dPWInRQSF343WFAz8= Subject key identifier: 13:EE:9D:1F:BC:B9:73:C5:40:7C:1B:6D:20:C3:BE:6C:7D:82:F4:C6 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A49705837FBF9FABA0CA65400 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 14114 IP address blocks: 157.133.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:58:37:fb:f9:fa:ba:0c:a6:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=5084669c-28df-4d47-a496-d2f272251eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f0:f4:27:dd:29:a0:49:09:9a:5f:f0:27:96: b7:56:66:21:70:3d:9b:86:12:4e:8f:48:b3:d1:12: e3:7b:07:0e:ae:0b:7c:a1:48:2d:91:f6:de:d8:2c: f9:68:f4:41:ef:ad:72:4c:28:ba:a8:e2:ba:d2:c2: 87:2f:a6:8e:7b:0e:30:02:db:af:9b:ee:8e:9f:22: b4:a1:c9:5a:42:42:f3:f0:cf:fa:5a:86:c4:a8:15: e8:c7:81:c7:7d:22:58:62:8f:33:96:dc:bb:58:17: d4:07:28:a5:32:c0:b8:34:bb:2c:ff:5f:af:22:18: 2e:9a:c0:d7:72:8a:a2:ef:30:36:87:f1:d1:46:e3: 5d:a3:a6:6f:84:b2:c6:ee:b8:ba:ee:0f:9f:1b:e9: 85:cb:23:c1:15:7a:98:eb:4d:73:cb:82:7c:e4:3f: 5f:08:81:d4:26:e4:c0:1d:36:2e:f1:49:e0:29:1b: 21:2e:9f:2d:ff:97:a9:5b:fa:4d:85:d3:b7:53:75: 2a:43:2e:67:d7:db:d7:e4:b4:a2:dc:b1:f9:2a:d1: 1b:80:69:25:ae:67:dc:a0:56:a3:1b:f3:37:4d:dc: 9f:e5:25:7a:7d:e4:d0:53:62:d5:fc:bb:59:10:b1: ed:5c:9e:54:80:24:0f:73:03:c1:e9:08:b4:17:09: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EE:9D:1F:BC:B9:73:C5:40:7C:1B:6D:20:C3:BE:6C:7D:82:F4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:14:e4:0e:16:22:e2:dc:25:75:23:f9:24:2a:fb:a6:65:03: 36:1c:e8:01:ef:0a:5e:2d:fe:00:10:c5:ae:7c:17:a5:c8:0a: fd:49:a9:17:b0:36:67:71:29:4f:4d:83:99:0f:01:c8:83:bf: ee:28:4d:4a:12:35:86:b7:0f:62:d5:6d:12:80:82:e4:8d:bf: 6a:22:5d:9c:92:f5:2d:0b:7a:37:7e:5b:a6:42:21:7f:05:ef: a5:e1:c2:bb:2f:ca:7e:cc:3e:3f:55:4b:5d:4a:8d:9b:78:76: c6:e6:53:9a:36:fa:ac:5c:ed:c0:11:2f:c0:5a:c6:e4:48:8f: ff:c1:3c:13:2b:74:c7:4d:9e:a9:01:77:bf:2b:c9:c9:21:f5: d8:90:f4:02:75:83:67:c2:9d:97:8e:de:df:c7:6a:9c:9a:66: 09:a2:b9:72:d1:91:15:90:a5:50:a6:be:38:06:b2:a7:40:6b: d5:e4:9e:12:19:48:e4:e8:a9:1c:b8:f9:15:fb:8a:82:0d:93: 73:31:6d:e0:a7:56:8b:1d:11:d3:a3:18:89:d9:b0:1d:7d:48: 60:00:2e:d4:39:64:7d:d6:f1:16:05:33:bb:4e:dd:52:dd:78: 3f:66:50:8f:1c:cb:a4:ce:17:dd:b4:62:7c:79:75:b5:a0:45: 12:12:89:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFg3+/n6ugymVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTA4NDY2OWMtMjhkZi00ZDQ3LWE0OTYtZDJmMjcyMjUxZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fD0J90poEkJml/wJ5a3VmYhcD2bhhJOj0iz 0RLjewcOrgt8oUgtkfbe2Cz5aPRB761yTCi6qOK60sKHL6aOew4wAtuvm+6OnyK0 oclaQkLz8M/6WobEqBXox4HHfSJYYo8zlty7WBfUByilMsC4NLss/1+vIhgumsDX coqi7zA2h/HRRuNdo6ZvhLLG7ri67g+fG+mFyyPBFXqY601zy4J85D9fCIHUJuTA HTYu8UngKRshLp8t/5epW/pNhdO3U3UqQy5n19vX5LSi3LH5KtEbgGklrmfcoFaj G/M3Tdyf5SV6feTQU2LV/LtZELHtXJ5UgCQPcwPB6Qi0FwlhNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPunR+8uXPFQHwbbSDDvmx9gvTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOTk2NjgwZTgtY2Y2Ni0z N2JmLWExZDYtM2Y1MTljNzM4M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoU5A4WIuLcJXUj+SQq+6ZlAzYc6AHvCl4t/gAQxa58F6XICv1JqRew NmdxKU9Ng5kPAciDv+4oTUoSNYa3D2LVbRKAguSNv2oiXZyS9S0Lejd+W6ZCIX8F 76Xhwrsvyn7MPj9VS11KjZt4dsbmU5o2+qxc7cARL8BaxuRIj//BPBMrdMdNnqkB d78ryckh9diQ9AJ1g2fCnZeO3t/HapyaZgmiuXLRkRWQpVCmvjgGsqdAa9XknhIZ SOToqRy4+RX7ioINk3MxbeCnVosdEdOjGInZsB19SGAALtQ5ZH3W8RYFM7tO3VLd eD9mUI8cy6TOF920Ynx5dbWgRRISiS8= -----END CERTIFICATE-----Generated at Sun Jun 29 22:27:36 2025 by rpki-client