$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa File: a938623e-6b7a-3f97-80a5-af568107b609.roa (raw, json) Hash identifier: hAPQrPO59T7truziIwlImilcobllYXsxWiwEiKY+48E= Subject key identifier: 65:CD:CC:7F:1E:AF:3B:CE:EA:C9:38:9B:82:4E:BC:E6:5E:93:54:5F Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A4970591BADFC03821CF32C00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 35039 IP address blocks: 157.133.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:59:1b:ad:fc:03:82:1c:f3:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=99422607-c44c-4f38-87d9-917510cf0094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:d8:fc:88:ad:cb:41:74:bd:12:e2:9a:27: 60:bd:56:b8:9c:61:66:71:e3:95:01:62:45:3b:07: 2c:1d:a1:95:03:d2:52:1e:7d:81:a0:61:53:e2:d3: 7a:b1:af:ac:c9:92:b5:21:c9:0c:9c:25:16:cd:75: 36:6c:2d:48:4e:b3:67:e4:b7:ac:75:d2:44:20:8f: ce:ad:06:5b:a9:e1:98:80:a0:c9:a3:ba:c6:d5:d5: 98:2d:50:ec:66:4e:7c:3b:a4:79:0e:b9:6c:ac:af: f3:cc:f8:32:5a:b2:0b:9c:5d:ae:0e:cf:42:76:88: 9f:84:5b:26:cc:ca:45:bf:d2:b1:3e:8b:85:81:1c: 0c:78:d7:87:64:5f:bf:af:fe:93:47:4b:15:c5:3e: 5e:6a:9d:d6:4f:94:a7:01:c2:f8:a3:0c:2d:8f:ce: cb:df:55:ed:27:18:95:8e:77:f6:ba:3b:52:49:1c: 77:38:fd:9c:98:cb:9f:af:74:0b:d3:53:64:20:6a: 9c:9a:e1:e2:5e:93:77:a8:dc:2b:aa:6c:6f:09:a5: 83:e4:d7:fa:d9:d7:78:c1:ba:d1:11:33:99:c9:ab: 67:86:43:d8:a3:c6:89:2a:70:9f:f9:65:99:df:01: da:86:0c:77:3a:cc:dc:21:8b:17:5b:f3:21:74:18: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:CC:7F:1E:AF:3B:CE:EA:C9:38:9B:82:4E:BC:E6:5E:93:54:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a938623e-6b7a-3f97-80a5-af568107b609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3b:82:8b:8f:da:00:02:d2:89:63:b7:58:da:6d:5e:0c:5c: 88:9a:55:1d:0b:86:e4:db:c2:71:43:90:11:87:02:1b:c8:a2: 4b:38:3e:16:2a:ac:e2:84:94:ce:fc:3c:03:c4:01:37:39:3c: 8f:85:d9:d8:51:a2:0a:11:a4:d1:b4:8c:9f:81:85:46:fe:37: 18:42:e4:c8:db:01:a2:a2:63:6d:ba:c6:59:5c:03:ec:fb:01: e6:cf:40:4a:19:4b:10:c0:32:ac:6c:cf:48:bd:0a:70:54:53: 7a:0b:f4:25:90:a8:0c:f6:6d:28:df:a0:39:5c:d9:6b:27:66: 19:e3:05:a4:e8:97:2c:8f:97:63:3d:bd:ce:86:56:d6:67:fb: 01:fe:44:44:51:21:be:9e:f4:d0:e9:20:35:f2:46:f2:a9:29: 5d:2f:3b:ca:ad:be:36:77:7c:1f:2b:33:19:c2:40:d3:de:b2: e0:1f:10:e9:92:06:da:50:a7:48:bf:fb:bc:16:18:ab:19:39: 6f:f9:4b:c3:d8:fe:15:ac:28:f4:e8:f5:1e:65:7b:69:70:62: 2f:e7:de:ea:be:6f:18:6c:3e:c3:76:16:49:fd:b1:86:36:d4: 12:ff:3f:cf:4a:8a:74:3e:99:be:19:55:83:7b:7e:a5:28:be: b2:e3:85:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFkbrfwDghzzLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OTk0MjI2MDctYzQ0Yy00ZjM4LTg3ZDktOTE3NTEwY2YwMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly3Y/Iity0F0vRLimidgvVa4nGFmceOVAWJF OwcsHaGVA9JSHn2BoGFT4tN6sa+syZK1IckMnCUWzXU2bC1ITrNn5LesddJEII/O rQZbqeGYgKDJo7rG1dWYLVDsZk58O6R5DrlsrK/zzPgyWrILnF2uDs9CdoifhFsm zMpFv9KxPouFgRwMeNeHZF+/r/6TR0sVxT5eap3WT5SnAcL4owwtj87L31XtJxiV jnf2ujtSSRx3OP2cmMufr3QL01NkIGqcmuHiXpN3qNwrqmxvCaWD5Nf62dd4wbrR ETOZyatnhkPYo8aJKnCf+WWZ3wHahgx3OszcIYsXW/MhdBiFewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXNzH8erzvO6sk4m4JOvOZek1RfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYTkzODYyM2UtNmI3YS0z Zjk3LTgwYTUtYWY1NjgxMDdiNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnYWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH07gouP2gAC0oljt1jabV4MXIiaVR0LhuTbwnFDkBGHAhvIoks4PhYq rOKElM78PAPEATc5PI+F2dhRogoRpNG0jJ+BhUb+NxhC5MjbAaKiY226xllcA+z7 AebPQEoZSxDAMqxsz0i9CnBUU3oL9CWQqAz2bSjfoDlc2WsnZhnjBaTolyyPl2M9 vc6GVtZn+wH+RERRIb6e9NDpIDXyRvKpKV0vO8qtvjZ3fB8rMxnCQNPesuAfEOmS BtpQp0i/+7wWGKsZOW/5S8PY/hWsKPTo9R5le2lwYi/n3uq+bxhsPsN2Fkn9sYY2 1BL/P89KinQ+mb4ZVYN7fqUovrLjhUY= -----END CERTIFICATE-----Generated at Mon Jun 30 05:17:44 2025 by rpki-client