$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa File: c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa (raw, json) Hash identifier: U0NEi7AUJS/jZNFBAMU0j8NJ3SwTZGKf4NaRk8kpb7Y= Subject key identifier: 30:3F:60:99:BC:B8:67:4C:21:52:AA:52:DD:08:BD:BE:46:50:A1:3B Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A0D6A9760EF093D1EBFC80700 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 0 IP address blocks: 157.133.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:97:60:ef:09:3d:1e:bf:c8:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=e6551008-3e2d-4a8a-b8cb-08b8da3e5e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:d8:cd:45:96:f7:98:92:6a:90:83:85:60: 37:21:70:09:2a:49:8d:23:c5:db:c7:3a:7a:00:bd: b5:f5:49:77:4a:3e:a1:95:9a:33:9a:d5:5c:6d:58: fa:2d:6c:c4:7e:85:e0:87:d6:7a:71:41:66:dc:47: 8c:65:5d:86:e3:ab:0e:d1:33:63:f3:7f:09:b9:f2: 55:99:1e:0e:28:b2:bf:6e:52:31:7b:31:0f:11:44: fb:ec:90:58:23:1b:28:fe:0d:af:48:7c:bf:c0:7d: ec:1b:28:c3:19:03:a3:66:03:0b:09:71:62:16:aa: 6c:47:f3:97:8e:e5:91:41:f2:5e:cf:2d:23:e5:2b: 7e:c7:08:be:54:7d:42:10:3f:78:3b:c7:be:4b:37: ca:e9:92:92:d5:85:9e:84:b1:94:55:85:f8:fc:dd: 7d:a9:ac:4c:b5:ed:5e:72:45:76:4e:43:c6:5f:51: 89:39:d5:65:4d:bc:f9:17:29:cc:15:97:a7:6d:9a: d7:2e:a2:e4:f8:1b:28:6b:6d:07:f5:db:64:37:c1: 13:96:2c:bb:64:60:14:f7:0f:7d:fb:bd:93:65:3f: 16:53:3f:ef:be:0e:4c:b8:10:90:09:0f:cd:00:32: 83:c0:47:0c:0a:fc:43:8d:57:b9:86:91:91:0b:63: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:60:99:BC:B8:67:4C:21:52:AA:52:DD:08:BD:BE:46:50:A1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:18:7f:61:e3:c5:88:8b:e0:34:19:67:b0:bd:61:99:19:4d: f2:50:98:e8:b3:42:74:d6:96:ac:04:a2:aa:e9:81:e1:46:a2: 7b:b8:0d:29:e2:31:c7:62:f5:64:2a:61:ed:53:a8:eb:da:88: 47:14:fc:d1:31:a9:54:af:c7:fd:5f:74:bc:46:cd:c1:d2:cc: 07:6c:10:81:ff:1c:74:3e:f7:c7:7d:74:7b:3d:c1:6e:0e:a3: fa:dc:2b:d4:86:79:b9:d5:5c:58:a0:8c:87:af:4d:8f:e5:de: e2:f7:3e:9a:f8:61:ff:0f:c1:48:e2:0c:d8:1a:55:da:84:3f: 16:b1:79:fa:a6:02:db:96:f1:f8:71:29:41:f3:e5:bb:6a:73: 31:2a:c0:84:64:17:ab:48:df:f5:f8:99:30:9e:69:6b:02:58: 9e:65:85:ee:38:04:d7:55:c2:1b:58:47:7b:1e:5d:de:18:61: 32:1d:55:18:a7:ad:59:74:b1:75:6f:63:ed:7e:c8:47:17:36: f7:64:ae:d1:b7:9b:47:cd:05:53:94:51:df:f9:e0:56:65:79: 0d:6e:7f:00:f3:4c:f3:f8:bb:5a:da:18:f7:98:98:b3:04:64: 6d:b5:ea:f7:12:07:70:55:84:05:85:f0:9f:e4:10:6a:4e:e9: 7f:c5:93:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNapdg7wk9Hr/IBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ZTY1NTEwMDgtM2UyZC00YThhLWI4Y2ItMDhiOGRhM2U1ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6zYzUWW95iSapCDhWA3IXAJKkmNI8Xbxzp6 AL219Ul3Sj6hlZozmtVcbVj6LWzEfoXgh9Z6cUFm3EeMZV2G46sO0TNj838JufJV mR4OKLK/blIxezEPEUT77JBYIxso/g2vSHy/wH3sGyjDGQOjZgMLCXFiFqpsR/OX juWRQfJezy0j5St+xwi+VH1CED94O8e+SzfK6ZKS1YWehLGUVYX4/N19qaxMte1e ckV2TkPGX1GJOdVlTbz5FynMFZenbZrXLqLk+Bsoa20H9dtkN8ETliy7ZGAU9w99 +72TZT8WUz/vvg5MuBCQCQ/NADKDwEcMCvxDjVe5hpGRC2OgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA/YJm8uGdMIVKqUt0Ivb5GUKE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzUzMWQ0MjktOWQ5ZC0z ZTVlLThlZWYtZDk3NjY0OWYyY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4Yf2HjxYiL4DQZZ7C9YZkZTfJQmOizQnTWlqwEoqrpgeFGonu4DSni Mcdi9WQqYe1TqOvaiEcU/NExqVSvx/1fdLxGzcHSzAdsEIH/HHQ+98d9dHs9wW4O o/rcK9SGebnVXFigjIevTY/l3uL3Ppr4Yf8PwUjiDNgaVdqEPxaxefqmAtuW8fhx KUHz5btqczEqwIRkF6tI3/X4mTCeaWsCWJ5lhe44BNdVwhtYR3seXd4YYTIdVRin rVl0sXVvY+1+yEcXNvdkrtG3m0fNBVOUUd/54FZleQ1ufwDzTPP4u1raGPeYmLME ZG216vcSB3BVhAWF8J/kEGpO6X/Fkzo= -----END CERTIFICATE-----Generated at Sun Jun 29 10:22:26 2025 by rpki-client