$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d34c3e28-2741-3931-b04c-a989d84d5bf2.roa File: d34c3e28-2741-3931-b04c-a989d84d5bf2.roa (raw, json) Hash identifier: gIKyj6n7Vwh7wU7j5z/7yW+AZc2R0etzsR2/eUR1kqc= Subject key identifier: FB:04:29:23:B3:E9:20:E9:E8:C6:A7:A0:6F:41:03:46:E0:B8:CF:83 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584A49705855463B859769EEEC00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d34c3e28-2741-3931-b04c-a989d84d5bf2.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 14114 IP address blocks: 157.133.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:58:55:46:3b:85:97:69:ee:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=fe755caa-c1b3-4d28-b836-b986c13cd2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:ea:c5:33:fd:b5:53:69:19:7c:6d:82:f3: ac:41:23:9f:e6:1e:79:59:7d:5a:90:e9:08:9d:7f: dc:47:54:b2:a0:88:7e:47:a4:48:51:f3:e0:4b:db: bc:8b:b8:0a:c4:6e:a3:52:4e:f4:f2:48:83:fa:e9: 6d:ca:d1:21:2c:48:1a:8c:7b:79:26:40:55:68:29: 5a:8e:b6:64:43:53:41:7a:2e:3e:7a:3a:e4:f0:fe: 82:3f:50:18:0b:d4:a9:47:93:b4:ea:b7:41:01:4d: 93:60:fa:52:25:01:af:3a:d4:2a:3e:9f:df:13:18: dc:9c:fc:b3:49:b9:d4:84:8e:8b:96:e7:7b:9f:2c: 40:a4:28:fb:a0:81:32:20:c3:67:c1:6e:fd:a5:f3: f4:90:ea:53:ca:42:51:20:80:51:e5:60:09:e3:52: 1a:31:14:8a:e1:9f:be:16:b0:6a:9f:a4:6f:76:07: e9:37:ae:dc:84:1b:a3:d6:d9:4b:31:87:20:1b:8c: 6b:89:89:4f:db:1f:d9:ca:25:4d:a8:1a:5a:28:9d: 64:da:d1:c4:72:0f:c9:5d:52:fd:d8:4a:29:cb:c6: 43:59:88:e3:fd:13:a8:f7:73:eb:99:43:6f:a3:95: 32:9c:25:a0:c2:29:48:01:3b:72:86:7e:43:0a:10: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:04:29:23:B3:E9:20:E9:E8:C6:A7:A0:6F:41:03:46:E0:B8:CF:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d34c3e28-2741-3931-b04c-a989d84d5bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:87:df:aa:17:4e:1c:82:7b:ec:4a:85:75:d8:66:49:f1:4c: 50:fa:bb:fb:7e:63:1e:ec:2c:b8:a6:6a:fb:cf:93:5e:2d:9d: c1:ab:3a:4b:bd:8e:06:84:c3:cb:3b:aa:c6:24:8f:30:12:3e: 9b:5f:24:02:e1:1a:1f:42:b2:eb:46:a5:b0:e5:00:dc:df:2a: 92:f2:44:00:97:30:c4:d3:14:12:72:8c:d7:30:f0:80:ad:20: 20:8b:9b:bd:6b:b6:d1:91:48:fe:37:fb:97:a2:69:34:8b:ee: 2a:69:11:5a:15:5d:37:c6:6f:c0:4b:f7:2e:02:23:df:0d:f4: ad:3a:62:b4:86:4a:0d:ed:27:84:cc:98:8d:f4:be:dd:a9:6f: 50:ff:af:32:f7:ab:13:ea:84:84:72:7d:d6:b5:79:e3:0f:b5: 41:46:84:74:27:3e:2b:c7:57:f1:73:1b:0d:66:de:c4:ca:e1: 23:33:98:70:ff:71:c2:c6:77:1f:3b:2d:13:94:fb:3a:6b:ad: fa:ae:a2:fd:7d:b6:b4:c4:a9:00:2e:7c:29:24:e1:77:50:97: 17:44:b4:25:95:b7:41:53:91:72:9d:72:df:79:2f:74:11:ff: 99:d8:a4:8b:39:81:68:d2:ca:c9:79:25:ed:b1:b2:ab:4e:61: 9d:d3:f0:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFhVRjuFl2nu7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmU3NTVjYWEtYzFiMy00ZDI4LWI4MzYtYjk4NmMxM2NkMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrTqxTP9tVNpGXxtgvOsQSOf5h55WX1akOkI nX/cR1SyoIh+R6RIUfPgS9u8i7gKxG6jUk708kiD+ultytEhLEgajHt5JkBVaCla jrZkQ1NBei4+ejrk8P6CP1AYC9SpR5O06rdBAU2TYPpSJQGvOtQqPp/fExjcnPyz SbnUhI6Llud7nyxApCj7oIEyIMNnwW79pfP0kOpTykJRIIBR5WAJ41IaMRSK4Z++ FrBqn6RvdgfpN67chBuj1tlLMYcgG4xriYlP2x/ZyiVNqBpaKJ1k2tHEcg/JXVL9 2Eopy8ZDWYjj/ROo93PrmUNvo5UynCWgwilIATtyhn5DChAqZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsEKSOz6SDp6ManoG9BA0bguM+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZDM0YzNlMjgtMjc0MS0z OTMxLWIwNGMtYTk4OWQ4NGQ1YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiH36oXThyCe+xKhXXYZknxTFD6u/t+Yx7sLLimavvPk14tncGrOku9 jgaEw8s7qsYkjzASPptfJALhGh9CsutGpbDlANzfKpLyRACXMMTTFBJyjNcw8ICt ICCLm71rttGRSP43+5eiaTSL7ippEVoVXTfGb8BL9y4CI98N9K06YrSGSg3tJ4TM mI30vt2pb1D/rzL3qxPqhIRyfda1eeMPtUFGhHQnPivHV/FzGw1m3sTK4SMzmHD/ ccLGdx87LROU+zprrfquov19trTEqQAufCkk4XdQlxdEtCWVt0FTkXKdct95L3QR /5nYpIs5gWjSysl5Je2xsqtOYZ3T8LA= -----END CERTIFICATE-----Generated at Sun Jun 29 22:14:40 2025 by rpki-client