$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa File: ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa (raw, json) Hash identifier: 56PAVMWrM+hb7nAtbQGEUTiWXdI9dtv2t66uYOm8lDQ= Subject key identifier: A8:70:24:33:8E:35:7C:AF:48:8E:1C:C1:A7:08:DF:2E:FD:01:65:F0 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F43285849BDDA26FF4A186AC65841F380 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 14977 IP address blocks: 137.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:26:ff:4a:18:6a:c6:58:41:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=55d5eb7b-2302-4994-93e2-c30aa6bb8bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a3:22:8a:66:7c:ae:1d:2f:00:75:a2:b9:11: 25:52:1f:f4:5d:0c:b8:96:7d:31:b5:61:39:32:b6: 8d:6d:0f:93:65:59:5d:d9:0c:12:1b:25:dc:24:78: 88:f0:00:1f:9a:12:a2:fa:32:c8:ae:47:a5:e8:f7: c4:40:6b:42:08:58:84:bc:e2:60:88:78:87:5d:31: 4c:6e:3d:da:9b:57:d2:9f:f0:f3:8f:a1:b0:97:3b: e1:02:e2:0c:e2:84:a1:98:6d:77:da:ec:24:ba:26: 68:95:ff:f7:7d:81:40:92:ba:36:d9:ff:8d:ed:bd: 7c:91:b9:26:b5:6c:6d:d4:84:52:92:81:5d:ff:dc: c3:ad:08:84:c9:56:81:59:98:5f:13:0c:34:70:74: 5d:2a:4c:23:82:80:2f:56:a0:9b:0c:dd:c1:66:a2: 72:19:26:8e:77:af:c4:e6:05:b8:a8:b3:43:28:d5: 0e:b4:da:15:6f:a6:0f:c1:48:13:84:bb:3f:6f:f3: d3:fe:b3:7e:c9:6b:b0:fc:f8:bf:3e:d7:54:05:cd: 4b:d9:ab:81:5b:a8:df:a3:f6:5f:98:ae:2b:3d:5d: 73:8e:8a:be:37:4b:92:ae:8a:cc:0a:b2:62:88:27: c8:96:1c:0c:7c:93:2b:0a:d1:94:a2:75:e2:2f:fb: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:70:24:33:8E:35:7C:AF:48:8E:1C:C1:A7:08:DF:2E:FD:01:65:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ce68a89b-a54a-346f-a9a2-d8d6b2c79900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.88.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:84:49:e2:b0:63:70:90:b9:ab:18:46:59:62:7a:31:db:0e: 16:3a:2d:85:d8:16:9c:28:33:2a:e6:77:f0:89:31:d5:97:60: b8:cd:f8:00:99:b1:77:72:bd:a4:17:f9:ec:07:6f:fd:7a:20: da:ae:44:59:f3:aa:ee:ec:64:f5:7c:fd:21:79:b0:5e:6b:3d: 85:78:43:25:15:27:f0:f7:00:f3:7c:98:56:e4:af:b2:34:62: 82:d4:7c:3c:c8:c9:21:2e:4b:05:c2:65:f5:9c:3f:05:5b:c1: ea:53:6e:a0:7f:17:0e:f2:a9:0e:e9:77:33:d3:ef:2b:95:70: 23:ed:1a:fc:3d:6e:a3:c2:a3:14:9e:ac:e3:94:ed:53:fb:e5: 38:81:a8:0e:c2:ad:d9:b6:24:27:15:a3:1a:dd:09:8f:f7:38: e6:6d:a8:7d:88:19:8e:cd:91:00:db:8d:2e:13:63:c1:2d:7c: b8:5c:f6:42:17:0f:94:72:04:ef:6c:2e:49:11:2a:0a:d9:99: 6b:d6:c8:58:5c:7c:0e:c2:77:af:a0:0e:b2:84:4e:28:a5:b5: 2c:bb:f2:ab:5c:d0:2b:57:ac:c5:fe:0a:30:ec:85:96:78:60: 87:30:c6:7a:6f:e0:96:d0:b7:7e:ed:ec:73:35:62:b4:d8:d3: 62:92:e3:c1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm92ib/ShhqxlhB84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NTVkNWViN2ItMjMwMi00OTk0LTkzZTItYzMwYWE2YmI4YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6MiimZ8rh0vAHWiuRElUh/0XQy4ln0xtWE5 MraNbQ+TZVld2QwSGyXcJHiI8AAfmhKi+jLIrkel6PfEQGtCCFiEvOJgiHiHXTFM bj3am1fSn/Dzj6GwlzvhAuIM4oShmG132uwkuiZolf/3fYFAkro22f+N7b18kbkm tWxt1IRSkoFd/9zDrQiEyVaBWZhfEww0cHRdKkwjgoAvVqCbDN3BZqJyGSaOd6/E 5gW4qLNDKNUOtNoVb6YPwUgThLs/b/PT/rN+yWuw/Pi/PtdUBc1L2auBW6jfo/Zf mK4rPV1zjoq+N0uSrorMCrJiiCfIlhwMfJMrCtGUonXiL/vO4QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKhwJDOONXyvSI4cwacI3y79AWXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvY2U2OGE4OWItYTU0YS0z NDZmLWE5YTItZDhkNmIyYzc5OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIYRJ4rBjcJC5qxhGWWJ6MdsOFjothdgWnCgzKuZ38Ikx1ZdguM34AJmx d3K9pBf57Adv/Xog2q5EWfOq7uxk9Xz9IXmwXms9hXhDJRUn8PcA83yYVuSvsjRi gtR8PMjJIS5LBcJl9Zw/BVvB6lNuoH8XDvKpDul3M9PvK5VwI+0a/D1uo8KjFJ6s 45TtU/vlOIGoDsKt2bYkJxWjGt0Jj/c45m2ofYgZjs2RANuNLhNjwS18uFz2QhcP lHIE72wuSREqCtmZa9bIWFx8DsJ3r6AOsoROKKW1LLvyq1zQK1esxf4KMOyFlnhg hzDGem/gltC3fu3sczVitNjTYpLjwQ== -----END CERTIFICATE-----Generated at Sat May 10 11:30:12 2025 by rpki-client