$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa File: 3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa (raw, json) Hash identifier: xxL2vVYZTy2cBZU0XEC7fKjznBXsus90YGij+7VBxe4= Subject key identifier: 03:E9:76:35:EA:E9:1A:33:AA:91:1D:8B:DC:79:B6:09:07:AD:3A:B7 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494CC9556C3D91CB225AD95180 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 11232 IP address blocks: 137.22.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:55:6c:3d:91:cb:22:5a:d9:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=aa90c533-ec02-4672-a3ff-d5290916af80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:aa:2c:9e:a0:2a:65:98:5b:9d:f2:5a:05: e1:1f:b0:c0:42:97:0e:cc:6f:12:eb:f8:24:e5:68: 9f:cb:4f:79:96:ee:90:b0:72:ac:35:16:14:82:70: 83:eb:5f:4e:f4:e0:04:3c:89:22:fb:b1:c0:a9:d7: 96:bc:60:e2:ce:27:c6:ad:8c:e6:e6:f4:a3:71:37: f8:bb:40:68:43:0a:b6:d6:76:1a:2c:81:6c:24:74: 80:33:e1:4b:86:17:db:d4:c7:62:14:39:45:88:e3: e2:d2:97:11:e0:df:38:12:b4:76:02:57:10:2b:3d: b8:f7:fd:e7:96:1d:e1:92:c4:be:38:e2:f7:ff:a9: 76:39:9d:e1:65:b9:4d:74:d1:79:73:16:92:b4:bb: ac:54:ab:d4:a3:e3:8b:34:a5:90:1d:ec:29:8e:b5: c4:eb:f6:84:22:39:08:0a:ce:02:3c:d8:d4:4b:82: 6f:cd:3c:b3:12:91:cc:98:21:fc:0e:cd:90:7c:e2: aa:0f:29:29:ef:b1:b4:e7:30:9d:f2:d7:0a:aa:2c: 44:68:03:b5:bb:8a:1a:b5:d7:25:2f:ce:43:93:74: f6:89:8d:a5:23:4f:59:23:f6:ef:b1:c0:27:a1:03: fb:26:ca:b3:a1:22:8a:8f:e7:51:78:47:1a:63:14: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:76:35:EA:E9:1A:33:AA:91:1D:8B:DC:79:B6:09:07:AD:3A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 137.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:86:d9:f9:59:30:fe:8d:70:b8:89:1c:17:12:e5:74:09:eb: 96:b8:8b:68:f5:21:74:1b:61:86:5f:b4:36:66:41:2e:a3:44: 76:c8:96:21:af:35:62:d5:ae:bb:f2:18:73:c5:ae:4d:52:e0: ca:e9:62:29:69:52:10:68:01:5c:fd:55:58:19:ed:08:b9:65: 8a:1b:7a:f1:ae:a0:c8:1b:e6:c2:61:17:20:2c:04:e2:42:3d: 54:33:57:d1:5e:f2:4e:80:21:3b:bc:ab:3a:db:2a:3f:62:cb: fb:e0:03:d3:09:78:76:fc:a4:fd:0b:6c:e9:1e:e5:a0:d7:75: be:33:10:98:19:3e:76:a4:38:1f:7f:fc:2a:ff:ff:57:13:cc: 51:01:0a:4e:a0:99:10:f0:d0:20:37:52:b0:8e:6e:b9:16:88: 31:a0:6e:ee:d5:1a:09:b5:41:f0:6e:6b:ac:2b:1f:2a:ba:93: 38:ab:b9:fd:fb:59:91:d1:f3:d7:de:d8:49:76:65:22:2b:6f: 9b:81:a9:08:59:4a:0d:70:9b:f3:77:39:ca:af:44:f8:9d:54: af:ee:74:27:e7:8f:b8:39:4f:69:98:03:b6:05:e6:88:57:58: ae:8d:51:98:73:75:fb:36:41:99:f5:2b:3a:77:ae:a4:7d:49: 25:3d:c3:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVVsPZHLIlrZUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWE5MGM1MzMtZWMwMi00NjcyLWEzZmYtZDUyOTA5MTZhZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCuqLJ6gKmWYW53yWgXhH7DAQpcOzG8S6/gk 5Wify095lu6QsHKsNRYUgnCD619O9OAEPIki+7HAqdeWvGDizifGrYzm5vSjcTf4 u0BoQwq21nYaLIFsJHSAM+FLhhfb1MdiFDlFiOPi0pcR4N84ErR2AlcQKz249/3n lh3hksS+OOL3/6l2OZ3hZblNdNF5cxaStLusVKvUo+OLNKWQHewpjrXE6/aEIjkI Cs4CPNjUS4JvzTyzEpHMmCH8Ds2QfOKqDykp77G05zCd8tcKqixEaAO1u4oatdcl L85Dk3T2iY2lI09ZI/bvscAnoQP7JsqzoSKKj+dReEcaYxQZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPpdjXq6RozqpEdi9x5tgkHrTq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvM2ZmZTgzZjctY2QyNC0z NDQ2LThjNTMtMmJmZjhkOGRlOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiRYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOG2flZMP6NcLiJHBcS5XQJ65a4i2j1IXQbYYZftDZmQS6jRHbIliGv NWLVrrvyGHPFrk1S4MrpYilpUhBoAVz9VVgZ7Qi5ZYobevGuoMgb5sJhFyAsBOJC PVQzV9Fe8k6AITu8qzrbKj9iy/vgA9MJeHb8pP0LbOke5aDXdb4zEJgZPnakOB9/ /Cr//1cTzFEBCk6gmRDw0CA3UrCObrkWiDGgbu7VGgm1QfBua6wrHyq6kziruf37 WZHR89fe2El2ZSIrb5uBqQhZSg1wm/N3OcqvRPidVK/udCfnj7g5T2mYA7YF5ohX WK6NUZhzdfs2QZn1Kzp3rqR9SSU9w5E= -----END CERTIFICATE-----Generated at Sun May 11 20:07:25 2025 by rpki-client