$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa File: 3c45f564-e010-32f9-9e47-024f8feaf419.roa (raw, json) Hash identifier: 1+5QoL3KJxThDprbJSXaYXKZhSEW2kywGstvwgRVcws= Subject key identifier: 18:E1:C1:A7:EE:74:0E:6D:EB:C0:01:E4:B9:49:9A:82:5A:1C:EA:61 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A58CB06F024B72CA7C53E4080 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 25645 IP address blocks: 137.239.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:06:f0:24:b7:2c:a7:c5:3e:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=dd23f66f-516f-4d99-b3c7-24bc3507af3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:d5:71:2f:20:01:52:16:d2:72:79:b8:ec: 61:53:53:27:e0:34:85:a0:0c:79:1b:8f:72:a3:e7: 05:cb:30:75:3d:b4:bd:36:12:b9:be:76:b3:0e:02: 65:bc:45:ae:10:20:1d:cd:ad:53:bd:e4:0c:56:3d: d8:1e:5f:94:b9:5d:1c:16:e5:29:ae:dd:75:c4:a0: 23:29:97:e3:d0:9f:01:53:fa:27:ab:dc:1b:41:cf: 23:48:4d:08:d6:e8:38:b2:02:41:8c:29:7c:9e:8d: 42:49:1c:b7:f1:0f:f0:1c:71:9a:58:88:01:34:87: 15:8e:c3:c1:6a:e1:51:7e:f4:a8:9c:d5:db:a9:39: 8c:9c:b1:16:a8:a8:34:ed:88:b4:b1:51:78:e1:7d: 34:86:4e:74:fd:89:be:ac:95:02:c8:32:e2:6e:b8: 37:37:0e:ce:70:cb:87:72:60:31:7e:ce:6d:8a:9c: f0:db:90:30:ef:72:c2:b2:f0:34:8a:fa:12:04:e2: 10:21:4f:8d:2b:5c:b6:49:07:c9:a8:f5:c3:83:22: 23:de:2c:de:72:81:f8:74:03:1d:fd:b6:cd:e1:3c: 24:f7:14:43:86:fa:93:c7:05:20:c3:4a:aa:b2:03: a9:b0:63:55:68:7c:33:17:2d:d6:63:b7:e5:ea:1e: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E1:C1:A7:EE:74:0E:6D:EB:C0:01:E4:B9:49:9A:82:5A:1C:EA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:83:77:bf:1e:58:32:12:41:1f:f1:d0:4f:5a:02:5a:04:de: 94:c0:d7:9e:af:c4:06:79:bb:a9:0c:22:e7:6a:55:c1:15:ea: f7:78:13:a8:0a:67:52:0f:ca:10:e5:41:5b:5d:88:c1:c6:e3: a5:fc:33:0b:19:61:e1:ec:50:27:3a:d6:dc:27:1b:35:99:71: af:2a:4b:1c:ef:71:8b:26:a4:e6:49:72:f4:8d:17:ad:3c:f7: 92:58:c9:53:7d:ad:51:d2:1e:b6:96:bd:dd:d3:26:e8:4b:10: f1:f0:46:66:d7:1d:e0:f8:2e:43:d0:15:d1:2f:04:ed:5e:32: d9:f2:c6:9a:ba:d6:23:da:a9:a4:cf:3f:cf:25:1e:e2:92:18: b1:0b:8e:80:c3:bd:6b:50:57:eb:b5:14:f9:27:c4:1d:b7:d2: 6b:64:dc:3c:8b:56:9d:88:d7:a6:fa:83:cd:92:73:b8:a8:89: 6b:f6:b3:dc:4a:37:96:1f:d3:2a:ae:d6:86:51:f8:8d:e2:39: 6f:fb:83:a1:52:52:0e:df:fa:48:cd:41:fc:43:3b:0f:4a:43: aa:37:f2:47:10:be:65:0f:36:6e:e2:99:cb:3b:c6:f5:61:5a: 43:8f:a5:3a:07:16:3e:a4:ad:52:97:6b:39:d6:2b:0a:f5:7e: cf:26:e5:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywbwJLcsp8U+QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZGQyM2Y2NmYtNTE2Zi00ZDk5LWIzYzctMjRiYzM1MDdhZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIjVcS8gAVIW0nJ5uOxhU1Mn4DSFoAx5G49y o+cFyzB1PbS9NhK5vnazDgJlvEWuECAdza1TveQMVj3YHl+UuV0cFuUprt11xKAj KZfj0J8BU/onq9wbQc8jSE0I1ug4sgJBjCl8no1CSRy38Q/wHHGaWIgBNIcVjsPB auFRfvSonNXbqTmMnLEWqKg07Yi0sVF44X00hk50/Ym+rJUCyDLibrg3Nw7OcMuH cmAxfs5tipzw25Aw73LCsvA0ivoSBOIQIU+NK1y2SQfJqPXDgyIj3izecoH4dAMd /bbN4Twk9xRDhvqTxwUgw0qqsgOpsGNVaHwzFy3WY7fl6h4PpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjhwafudA5t68AB5LlJmoJaHOphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvM2M0NWY1NjQtZTAxMC0z MmY5LTllNDctMDI0ZjhmZWFmNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKDd78eWDISQR/x0E9aAloE3pTA156vxAZ5u6kMIudqVcEV6vd4E6gK Z1IPyhDlQVtdiMHG46X8MwsZYeHsUCc61twnGzWZca8qSxzvcYsmpOZJcvSNF608 95JYyVN9rVHSHraWvd3TJuhLEPHwRmbXHeD4LkPQFdEvBO1eMtnyxpq61iPaqaTP P88lHuKSGLELjoDDvWtQV+u1FPknxB230mtk3DyLVp2I16b6g82Sc7ioiWv2s9xK N5Yf0yqu1oZR+I3iOW/7g6FSUg7f+kjNQfxDOw9KQ6o38kcQvmUPNm7imcs7xvVh WkOPpToHFj6krVKXaznWKwr1fs8m5Xw= -----END CERTIFICATE-----Generated at Mon Jun 30 14:37:57 2025 by rpki-client