$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa File: 4c645004-5654-3403-b45f-d0b7069b81e6.roa (raw, json) Hash identifier: Q8TDPKvxKx96mp4mBndxZ0Gg8I+V2SijS9/ZFmY34YA= Subject key identifier: 0E:BA:BD:F2:12:DF:44:B7:62:A9:F8:31:D6:E7:D1:37:36:C2:B8:89 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849BDDA2A4E8DFC12402E179D68 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 25645 IP address blocks: 137.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2a:4e:8d:fc:12:40:2e:17:9d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d494e119-c86a-4a8a-bd04-f127b40ea55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b8:83:0d:40:21:19:06:12:ed:2f:a6:2a:62: 4f:48:71:3b:3e:54:6b:37:28:42:14:31:1e:99:f2: a0:8d:26:f1:0c:0a:36:f9:f6:b8:78:04:5c:1b:2b: 3f:52:12:fa:eb:89:96:68:7f:e0:20:ce:27:e8:b7: 7f:92:7a:3b:ed:6f:25:f2:ae:80:00:00:91:2d:2c: 94:2c:99:d6:dc:ed:6c:12:d6:55:1a:f5:c4:43:70: 34:e3:b9:de:b0:b3:3c:0e:d4:ba:b0:f6:5f:94:93: 9a:d2:b6:d7:41:7a:cb:11:7a:e0:81:a2:d2:49:79: bd:58:a1:d6:fb:09:3f:6b:2d:30:f2:4e:7a:dd:13: 34:03:48:af:3f:b0:37:d6:6c:6a:fa:54:5f:69:82: f9:02:e1:22:6a:09:9c:c5:47:49:53:ce:df:0b:5b: ca:0e:fc:d0:fc:d4:a1:b7:76:15:10:07:d3:3a:8a: 03:ec:fd:04:cf:f2:af:81:38:76:32:67:2b:7d:0c: 86:08:9d:4d:68:d9:d3:93:3e:47:18:48:4a:67:5e: 83:40:d9:01:df:43:f5:cf:d5:80:8e:0f:2c:91:db: 83:32:aa:e2:c1:f2:e7:ab:d5:16:49:6b:79:e7:b0: 9c:c5:1e:70:23:24:6f:0b:ea:70:80:62:1e:2e:74: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:BD:F2:12:DF:44:B7:62:A9:F8:31:D6:E7:D1:37:36:C2:B8:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c6:9f:04:61:2d:fe:bd:ab:0b:1b:d6:43:2b:b7:7e:88:6a: 08:20:9b:7c:5d:7a:80:67:64:96:f3:f7:9b:f1:96:13:6d:f0: 98:8c:72:da:9e:e2:e5:55:34:b2:3b:b4:af:42:d4:5a:96:f7: f0:d6:38:67:9b:f9:f7:64:fe:37:ed:ea:3d:f3:db:ff:f2:b7: 05:62:f1:4f:7b:7d:e8:87:4f:b0:ad:56:dc:01:6a:8b:7a:cc: 77:dc:e2:42:9e:e7:10:64:5f:41:f9:a5:09:44:b5:0d:6a:5a: 10:b2:9b:54:55:72:e9:b3:55:39:1a:cb:cb:84:ab:eb:f5:4b: 87:0b:56:e4:c5:48:ec:ec:a4:73:37:49:12:8a:f5:45:53:93: 33:0c:cd:ea:c1:ea:0c:7e:e5:5e:ad:52:bd:cd:5b:fd:85:8b: 7b:7b:5b:0d:ea:3c:28:d7:76:46:f9:19:5d:ee:68:77:70:c0: 12:92:89:8d:f6:bb:a1:74:fb:d8:b6:77:f1:94:78:5a:61:93: 8d:6a:5a:e0:65:4f:e3:29:f0:4c:7a:be:5c:43:5e:2b:95:ed: 93:22:49:2a:2b:e5:1e:87:99:ad:d2:b5:e6:f2:9e:2d:bf:49: a4:05:94:03:c8:47:04:13:13:a6:f0:ae:18:c0:e0:8e:1a:94: e6:e4:2f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92ipOjfwSQC4XnWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ5NGUxMTktYzg2YS00YThhLWJkMDQtZjEyN2I0MGVhNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLiDDUAhGQYS7S+mKmJPSHE7PlRrNyhCFDEe mfKgjSbxDAo2+fa4eARcGys/UhL664mWaH/gIM4n6Ld/kno77W8l8q6AAACRLSyU LJnW3O1sEtZVGvXEQ3A047nesLM8DtS6sPZflJOa0rbXQXrLEXrggaLSSXm9WKHW +wk/ay0w8k563RM0A0ivP7A31mxq+lRfaYL5AuEiagmcxUdJU87fC1vKDvzQ/NSh t3YVEAfTOooD7P0Ez/KvgTh2MmcrfQyGCJ1NaNnTkz5HGEhKZ16DQNkB30P1z9WA jg8skduDMqriwfLnq9UWSWt557CcxR5wIyRvC+pwgGIeLnQhawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA66vfIS30S3Yqn4Mdbn0Tc2wriJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGM2NDUwMDQtNTY1NC0z NDAzLWI0NWYtZDBiNzA2OWI4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHGnwRhLf69qwsb1kMrt36Iagggm3xdeoBnZJbz95vxlhNt8JiMctqe 4uVVNLI7tK9C1FqW9/DWOGeb+fdk/jft6j3z2//ytwVi8U97feiHT7CtVtwBaot6 zHfc4kKe5xBkX0H5pQlEtQ1qWhCym1RVcumzVTkay8uEq+v1S4cLVuTFSOzspHM3 SRKK9UVTkzMMzerB6gx+5V6tUr3NW/2Fi3t7Ww3qPCjXdkb5GV3uaHdwwBKSiY32 u6F0+9i2d/GUeFphk41qWuBlT+Mp8Ex6vlxDXiuV7ZMiSSor5R6Hma3Stebyni2/ SaQFlAPIRwQTE6bwrhjA4I4alObkL1U= -----END CERTIFICATE-----Generated at Mon May 12 05:38:13 2025 by rpki-client