$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa File: 6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa (raw, json) Hash identifier: HM5RUE7csl9ezEKjpcS5mqdi2J9ctpX70toE+PcXOik= Subject key identifier: C7:D3:11:8B:72:67:1D:DB:85:07:9E:AE:2A:64:F6:76:06:B4:40:6C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A3A1583DB6C4F1454FC77AB00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 25645 IP address blocks: 137.239.214.0/24 maxlen: 24 209.178.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:83:db:6c:4f:14:54:fc:77:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=e81f0b75-d317-4991-99f6-9c2bd2f2f594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:82:57:44:8b:0c:85:2e:cb:a6:95:74:3f: 7b:a1:ba:45:58:6c:c6:c8:fb:32:12:b3:36:a4:93: bf:39:58:a1:70:d7:69:22:9f:95:bd:25:d4:a0:0d: 4b:d3:70:e4:da:80:fd:83:23:57:13:bd:4d:35:f9: b1:a6:86:ca:32:4e:e0:d3:7d:b4:8b:d8:dc:56:f4: 3c:bb:77:ba:68:0d:55:c5:ea:fb:67:eb:98:57:fd: cb:ad:1d:19:74:c4:06:31:52:87:9e:11:11:f6:e6: 3b:d6:54:19:50:07:2d:c7:8b:ec:cf:b5:c9:a1:cb: cd:65:e5:ad:ce:cc:53:a7:3e:90:0c:bb:19:83:97: 32:0e:b5:ad:78:83:58:1f:2d:0e:19:ba:37:91:72: 9e:63:1b:93:c1:33:f0:2c:1c:3f:b0:e2:23:03:b5: 2e:00:57:5d:ef:c1:60:18:0f:19:d0:23:81:ed:4b: e0:bd:89:25:73:d6:04:32:69:b5:a7:81:87:7f:3b: 33:77:30:d2:91:fe:86:96:0e:47:43:2e:73:e0:9f: 48:b6:5a:1a:57:f9:dd:e2:c0:4f:93:a1:bd:9b:de: 8a:04:b2:93:6e:96:1e:d6:21:d6:42:aa:c1:39:d0: e8:51:f4:26:6a:14:45:46:60:73:b9:96:14:23:13: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:11:8B:72:67:1D:DB:85:07:9E:AE:2A:64:F6:76:06:B4:40:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/6915cb51-b851-3bf5-aaf5-a89ea39ad666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.214.0/24 209.178.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3c:cd:ee:c5:a4:d4:85:32:da:1a:d6:0a:52:07:14:d0:96: 82:66:6a:db:6b:66:d5:41:11:25:50:a0:7f:a4:db:20:a5:a6: d7:18:b5:fc:cc:98:25:34:f7:05:bc:af:3c:f5:a0:f8:37:e4: 21:e1:4a:4d:c5:72:48:66:0a:68:ad:d6:f2:ec:cf:4a:6d:0a: 84:e5:d6:ee:7e:22:88:1c:5d:14:cd:8f:1c:77:64:aa:16:f1: 96:e4:44:43:c4:05:05:23:ed:96:3f:0d:a8:98:58:b6:67:c2: e0:7b:6b:8c:ed:73:d0:6f:dc:57:8f:b0:9e:4f:c3:01:ae:9d: f6:65:c3:71:41:86:d6:d1:36:55:8e:49:c5:1d:4e:f2:ad:ea: 10:21:03:47:88:69:57:15:66:fc:08:ae:ed:2d:24:02:31:71: 77:b6:bd:c0:22:f3:2d:48:c4:6a:2f:b7:d9:27:97:d7:52:53: cb:82:13:24:e4:1d:66:29:f9:e4:9d:78:e2:f3:68:fa:8b:8f: 40:7e:0d:18:e8:4e:a8:c5:aa:60:2a:3d:90:33:66:be:66:5f: ad:92:df:10:9d:2a:01:19:b2:da:bd:4e:1b:b4:48:f9:4a:74: 61:68:43:2d:71:ae:5f:a7:d7:73:ab:c2:f1:a3:0f:fb:44:a7: 83:ac:dd:4b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo6FYPbbE8UVPx3qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZTgxZjBiNzUtZDMxNy00OTkxLTk5ZjYtOWMyYmQyZjJmNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOiCV0SLDIUuy6aVdD97obpFWGzGyPsyErM2 pJO/OVihcNdpIp+VvSXUoA1L03Dk2oD9gyNXE71NNfmxpobKMk7g0320i9jcVvQ8 u3e6aA1Vxer7Z+uYV/3LrR0ZdMQGMVKHnhER9uY71lQZUActx4vsz7XJocvNZeWt zsxTpz6QDLsZg5cyDrWteINYHy0OGbo3kXKeYxuTwTPwLBw/sOIjA7UuAFdd78Fg GA8Z0COB7UvgvYklc9YEMmm1p4GHfzszdzDSkf6Glg5HQy5z4J9ItloaV/nd4sBP k6G9m96KBLKTbpYe1iHWQqrBOdDoUfQmahRFRmBzuZYUIxN5CQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMfTEYtyZx3bhQeeripk9nYGtEBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNjkxNWNiNTEtYjg1MS0z YmY1LWFhZjUtYTg5ZWEzOWFkNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAie/WAwQA 0bL8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAk8ze7FpNSFMtoa1gpSBxTQloJmattrZtVBESVQoH+k2yCl ptcYtfzMmCU09wW8rzz1oPg35CHhSk3FckhmCmit1vLsz0ptCoTl1u5+IogcXRTN jxx3ZKoW8ZbkREPEBQUj7ZY/DaiYWLZnwuB7a4ztc9Bv3FePsJ5PwwGunfZlw3FB htbRNlWOScUdTvKt6hAhA0eIaVcVZvwIru0tJAIxcXe2vcAi8y1IxGovt9knl9dS U8uCEyTkHWYp+eSdeOLzaPqLj0B+DRjoTqjFqmAqPZAzZr5mX62S3xCdKgEZstq9 Thu0SPlKdGFoQy1xrl+n13OrwvGjD/tEp4Os3Us= -----END CERTIFICATE-----Generated at Mon Jun 30 23:13:23 2025 by rpki-client