$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa File: 7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json) Hash identifier: 8d+GtnFCY5D5PN3xF39X8c3vUqjpfiV9dv9u4ZfCg18= Subject key identifier: 73:51:4A:A7:A6:9A:BF:66:6C:FF:AB:E6:FC:57:F0:85:3E:15:C5:23 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849B14A0E74A9ED15CB24519780 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 25645 IP address blocks: 137.239.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0e:74:a9:ed:15:cb:24:51:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=197e17ff-e2cf-47c2-af49-42e6cba60d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:a0:43:4f:1c:7d:73:84:ba:37:21:76:27: 8e:ed:fe:6e:c0:97:63:46:29:e4:81:a4:c1:54:d0: f6:97:e1:09:c8:17:5b:59:ce:54:35:32:1b:26:df: 38:60:b3:79:54:8a:cd:db:ef:8e:82:fd:59:de:ab: a4:eb:f4:01:76:ee:86:9d:1c:30:c2:0a:44:8e:8f: ba:13:f2:71:8e:88:b4:18:d7:96:6b:47:65:e4:b9: 58:89:15:5e:6a:9b:a8:fb:87:b6:ac:34:b4:8e:c3: 12:a4:56:06:88:df:03:c2:c4:84:6d:e3:47:60:82: c9:17:e9:e3:ee:d2:22:73:74:4a:e7:21:73:8c:56: d6:7d:f4:24:e5:29:78:0a:61:eb:44:26:3f:e6:61: a5:97:d3:a8:a9:83:44:b6:ed:b3:bf:e5:9e:63:39: a7:23:2c:85:c6:96:86:24:fd:0a:59:36:59:9a:9d: 97:80:10:4b:c7:e6:20:21:d7:5a:27:b9:aa:b0:5a: 2f:1b:7a:a5:cb:d3:51:be:29:ae:4a:68:00:b3:bc: 09:a9:1c:ec:6c:77:8a:2b:4e:25:99:d5:5c:12:ce: d7:6f:bb:33:ed:a5:b1:39:c2:61:02:4e:a8:6b:f2: 0c:c0:16:75:71:60:25:34:13:2d:72:0a:d6:4c:c8: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:51:4A:A7:A6:9A:BF:66:6C:FF:AB:E6:FC:57:F0:85:3E:15:C5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7b:44:e6:57:c8:21:c7:b1:45:14:9a:97:c6:c2:46:4f:76: 95:d4:d5:9c:6c:62:e4:d5:32:b3:2e:36:42:bb:c0:71:5f:e4: dd:78:ca:7e:fa:06:89:3e:01:1c:73:95:1a:c7:3e:1d:9d:1f: 2d:ed:5b:4f:62:67:d8:73:b4:cc:12:14:38:ee:1e:7f:7b:ff: a0:f7:97:aa:b7:2d:7b:47:32:a2:97:63:70:2f:69:1d:b0:55: 62:71:b8:2b:4f:61:01:9c:91:f1:91:82:c8:e0:59:8e:d4:9b: 98:ee:51:6a:b0:e4:b4:0a:ce:22:fc:bb:ec:bb:a0:b2:5d:80: 79:30:28:f8:01:7f:07:50:30:7f:de:1a:0a:bd:3c:37:97:58: 2a:2e:21:88:ee:56:a1:11:73:49:e6:00:00:73:30:25:85:4e: 7c:c3:37:14:e7:f7:19:95:b6:b8:06:63:b6:21:3b:40:37:fc: 02:3d:71:5e:a1:7f:e4:47:bc:5d:f3:a4:a3:ce:6d:80:f2:9c: 84:45:1d:60:86:c6:de:aa:ee:39:1a:fc:3e:27:4d:10:d6:54: 75:6e:d6:61:15:c7:a5:d8:d6:43:c3:90:9b:ad:70:c2:ea:d8: bc:75:33:04:89:b6:0d:b3:da:b3:39:13:a0:3e:e4:4a:37:6a: 88:33:4a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg50qe0VyyRRl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTk3ZTE3ZmYtZTJjZi00N2MyLWFmNDktNDJlNmNiYTYwZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaagQ08cfXOEujchdieO7f5uwJdjRinkgaTB VND2l+EJyBdbWc5UNTIbJt84YLN5VIrN2++Ogv1Z3quk6/QBdu6GnRwwwgpEjo+6 E/Jxjoi0GNeWa0dl5LlYiRVeapuo+4e2rDS0jsMSpFYGiN8DwsSEbeNHYILJF+nj 7tIic3RK5yFzjFbWffQk5Sl4CmHrRCY/5mGll9OoqYNEtu2zv+WeYzmnIyyFxpaG JP0KWTZZmp2XgBBLx+YgIddaJ7mqsFovG3qly9NRvimuSmgAs7wJqRzsbHeKK04l mdVcEs7Xb7sz7aWxOcJhAk6oa/IMwBZ1cWAlNBMtcgrWTMhxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNRSqemmr9mbP+r5vxX8IU+FcUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvN2E4ODgwNDMtYmViMC0z MWM1LTlkMDctOTM2Mzk2YzhkMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt7ROZXyCHHsUUUmpfGwkZPdpXU1ZxsYuTVMrMuNkK7wHFf5N14yn76 Bok+ARxzlRrHPh2dHy3tW09iZ9hztMwSFDjuHn97/6D3l6q3LXtHMqKXY3AvaR2w VWJxuCtPYQGckfGRgsjgWY7Um5juUWqw5LQKziL8u+y7oLJdgHkwKPgBfwdQMH/e Ggq9PDeXWCouIYjuVqERc0nmAABzMCWFTnzDNxTn9xmVtrgGY7YhO0A3/AI9cV6h f+RHvF3zpKPObYDynIRFHWCGxt6q7jka/D4nTRDWVHVu1mEVx6XY1kPDkJutcMLq 2Lx1MwSJtg2z2rM5E6A+5Eo3aogzSlY= -----END CERTIFICATE-----Generated at Mon May 12 05:33:38 2025 by rpki-client