$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa File: 1cd2ae84-266a-3017-bcaa-4c3494a17476.roa (raw, json) Hash identifier: b2XMSq8b1Ch1dE2jt3L1GOqzO5YCHENC7HDSfOxchMo= Subject key identifier: DF:C6:BD:E7:2E:9B:CC:B5:95:E5:76:AC:C3:80:E5:62:BC:B0:EC:6C Certificate issuer: /CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb Certificate serial: 010D0C9F43285849CE9A6C702874BE47863D7180 Authority key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 46626 IP address blocks: 137.83.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6c:70:28:74:be:47:86:3d:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=b7b3b1bf-dc50-46f6-bea1-d3ba85662940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:8b:62:95:69:6d:cc:36:c2:f3:cc:ce:2a: 8a:e4:6d:87:31:27:68:79:80:92:9a:37:a4:07:86: 88:2f:71:4c:ba:22:83:3c:95:fe:d0:f4:eb:9d:7d: 60:41:2b:8a:3c:e3:fc:8b:b4:80:aa:47:a5:eb:9a: e0:fe:4b:3a:ac:67:a0:eb:67:9c:c8:92:92:66:00: f3:b0:52:a2:a3:3e:9f:ae:19:39:a5:56:e4:f6:bd: 7b:4c:4d:64:e0:34:dc:60:65:c7:20:5e:ae:97:6b: 20:95:a0:27:e3:c7:87:bf:c3:b9:ea:bc:6d:f3:90: b8:f6:fd:2e:5e:a2:1d:3d:e0:46:21:06:28:47:2b: f0:e8:88:a6:71:54:9a:91:34:79:79:aa:7f:50:bb: 76:ae:b9:fa:9b:6a:c6:a7:5d:a5:cf:a4:a6:af:93: 49:31:45:81:fd:b3:6a:40:8b:09:47:8f:59:30:65: 78:09:fe:86:a4:1a:a1:f6:df:35:9d:20:4a:60:04: 99:6f:ca:eb:38:48:06:8d:67:49:a6:a3:62:2b:d8: 36:21:fd:e5:4a:8d:90:ba:a4:bf:96:41:5a:c5:36: 43:10:26:ee:3d:45:fb:ab:a6:9f:ee:b8:04:e4:49: c6:10:bc:d2:ce:ae:9d:7e:1f:3b:26:f7:7f:d5:5e: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C6:BD:E7:2E:9B:CC:B5:95:E5:76:AC:C3:80:E5:62:BC:B0:EC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/1cd2ae84-266a-3017-bcaa-4c3494a17476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl X509v3 Authority Key Identifier: keyid:8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer sbgp-ipAddrBlock: critical IPv4: 137.83.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b0:5f:83:26:4c:9b:b6:41:f1:27:bb:a9:29:d9:af:31:f8: 9d:6b:2a:d4:21:86:6a:76:d1:82:a2:5d:af:fd:22:da:e7:37: 76:68:6a:93:5e:0d:11:6f:79:b9:cd:eb:71:99:f9:47:53:ae: d8:fe:b9:b4:5f:09:89:88:43:f8:09:ad:9a:e9:5b:e5:b0:35: 32:f4:84:4f:c2:ca:d5:de:d0:3a:eb:84:3b:0a:09:07:a4:d8: 7a:32:a4:5f:14:67:0a:dc:d3:c4:64:66:9c:ac:ff:2c:b0:82: f5:91:0d:23:6c:28:3c:48:39:ae:0d:1e:23:e3:01:f9:72:74: e2:a8:a9:ef:c7:93:bb:9f:91:60:3b:6c:33:04:c0:7a:ee:8e: ac:ce:87:d7:c3:11:fe:32:46:f4:e3:1e:ba:cc:2b:5e:bd:67: dd:00:d4:14:d8:e8:5e:1b:27:8d:48:c5:9a:5d:4b:7f:63:48: 59:cb:86:31:26:1c:81:b7:96:92:06:41:c5:4e:cb:80:00:bf: 45:17:45:e7:e7:c1:c5:c8:71:53:cc:6e:6f:29:cd:67:9b:d6: d9:60:99:eb:f1:1e:d3:b1:24:71:73:e2:72:1e:2d:62:a2:44: 49:72:58:3a:b8:9f:df:ea:e7:53:d5:84:e8:ef:97:f2:3b:33: 95:87:2b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmxwKHS+R4Y9cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3ZDUwMmEtY2YxMy00ZWUwLWJkYjEtZDhmZDBhZmM2 Y2ViMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YjdiM2IxYmYtZGM1MC00NmY2LWJlYTEtZDNiYTg1NjYyOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4uLYpVpbcw2wvPMziqK5G2HMSdoeYCSmjek B4aIL3FMuiKDPJX+0PTrnX1gQSuKPOP8i7SAqkel65rg/ks6rGeg62ecyJKSZgDz sFKioz6frhk5pVbk9r17TE1k4DTcYGXHIF6ul2sglaAn48eHv8O56rxt85C49v0u XqIdPeBGIQYoRyvw6IimcVSakTR5eap/ULt2rrn6m2rGp12lz6Smr5NJMUWB/bNq QIsJR49ZMGV4Cf6GpBqh9t81nSBKYASZb8rrOEgGjWdJpqNiK9g2If3lSo2QuqS/ lkFaxTZDECbuPUX7q6af7rgE5EnGELzSzq6dfh87Jvd/1V4C2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/Gvecum8y1leV2rMOA5WK8sOxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYzdk NTAyYS1jZjEzLTRlZTAtYmRiMS1kOGZkMGFmYzZjZWIvMWNkMmFlODQtMjY2YS0z MDE3LWJjYWEtNGMzNDk0YTE3NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2M3ZDUwMmEtY2YxMy00ZWUwLWJk YjEtZDhmZDBhZmM2Y2ViLzNjN2Q1MDJhLWNmMTMtNGVlMC1iZGIxLWQ4ZmQwYWZj NmNlYi5jcmwwHwYDVR0jBBgwFoAUjcUN26yf/QqDYVXI2ztZWtc6A84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYzdkNTAyYS1jZjEzLTRlZTAtYmRiMS1kOGZk MGFmYzZjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVM5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKwX4MmTJu2QfEnu6kp2a8x+J1rKtQhhmp20YKiXa/9ItrnN3ZoapNe DRFvebnN63GZ+UdTrtj+ubRfCYmIQ/gJrZrpW+WwNTL0hE/CytXe0DrrhDsKCQek 2HoypF8UZwrc08RkZpys/yywgvWRDSNsKDxIOa4NHiPjAflydOKoqe/Hk7ufkWA7 bDMEwHrujqzOh9fDEf4yRvTjHrrMK169Z90A1BTY6F4bJ41IxZpdS39jSFnLhjEm HIG3lpIGQcVOy4AAv0UXRefnwcXIcVPMbm8pzWeb1tlgmevxHtOxJHFz4nIeLWKi RElyWDq4n9/q51PVhOjvl/I7M5WHK2Y= -----END CERTIFICATE-----Generated at Wed May 14 12:39:27 2025 by rpki-client