$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa File: 32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa (raw, json) Hash identifier: mA7GS8h/5/ozBXas8osMhgELz7FBz4SXgEdSc9h3g24= Subject key identifier: 28:99:E3:73:2D:68:11:C2:E4:BD:2D:20:A2:0F:2C:0E:3A:26:14:45 Certificate issuer: /CN=7d07cbba-57bd-49fa-a417-c19f23af1ce3 Certificate serial: 010D0C9F43285849B41496C02C918D0198865480 Authority key identifier: 1E:4F:1F:6C:A5:3F:41:04:8F:0D:8A:43:64:DB:66:79:09:8F:6B:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 210 IP address blocks: 137.190.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/7d07cbba-57bd-49fa-a417-c19f23af1ce3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/7d07cbba-57bd-49fa-a417-c19f23af1ce3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:96:c0:2c:91:8d:01:98:86:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d07cbba-57bd-49fa-a417-c19f23af1ce3 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=4d921b58-d50b-4574-9b44-550ee4e170bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:ba:f8:ee:83:b9:be:22:4f:2b:90:2a:ec: 99:7f:44:6c:78:88:b9:2c:b0:3d:3c:94:62:dd:87: 62:5f:b4:77:8b:b0:ee:33:5f:74:2c:93:e7:f3:f8: d6:97:5e:29:61:70:b1:1f:d4:2d:1a:c3:bb:84:18: 63:17:8b:59:6d:43:1b:b3:e4:02:a3:27:0a:7c:66: c5:ab:db:e3:ee:46:7a:bc:dc:1b:13:b0:ba:cf:4d: fe:b6:fb:88:c2:a5:c9:c0:de:ee:bf:d8:fa:9f:dd: 56:7f:a8:6a:c5:0a:c9:21:14:65:ec:bd:1f:22:5e: 15:ab:89:99:f0:d7:3f:31:f7:34:9f:c9:7b:e3:f3: 6e:33:24:4e:e9:4c:5d:ab:5c:06:f6:8e:fd:be:8a: d6:a3:29:2c:7f:35:94:a0:be:6b:36:c2:e0:c0:76: fa:df:55:b3:11:d5:37:83:dc:5a:88:2e:f9:10:83: 2f:ee:60:e8:b0:d5:bb:54:b2:08:73:78:2f:fe:3c: b0:00:e8:6b:6a:5a:0e:83:04:25:bc:25:28:af:e5: 97:8e:68:6f:8b:d8:be:5e:b7:98:3e:ac:00:45:05: cf:dd:58:bb:26:e1:05:b6:64:96:f6:8c:06:61:7a: 69:76:1f:b1:0b:36:9e:f6:88:3d:53:08:62:b0:c4: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:E3:73:2D:68:11:C2:E4:BD:2D:20:A2:0F:2C:0E:3A:26:14:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/7d07cbba-57bd-49fa-a417-c19f23af1ce3.crl X509v3 Authority Key Identifier: keyid:1E:4F:1F:6C:A5:3F:41:04:8F:0D:8A:43:64:DB:66:79:09:8F:6B:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer sbgp-ipAddrBlock: critical IPv4: 137.190.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7c:4c:cc:c1:fb:e2:31:e1:84:d6:b5:d7:88:08:88:77:b4: e6:17:68:ec:9e:2e:06:13:ae:f5:01:c0:96:7f:87:9f:d8:fa: b4:f6:53:0f:8f:b1:b9:37:c9:65:3e:e2:70:71:18:ed:f7:03: 58:4d:07:cb:88:f7:b3:aa:f5:e2:3a:e2:5a:14:9c:7e:ad:17: 05:ae:76:42:a3:96:17:e2:d4:35:ab:f1:f8:8f:9d:25:99:02: ad:30:70:90:0d:6a:ce:10:10:74:68:28:16:a1:05:99:c8:34: ce:4e:8a:96:7f:00:43:a8:51:68:8e:d6:d4:34:30:0b:a8:f3: b8:33:73:03:88:77:57:0b:2a:95:66:e9:73:09:20:6a:73:43: e5:ec:75:6c:35:5c:d1:1d:0d:e1:53:32:fa:24:0d:56:75:1c: 0f:35:c5:c9:85:69:03:88:88:08:87:99:0d:89:23:7a:d7:90: 0c:2b:2e:c5:f3:f8:fd:24:26:36:d0:2e:21:fb:f1:22:6e:78: a3:f5:e6:ba:0a:b2:c8:7f:49:38:23:01:7b:df:7a:ed:cb:c0: f2:e6:b3:6e:b0:9d:2d:d7:69:97:f6:3a:68:72:11:80:6e:ed: ab:76:58:6d:27:20:ca:27:d1:13:68:33:a5:25:c9:dc:c2:b1: 1f:55:f2:76 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm0FJbALJGNAZiGVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QwN2NiYmEtNTdiZC00OWZhLWE0MTctYzE5ZjIzYWYx Y2UzMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk NGQ5MjFiNTgtZDUwYi00NTc0LTliNDQtNTUwZWU0ZTE3MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/+6+O6Dub4iTyuQKuyZf0RseIi5LLA9PJRi 3YdiX7R3i7DuM190LJPn8/jWl14pYXCxH9QtGsO7hBhjF4tZbUMbs+QCoycKfGbF q9vj7kZ6vNwbE7C6z03+tvuIwqXJwN7uv9j6n91Wf6hqxQrJIRRl7L0fIl4Vq4mZ 8Nc/Mfc0n8l74/NuMyRO6Uxdq1wG9o79vorWoyksfzWUoL5rNsLgwHb631WzEdU3 g9xaiC75EIMv7mDosNW7VLIIc3gv/jywAOhraloOgwQlvCUor+WXjmhvi9i+XreY PqwARQXP3Vi7JuEFtmSW9owGYXppdh+xCzae9og9UwhisMQ+iQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCiZ43MtaBHC5L0tIKIPLA46JhRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZDA3 Y2JiYS01N2JkLTQ5ZmEtYTQxNy1jMTlmMjNhZjFjZTMvMzI4NjFiZDUtNzJjMy0z ZTRkLWI1YjItMzliMzJlZTZiZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2QwN2NiYmEtNTdiZC00OWZhLWE0 MTctYzE5ZjIzYWYxY2UzLzdkMDdjYmJhLTU3YmQtNDlmYS1hNDE3LWMxOWYyM2Fm MWNlMy5jcmwwHwYDVR0jBBgwFoAUHk8fbKU/QQSPDYpDZNtmeQmPa8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZDA3Y2JiYS01N2JkLTQ5ZmEtYTQxNy1jMTlm MjNhZjFjZTMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAib4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVnxMzMH74jHhhNa114gIiHe05hdo7J4uBhOu9QHAln+Hn9j6tPZTD4+x uTfJZT7icHEY7fcDWE0Hy4j3s6r14jriWhScfq0XBa52QqOWF+LUNavx+I+dJZkC rTBwkA1qzhAQdGgoFqEFmcg0zk6Kln8AQ6hRaI7W1DQwC6jzuDNzA4h3VwsqlWbp cwkganND5ex1bDVc0R0N4VMy+iQNVnUcDzXFyYVpA4iICIeZDYkjeteQDCsuxfP4 /SQmNtAuIfvxIm54o/XmugqyyH9JOCMBe9967cvA8uazbrCdLddpl/Y6aHIRgG7t q3ZYbScgyifRE2gzpSXJ3MKxH1Xydg== -----END CERTIFICATE-----Generated at Wed May 7 13:39:46 2025 by rpki-client