$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa File: b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa (raw, json) Hash identifier: BB8x9bAxSyfzB5x2ZG8XfYfLPD5+Yw770qM4JGKGxNo= Subject key identifier: 9D:44:9D:DA:FD:B5:B8:63:5C:F1:20:A2:EB:86:54:60:6E:E2:8B:FC Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F17F75DD05A9B8F7E0680 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 137.186.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:17:f7:5d:d0:5a:9b:8f:7e:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=3b64b7e8-852e-4033-a1df-e6ec728b2b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:51:cc:ce:b6:42:9d:2b:a8:d6:53:ae:c3:36: 70:bd:64:1c:23:9c:f5:e6:18:8c:5b:c2:26:9b:49: af:29:52:3f:5d:7e:56:e9:32:d9:83:40:c9:74:0c: 5a:e0:0b:52:93:fb:4d:10:36:13:c0:cc:61:43:ca: 6d:30:b2:1f:85:56:9e:ed:c5:1e:b1:71:9a:03:cb: 50:3f:55:8b:84:8c:39:6b:8f:ce:99:c1:55:14:0b: ec:1a:46:13:bc:ff:59:78:9b:02:38:12:42:78:f3: c0:b2:ac:5b:5c:ab:8b:1a:67:a6:87:01:12:73:c6: 58:cd:7e:ee:14:e2:08:18:c8:b0:5c:4d:d7:50:12: 6b:16:e7:6f:46:73:8b:6b:41:d4:1a:15:ac:55:37: 27:15:d0:26:44:d7:9c:e0:58:25:69:16:6e:98:72: e0:ad:3a:ab:6a:62:a1:09:a6:6e:3a:71:34:8c:30: 4b:24:49:9e:88:8c:08:58:7a:26:ab:9f:2f:f8:e4: 39:e1:09:84:c1:7f:a0:0e:2e:dd:a0:f2:3b:6d:59: 56:da:e1:68:1f:b4:1b:fe:0b:f1:3d:e8:bb:e7:23: e3:30:6a:9a:d1:5d:80:97:13:2b:61:a8:91:11:f0: e9:67:6f:6e:34:92:ac:87:a6:8e:73:f2:9e:76:85: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:44:9D:DA:FD:B5:B8:63:5C:F1:20:A2:EB:86:54:60:6E:E2:8B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b88f8dd7-6568-39c1-998b-e195c45b4b6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 137.186.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e6:6d:70:8c:3f:57:6e:9d:e7:36:15:21:dd:86:23:5a:fc:71: d4:37:4a:7b:7f:3b:e5:bf:7e:f9:56:9c:a5:ba:f7:b9:37:b1: 2e:93:55:21:9e:60:77:93:f1:ed:cd:42:e4:bb:69:2c:a6:29: 1e:e6:bc:a7:38:b9:3b:28:22:53:b7:40:6c:76:b4:f5:ab:81: 33:12:b7:a6:91:f2:09:4c:9b:7a:e1:2d:f6:b9:8e:bf:66:0e: 1a:a8:37:fa:d7:72:1a:f8:79:bf:67:96:65:d3:ea:4f:3c:bd: 41:61:9d:63:70:20:f3:8d:70:a0:e1:01:8e:eb:7c:c0:92:3c: fc:52:79:ac:54:ab:b2:53:29:16:4d:07:58:2e:5b:35:1e:d6: ac:1f:89:61:78:33:f8:8f:fe:ec:fe:33:f8:f9:31:7a:c9:e6: b5:2b:cf:34:bd:3d:b7:38:1f:b4:e0:27:35:e2:1e:95:8b:44: 38:46:33:b7:1f:ce:71:28:45:1f:c1:50:e7:bb:ce:74:82:43: fa:d3:8a:d0:80:75:fe:7c:f7:c6:dd:f9:21:8c:fc:bf:5b:0d: c4:54:09:e6:99:4b:5e:d0:4a:f7:55:47:f7:c6:ed:c7:02:4b: 8d:15:c4:c3:94:a7:66:f1:bf:f3:64:6e:dd:43:27:a8:8c:19: f7:36:42:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxf3XdBam49+BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk M2I2NGI3ZTgtODUyZS00MDMzLWExZGYtZTZlYzcyOGIyYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lHMzrZCnSuo1lOuwzZwvWQcI5z15hiMW8Im m0mvKVI/XX5W6TLZg0DJdAxa4AtSk/tNEDYTwMxhQ8ptMLIfhVae7cUesXGaA8tQ P1WLhIw5a4/OmcFVFAvsGkYTvP9ZeJsCOBJCePPAsqxbXKuLGmemhwESc8ZYzX7u FOIIGMiwXE3XUBJrFudvRnOLa0HUGhWsVTcnFdAmRNec4FglaRZumHLgrTqramKh CaZuOnE0jDBLJEmeiIwIWHomq58v+OQ54QmEwX+gDi7doPI7bVlW2uFoH7Qb/gvx Pei75yPjMGqa0V2AlxMrYaiREfDpZ29uNJKsh6aOc/KedoVRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1Endr9tbhjXPEgouuGVGBu4ov8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjg4ZjhkZDctNjU2OC0z OWMxLTk5OGItZTE5NWM0NWI0YjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiboSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOZtcIw/V26d5zYVId2GI1r8cdQ3Snt/O+W/fvlWnKW697k3sS6TVSGe YHeT8e3NQuS7aSymKR7mvKc4uTsoIlO3QGx2tPWrgTMSt6aR8glMm3rhLfa5jr9m DhqoN/rXchr4eb9nlmXT6k88vUFhnWNwIPONcKDhAY7rfMCSPPxSeaxUq7JTKRZN B1guWzUe1qwfiWF4M/iP/uz+M/j5MXrJ5rUrzzS9Pbc4H7TgJzXiHpWLRDhGM7cf znEoRR/BUOe7znSCQ/rTitCAdf5898bd+SGM/L9bDcRUCeaZS17QSvdVR/fG7ccC S40VxMOUp2bxv/Nkbt1DJ6iMGfc2Qvo= -----END CERTIFICATE-----Generated at Sat May 10 09:49:34 2025 by rpki-client