$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa File: cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa (raw, json) Hash identifier: xbScpKhZ9MvkTc58HRdFd4BEXnAfdvQOiayVFR8ZvII= Subject key identifier: 9D:DC:91:3B:E5:BE:08:6D:E6:73:D3:8F:E5:56:16:2A:84:0B:2D:7C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F181EF29D4975F037B500 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 137.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:18:1e:f2:9d:49:75:f0:37:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=e0ff1d46-5742-4ad2-acb7-b3790655d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:54:e5:1d:dd:26:9d:ad:85:ef:01:56:6a: 6b:c4:89:c9:e1:99:ed:93:4e:1d:56:a0:c0:1b:d5: 59:a0:d1:6c:78:35:4c:5a:75:87:09:ae:d0:32:1b: e9:e0:e2:8d:3d:7e:ec:73:92:58:31:eb:3c:86:f7: ec:be:b9:2e:98:ca:a4:4d:78:ee:b1:2f:42:66:02: 71:12:68:64:b6:f8:0c:4f:ed:38:84:0c:6a:36:18: 14:29:4d:a2:19:d2:8e:8d:a3:d4:4d:5f:e8:74:35: c2:ae:ef:d3:60:84:32:30:54:be:4d:3e:45:37:58: 22:28:cd:4a:77:d9:82:4b:c1:c1:ea:9b:ce:ee:b9: 39:78:ef:5c:cd:ef:7e:bd:f1:c6:94:4b:74:ec:40: a5:91:22:9f:75:c0:82:c8:60:6d:98:10:2d:f6:71: f0:bd:52:2d:da:9e:f4:be:c8:3a:d4:5e:4d:98:b7: 87:78:3b:a0:9e:b3:02:78:5b:b5:e9:e5:d9:32:26: c1:f4:e6:02:71:fc:a6:28:34:4c:4d:28:b3:cb:d2: 64:fb:f2:bd:a1:f6:f3:95:35:21:c8:fc:4d:76:10: 65:4b:3e:84:b4:4d:c1:3c:b4:75:e9:6a:ad:34:8a: 77:e6:4a:a4:53:34:76:da:2e:70:3c:a4:54:82:38: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:91:3B:E5:BE:08:6D:E6:73:D3:8F:E5:56:16:2A:84:0B:2D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cf5e505c-8d2a-3cfd-b88a-b706c5e75aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 137.186.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:27:84:a4:f6:69:b0:60:da:38:ea:fe:b8:9c:30:9e:68:93: ba:e2:1a:8f:af:99:db:c3:ba:0e:f9:6b:47:69:d5:9d:25:e1: 57:69:57:a0:89:03:ee:c3:3c:ca:a5:eb:6f:d9:d5:65:c5:cd: 78:5f:0d:32:93:fe:93:b3:28:f0:60:2f:c3:00:89:ba:f6:5f: ed:87:d1:d5:cb:b5:2d:ba:98:ef:ee:1c:fa:99:64:74:f1:37: 3d:8d:6b:f8:ba:9e:60:c3:1c:7d:5d:d6:d2:01:e0:54:f9:93: 83:15:da:8c:9f:8c:e6:38:15:b5:5c:4f:58:e9:54:86:ef:b0: 54:13:33:08:24:e2:88:e6:01:2d:38:40:7e:9e:32:d9:90:6d: 39:8b:3e:87:7e:b9:23:ca:34:a7:0d:46:ff:a3:a8:e6:d9:a1: 23:05:cf:82:50:ba:a6:3e:17:97:d3:67:27:ec:c9:31:b1:98: 23:dc:1a:27:4f:40:0a:49:5c:aa:c9:0d:f5:b6:85:b0:00:3e: de:b9:98:7a:0a:72:d2:4d:3f:98:bd:1d:b0:4e:be:7a:2c:8c: b1:b4:5c:44:a1:76:e4:6a:0c:04:a5:de:31:70:63:0a:db:00: c1:d8:55:60:ed:d0:d6:25:cc:ed:50:41:db:f8:90:4a:77:b2: ce:a0:0c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxge8p1JdfA3tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTBmZjFkNDYtNTc0Mi00YWQyLWFjYjctYjM3OTA2NTVkNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycJU5R3dJp2the8BVmprxInJ4Zntk04dVqDA G9VZoNFseDVMWnWHCa7QMhvp4OKNPX7sc5JYMes8hvfsvrkumMqkTXjusS9CZgJx EmhktvgMT+04hAxqNhgUKU2iGdKOjaPUTV/odDXCru/TYIQyMFS+TT5FN1giKM1K d9mCS8HB6pvO7rk5eO9cze9+vfHGlEt07EClkSKfdcCCyGBtmBAt9nHwvVIt2p70 vsg61F5NmLeHeDugnrMCeFu16eXZMibB9OYCcfymKDRMTSizy9Jk+/K9ofbzlTUh yPxNdhBlSz6EtE3BPLR16WqtNIp35kqkUzR22i5wPKRUgjiW8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3ckTvlvght5nPTj+VWFiqECy18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Y1ZTUwNWMtOGQyYS0z Y2ZkLWI4OGEtYjcwNmM1ZTc1YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiboUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0nhKT2abBg2jjq/ricMJ5ok7riGo+vmdvDug75a0dp1Z0l4VdpV6CJ A+7DPMql62/Z1WXFzXhfDTKT/pOzKPBgL8MAibr2X+2H0dXLtS26mO/uHPqZZHTx Nz2Na/i6nmDDHH1d1tIB4FT5k4MV2oyfjOY4FbVcT1jpVIbvsFQTMwgk4ojmAS04 QH6eMtmQbTmLPod+uSPKNKcNRv+jqObZoSMFz4JQuqY+F5fTZyfsyTGxmCPcGidP QApJXKrJDfW2hbAAPt65mHoKctJNP5i9HbBOvnosjLG0XEShduRqDASl3jFwYwrb AMHYVWDt0NYlzO1QQdv4kEp3ss6gDOA= -----END CERTIFICATE-----Generated at Fri May 9 15:42:40 2025 by rpki-client