$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: 0ohaqtKxKMZhhW3ENWr5dJfi8IxblXpnLZ62JKEIrBE= Subject key identifier: 2B:2E:8C:72:0A:64:EC:36:7A:B4:AE:3C:A1:35:80:69:CE:4D:CE:01 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F43285849A354815B8EA24CEC72403180 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:81:5b:8e:a2:4c:ec:72:40:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=0795072d-9623-4fda-9279-5b7d6150811c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:aa:d5:b5:d6:90:4e:19:74:5a:90:11:ca: a0:00:e7:92:7a:c9:b2:74:e2:bd:bd:83:c7:57:31: 98:42:68:66:97:16:b6:05:20:7e:39:82:4c:76:75: 92:1e:e8:d1:3f:f1:6d:8a:c0:9e:64:7b:17:83:1c: 3f:5c:88:53:1d:65:bb:08:9c:7e:9c:86:4f:f0:84: 08:d3:f1:1f:38:8a:07:53:d0:dd:10:91:73:c6:2d: 97:ae:39:28:c6:5d:6f:fe:c3:0a:4e:9c:87:14:39: 98:cd:a3:0b:24:48:5a:f4:14:39:06:17:c5:27:e0: a5:34:48:88:b0:91:ec:21:c7:e8:fc:e7:42:32:9c: 77:d7:ed:63:6f:d6:51:76:f8:c4:7d:77:94:6f:df: 25:b1:ae:b0:fc:19:30:02:3f:19:97:dd:cc:d8:00: 44:1a:6d:d6:0a:0d:7c:c3:ed:3a:1f:26:c0:3d:b1: 1c:fc:5a:dc:22:22:96:fa:9f:f7:fc:73:20:f0:aa: 1b:bd:93:e7:90:8e:34:1e:b6:d6:ab:ff:de:86:ff: 1b:c9:36:69:56:4a:8b:8e:18:72:f6:77:b4:46:81: 06:14:b4:24:fb:5e:e6:39:d2:a4:d9:88:7d:74:be: 0c:9a:15:3d:b7:ee:01:b0:15:af:4e:98:76:bd:4b: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2E:8C:72:0A:64:EC:36:7A:B4:AE:3C:A1:35:80:69:CE:4D:CE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5c:50:3b:db:8a:ea:9c:d6:47:21:38:e7:26:10:3c:86:bb: b4:ac:1d:68:d4:cd:d8:4f:ab:ff:47:11:d2:91:ea:af:e0:26: 49:58:61:d4:82:c0:97:5e:02:0d:9e:40:df:ac:2c:e6:82:dd: 98:7e:f6:c6:7c:22:9a:96:18:f2:9c:c1:4a:b6:f3:b3:1f:c8: df:75:e6:c4:a4:b9:7c:fc:3f:a7:92:a9:49:48:94:37:47:6e: dc:e7:3b:e3:80:f5:0b:8a:41:65:7a:28:82:32:df:0c:81:26: 66:b2:79:76:4f:38:98:a3:bf:bc:4e:60:0e:a2:81:6d:fa:f6: 41:b6:7f:ce:72:46:e6:e7:64:13:86:64:ad:6c:51:5c:2d:af: 3c:bb:04:97:db:09:6f:80:4a:52:8b:85:ba:f8:4a:2f:f5:69: 72:ab:a4:3e:44:c3:f1:5a:32:eb:48:78:a0:df:a1:7a:e8:d2: 46:92:a9:e9:16:a1:c7:14:85:4a:96:e7:c7:f7:b6:3b:78:8a: e9:d4:2c:45:9a:73:12:ca:af:11:20:1e:de:e8:85:f4:7a:7b: f7:7e:35:e4:1b:a1:7d:eb:6e:41:a2:94:3d:b4:fb:62:43:67: ea:33:7b:60:a1:41:5b:30:1f:f2:25:41:52:0c:9a:90:15:f3: 54:99:44:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIFbjqJM7HJAMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk MDc5NTA3MmQtOTYyMy00ZmRhLTkyNzktNWI3ZDYxNTA4MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2aq1bXWkE4ZdFqQEcqgAOeSesmydOK9vYPH VzGYQmhmlxa2BSB+OYJMdnWSHujRP/FtisCeZHsXgxw/XIhTHWW7CJx+nIZP8IQI 0/EfOIoHU9DdEJFzxi2Xrjkoxl1v/sMKTpyHFDmYzaMLJEha9BQ5BhfFJ+ClNEiI sJHsIcfo/OdCMpx31+1jb9ZRdvjEfXeUb98lsa6w/BkwAj8Zl93M2ABEGm3WCg18 w+06HybAPbEc/FrcIiKW+p/3/HMg8KobvZPnkI40HrbWq//ehv8byTZpVkqLjhhy 9ne0RoEGFLQk+17mOdKk2Yh9dL4MmhU9t+4BsBWvTph2vUvLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsujHIKZOw2erSuPKE1gGnOTc4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpcUDvbiuqc1kchOOcmEDyGu7SsHWjUzdhPq/9HEdKR6q/gJklYYdSC wJdeAg2eQN+sLOaC3Zh+9sZ8IpqWGPKcwUq287MfyN915sSkuXz8P6eSqUlIlDdH btznO+OA9QuKQWV6KIIy3wyBJmayeXZPOJijv7xOYA6igW369kG2f85yRubnZBOG ZK1sUVwtrzy7BJfbCW+ASlKLhbr4Si/1aXKrpD5Ew/FaMutIeKDfoXro0kaSqekW occUhUqW58f3tjt4iunULEWacxLKrxEgHt7ohfR6e/d+NeQboX3rbkGilD20+2JD Z+oze2ChQVswH/IlQVIMmpAV81SZRE8= -----END CERTIFICATE-----Generated at Mon May 5 05:15:40 2025 by rpki-client