$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa File: fa6f41c2-ba54-3381-a318-c231d13b19b3.roa (raw, json) Hash identifier: nYWxHSRHAdo4z/BRaxxRH4kEkWyw0rrNgH6FB5hMzUY= Subject key identifier: 2E:12:16:90:C5:77:BB:5F:9E:DE:00:00:35:F1:19:8A:61:82:95:B6 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C41D478BE505EFA0CABD80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 2152 IP address blocks: 137.164.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1d:47:8b:e5:05:ef:a0:ca:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=2d9e3bcf-57a4-4dc0-8db0-4d34725653aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:53:99:d6:07:5c:4d:1b:70:30:58:40:c2: 21:0e:f6:dd:d2:51:e4:24:1b:de:22:20:79:5e:7a: 3f:03:9d:dd:b1:b0:14:ff:35:55:42:95:f9:dd:c6: 37:5f:09:12:b8:e4:da:3c:84:2f:7c:a6:d8:49:72: 71:c3:21:7b:fe:4b:1f:c5:97:69:d4:84:bb:73:34: 40:dd:40:d6:4f:b3:26:cc:bc:ce:0d:c3:2c:22:c9: 99:30:c0:94:2d:2d:5c:ea:f2:c9:cf:74:ef:57:dc: 15:0b:c4:ee:07:33:77:b0:4a:bd:08:43:eb:08:9e: 0d:43:76:01:d3:5f:74:2f:9d:5a:95:2b:22:4c:aa: 49:98:45:3c:44:fc:6c:1f:36:1b:95:6d:d1:37:55: e7:33:09:98:f6:5a:b1:a3:43:93:b3:84:a5:ca:2b: d0:2e:bc:d1:b4:00:4b:4d:23:4e:9a:f9:aa:0f:3b: 3d:f0:b6:1c:a9:bc:7d:f3:09:fd:cd:4e:50:cc:36: 36:64:2c:6f:c1:85:46:22:26:a9:ed:e1:43:ab:98: e1:04:f9:85:ed:14:e7:8e:53:dd:2d:01:ff:75:22: c8:2f:7b:53:3c:bb:d6:2e:06:5a:43:ba:55:34:2c: 6b:44:21:ad:a3:57:23:b3:bf:d7:9e:e1:ad:f7:66: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:12:16:90:C5:77:BB:5F:9E:DE:00:00:35:F1:19:8A:61:82:95:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:03:67:f5:52:f6:9c:eb:b4:5b:b2:9e:26:07:17:e3:f0:07: 44:ff:12:8c:e3:a5:fd:96:16:d1:f7:54:cc:3b:21:17:17:d7: 04:cf:45:ae:4d:09:fc:8d:fc:ba:8c:9e:af:41:d0:fc:a9:e7: 23:1a:2b:f7:bf:30:e0:79:a6:71:59:b8:a7:31:d7:63:0b:91: b4:93:84:9d:e6:b8:c7:f2:62:d3:8a:19:d9:f7:af:16:57:ab: 13:af:a6:27:cb:e4:07:87:e2:e4:f1:ea:0c:f6:1c:6b:8c:b5: c9:5a:e6:6c:37:89:35:84:34:c4:42:6a:02:c1:a4:82:1b:84: f1:35:a4:df:e5:ac:ca:8c:c9:1d:28:f0:2e:cb:14:9f:45:5e: 2b:0c:d7:a1:a1:74:2e:72:c0:ec:9e:a7:64:c3:33:43:5c:55: f0:a3:85:6d:5c:69:d7:c6:50:18:ae:00:4d:fe:b0:db:ec:5e: df:c4:dd:1b:06:12:98:8e:73:f4:05:36:31:b1:3e:bf:92:be: 1c:36:96:ba:4c:6b:82:7e:58:d3:da:4d:8e:b6:5b:9a:b6:49: 7d:b2:f8:e7:d3:a8:71:62:34:e3:87:f3:ed:b2:9a:27:38:bb: 2b:c4:26:6f:42:24:e6:30:34:b2:54:f8:f3:3e:69:d5:59:91: de:5d:38:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB1Hi+UF76DKvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmQ5ZTNiY2YtNTdhNC00ZGMwLThkYjAtNGQzNDcyNTY1M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu1TmdYHXE0bcDBYQMIhDvbd0lHkJBveIiB5 Xno/A53dsbAU/zVVQpX53cY3XwkSuOTaPIQvfKbYSXJxwyF7/ksfxZdp1IS7czRA 3UDWT7MmzLzODcMsIsmZMMCULS1c6vLJz3TvV9wVC8TuBzN3sEq9CEPrCJ4NQ3YB 0190L51alSsiTKpJmEU8RPxsHzYblW3RN1XnMwmY9lqxo0OTs4SlyivQLrzRtABL TSNOmvmqDzs98LYcqbx98wn9zU5QzDY2ZCxvwYVGIiap7eFDq5jhBPmF7RTnjlPd LQH/dSLIL3tTPLvWLgZaQ7pVNCxrRCGto1cjs7/XnuGt92YhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4SFpDFd7tfnt4AADXxGYphgpW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZmE2ZjQxYzItYmE1NC0z MzgxLWEzMTgtYzIzMWQxM2IxOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQDZ/VS9pzrtFuyniYHF+PwB0T/Eozjpf2WFtH3VMw7IRcX1wTPRa5N CfyN/LqMnq9B0Pyp5yMaK/e/MOB5pnFZuKcx12MLkbSThJ3muMfyYtOKGdn3rxZX qxOvpifL5AeH4uTx6gz2HGuMtcla5mw3iTWENMRCagLBpIIbhPE1pN/lrMqMyR0o 8C7LFJ9FXisM16GhdC5ywOyep2TDM0NcVfCjhW1cadfGUBiuAE3+sNvsXt/E3RsG EpiOc/QFNjGxPr+Svhw2lrpMa4J+WNPaTY62W5q2SX2y+OfTqHFiNOOH8+2ymic4 uyvEJm9CJOYwNLJU+PM+adVZkd5dOKk= -----END CERTIFICATE-----Generated at Mon May 5 02:57:29 2025 by rpki-client