$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa File: fa6f41c2-ba54-3381-a318-c231d13b19b3.roa (raw, json) Hash identifier: W+BzPNWOjh11mWjw6+tKbSVq4SdX/jSm2VTq861n3TE= Subject key identifier: D7:DF:54:3C:97:45:36:EF:28:23:7A:B8:E8:DC:40:97:4F:FD:CA:DF Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A331AFADB4F1C705FF808A840 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 2152 IP address blocks: 137.164.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:fa:db:4f:1c:70:5f:f8:08:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=8950a39f-6546-4c1d-856d-8cc9e4ea27f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:d1:67:e9:39:2c:f1:1f:26:93:fd:ea:5b: ee:d7:21:ef:01:42:0d:9f:b9:cd:d5:ab:47:05:02: 2f:30:94:cd:f8:6b:cc:df:14:56:61:81:e8:00:ca: 20:fb:ee:aa:14:dd:2d:ad:10:e9:61:6d:89:95:05: 6d:6c:31:85:1d:d2:85:a7:62:64:4a:c3:64:1d:aa: c2:cd:4f:d5:09:42:51:90:e5:36:9e:50:91:c1:5e: 69:4e:91:8d:3f:9f:ff:20:d0:bb:d1:49:c9:a6:c6: 87:ad:68:c0:3c:da:55:83:1b:e3:ea:5e:2c:bf:e1: 3a:06:1e:aa:7e:57:07:6e:1a:17:c9:31:5b:b1:a6: cb:41:ca:65:a9:95:d4:d6:45:74:cd:e9:01:12:da: 83:92:1d:12:68:e5:6f:4c:fd:68:fd:ef:b8:10:05: 12:0a:18:8e:a5:69:91:32:8a:15:f3:3d:22:73:c1: 57:8a:b9:79:82:b6:03:a6:ae:8d:41:1b:58:6d:c8: f6:17:ee:bd:a5:f1:cc:bb:de:60:c5:a3:f5:4e:db: 88:5d:c4:5c:a9:51:e1:09:f9:13:e1:63:e2:cf:41: ab:12:ea:e6:31:7f:0b:c0:e3:f8:c8:78:55:7e:53: 46:74:8d:00:c2:0c:0a:79:6b:c4:6e:43:41:86:00: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DF:54:3C:97:45:36:EF:28:23:7A:B8:E8:DC:40:97:4F:FD:CA:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/fa6f41c2-ba54-3381-a318-c231d13b19b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a0:22:39:95:b8:ca:15:c0:ad:aa:44:ac:55:84:d8:94:6c: c1:3d:2b:7e:d2:6d:9e:3b:41:c1:9c:8b:c0:0c:9f:fc:f0:e4: 9d:32:e9:57:bd:e2:f5:61:d2:1a:9b:fc:3d:0d:40:62:8a:38: ae:9e:ee:c6:06:9d:f2:77:d8:ad:e3:10:7b:76:68:05:76:88: 46:bd:f5:00:cc:96:00:e2:b1:fc:89:5f:7a:18:7e:11:ee:b0: 8f:ec:0a:2d:a4:63:9a:b4:7a:13:40:e5:3b:d6:ed:73:aa:97: 13:d7:de:40:69:ed:9e:51:dc:3f:61:1e:38:f5:62:e5:6e:90: 07:08:4c:9f:94:aa:f4:22:36:b3:8f:a8:78:1c:ae:25:44:26: eb:e5:64:e9:f9:ae:fe:08:01:60:69:55:ca:25:2a:96:8a:50: a9:e5:a4:b4:5a:32:dc:1b:92:f9:73:40:1d:4c:9e:92:78:b8: 8f:ff:5f:82:cb:21:00:05:9b:1b:10:cb:29:06:61:1f:6d:76: 3c:28:ad:2e:a1:64:9e:e2:88:21:f6:bc:e8:9e:0a:b6:d5:f4: cc:ed:9c:ab:0a:1e:5f:06:2e:ad:ed:e4:e1:07:5f:a6:9a:eb: 5d:1c:e0:e6:5c:16:59:f3:de:88:05:87:fb:82:ce:9e:e2:0f: c6:e6:ad:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvrbTxxwX/gIqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ODk1MGEzOWYtNjU0Ni00YzFkLTg1NmQtOGNjOWU0ZWEyN2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3nRZ+k5LPEfJpP96lvu1yHvAUINn7nN1atH BQIvMJTN+GvM3xRWYYHoAMog++6qFN0trRDpYW2JlQVtbDGFHdKFp2JkSsNkHarC zU/VCUJRkOU2nlCRwV5pTpGNP5//INC70UnJpsaHrWjAPNpVgxvj6l4sv+E6Bh6q flcHbhoXyTFbsabLQcplqZXU1kV0zekBEtqDkh0SaOVvTP1o/e+4EAUSChiOpWmR MooV8z0ic8FXirl5grYDpq6NQRtYbcj2F+69pfHMu95gxaP1TtuIXcRcqVHhCfkT 4WPiz0GrEurmMX8LwOP4yHhVflNGdI0AwgwKeWvEbkNBhgAVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNffVDyXRTbvKCN6uOjcQJdP/crfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZmE2ZjQxYzItYmE1NC0z MzgxLWEzMTgtYzIzMWQxM2IxOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqgIjmVuMoVwK2qRKxVhNiUbME9K37SbZ47QcGci8AMn/zw5J0y6Ve9 4vVh0hqb/D0NQGKKOK6e7sYGnfJ32K3jEHt2aAV2iEa99QDMlgDisfyJX3oYfhHu sI/sCi2kY5q0ehNA5TvW7XOqlxPX3kBp7Z5R3D9hHjj1YuVukAcITJ+UqvQiNrOP qHgcriVEJuvlZOn5rv4IAWBpVcolKpaKUKnlpLRaMtwbkvlzQB1MnpJ4uI//X4LL IQAFmxsQyykGYR9tdjworS6hZJ7iiCH2vOieCrbV9MztnKsKHl8GLq3t5OEHX6aa 610c4OZcFlnz3ogFh/uCzp7iD8bmrag= -----END CERTIFICATE-----Generated at Mon Jun 30 23:29:15 2025 by rpki-client