$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8683720-7332-3c73-a21a-90dbdab7fb37.roa File: e8683720-7332-3c73-a21a-90dbdab7fb37.roa (raw, json) Hash identifier: bP/KeEl4nowspR9Oe/RmQqQceYCea7Al243Sz8eEczo= Subject key identifier: 0C:EC:61:EE:C9:FB:46:9F:E1:D6:1B:84:EE:54:E7:6C:6F:D2:6C:FC Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584944694D76E1A6E2D568E31C00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8683720-7332-3c73-a21a-90dbdab7fb37.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 137.164.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4d:76:e1:a6:e2:d5:68:e3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=b3637034-3b28-4f92-a026-9ea71030be93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:d5:8c:2c:3b:0c:dc:19:16:0d:f4:50:4e: 11:ff:bd:25:f1:0c:20:c2:4f:ed:8a:bb:d9:e9:e2: 66:ea:01:4f:74:c4:ee:6c:53:f1:53:1b:02:b3:a1: 32:6a:23:96:9e:ea:7f:3c:cb:ee:4d:c8:d4:b2:f3: 0e:6f:85:45:d5:79:91:b5:03:5b:09:b7:db:57:0f: 03:a8:c9:4e:18:dd:61:d4:f7:9d:4a:ef:b9:35:f5: 4b:2a:97:a5:4d:4a:46:64:77:41:b6:03:8d:50:36: f8:9e:8a:c5:ba:fb:91:44:12:0c:31:d1:cd:a1:1b: 99:42:50:9f:c2:e2:c4:d0:d8:e4:45:10:15:b0:62: a2:a6:26:dd:8d:70:35:3a:59:9e:5d:9b:82:ee:29: a6:f5:38:6e:5e:08:14:8a:09:f4:01:01:1c:8a:71: eb:b3:1d:80:1d:4d:71:94:98:37:96:3c:d9:d4:b9: c0:22:e1:18:8e:61:6e:e7:99:b9:21:34:0a:6f:e7: 4c:11:9d:e7:a5:77:3e:1a:7e:25:bd:ec:a9:e2:95: 46:ec:81:24:35:14:7a:a1:ff:72:69:23:55:dd:ff: b0:ab:20:44:ac:28:2c:e1:50:8e:31:5c:af:48:e4: 8b:dc:f5:d5:12:04:7a:75:d5:42:d9:0e:b2:69:19: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:61:EE:C9:FB:46:9F:E1:D6:1B:84:EE:54:E7:6C:6F:D2:6C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8683720-7332-3c73-a21a-90dbdab7fb37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8b:ea:c6:97:91:a8:c3:b1:46:be:d3:78:31:2f:dc:e6:44: d4:eb:7e:a4:c6:cf:60:82:cc:75:34:d8:2e:b1:6a:fd:6e:56: 30:01:dc:54:de:6b:27:14:50:0a:eb:64:f1:95:63:ad:fe:f7: 90:77:7e:65:4a:20:b3:8d:f1:70:fe:de:2a:a3:89:63:80:39: ff:0b:19:03:fc:8d:c1:19:9e:44:b7:60:31:88:55:b7:c6:86: b6:ec:be:c2:d8:f0:9b:65:23:46:6f:cd:ec:15:aa:47:1d:31: e8:b1:60:55:55:fe:f5:db:f4:cd:70:49:a8:c4:82:a1:b0:25: f9:ea:56:d7:02:10:dd:be:8f:cb:1f:c1:02:ca:13:68:3b:e6: b0:df:b4:51:b9:d6:ab:81:95:1f:65:7e:71:17:59:d1:38:3a: 27:a2:43:ae:4b:0d:3f:24:12:07:98:cf:5d:38:ad:ac:60:55: 6d:8f:60:0a:0f:ac:73:6e:34:df:23:b7:6c:7e:9c:70:4e:78: de:6e:e7:f7:ed:1d:87:c5:1a:a7:0c:b5:64:e3:55:6d:e9:94: c7:f0:d6:33:b6:1c:e6:d3:a2:63:fd:dd:f7:6f:65:cc:0b:4e: f1:23:fa:9a:f7:af:1e:82:aa:66:84:25:ad:98:1d:42:ca:06: f2:5a:91:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaU124abi1WjjHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YjM2MzcwMzQtM2IyOC00ZjkyLWEwMjYtOWVhNzEwMzBiZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcrVjCw7DNwZFg30UE4R/70l8Qwgwk/tirvZ 6eJm6gFPdMTubFPxUxsCs6EyaiOWnup/PMvuTcjUsvMOb4VF1XmRtQNbCbfbVw8D qMlOGN1h1PedSu+5NfVLKpelTUpGZHdBtgONUDb4norFuvuRRBIMMdHNoRuZQlCf wuLE0NjkRRAVsGKipibdjXA1OlmeXZuC7imm9ThuXggUign0AQEcinHrsx2AHU1x lJg3ljzZ1LnAIuEYjmFu55m5ITQKb+dMEZ3npXc+Gn4lveyp4pVG7IEkNRR6of9y aSNV3f+wqyBErCgs4VCOMVyvSOSL3PXVEgR6ddVC2Q6yaRnKAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzsYe7J+0af4dYbhO5U52xv0mz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTg2ODM3MjAtNzMzMi0z YzczLWEyMWEtOTBkYmRhYjdmYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaL6saXkajDsUa+03gxL9zmRNTrfqTGz2CCzHU02C6xav1uVjAB3FTe aycUUArrZPGVY63+95B3fmVKILON8XD+3iqjiWOAOf8LGQP8jcEZnkS3YDGIVbfG hrbsvsLY8JtlI0ZvzewVqkcdMeixYFVV/vXb9M1wSajEgqGwJfnqVtcCEN2+j8sf wQLKE2g75rDftFG51quBlR9lfnEXWdE4OieiQ65LDT8kEgeYz104raxgVW2PYAoP rHNuNN8jt2x+nHBOeN5u5/ftHYfFGqcMtWTjVW3plMfw1jO2HObTomP93fdvZcwL TvEj+pr3rx6CqmaEJa2YHULKBvJakZ4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:57 2025 by rpki-client