$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa File: cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa (raw, json) Hash identifier: cd6GmEN3ogNCwgr+FbIwMPAkQW3sLei/xmIQwYn8HRQ= Subject key identifier: 83:DC:63:6D:61:19:4C:B5:91:33:7D:F5:39:B4:B9:6A:0B:7A:2A:2C Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F432858495C24388AAAC3004CFF4FAF20 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 202888 IP address blocks: 174.136.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:38:8a:aa:c3:00:4c:ff:4f:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=b138df2d-19cb-4c99-9529-5d3a3b1942af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:72:67:12:9b:b7:f6:a4:31:91:04:2c:d2: cd:78:af:de:e7:9b:04:7f:a6:ae:07:fd:c9:94:c5: 61:1e:a0:36:74:9e:a3:82:90:e7:98:f6:29:8a:04: 90:35:2a:b6:8c:21:ab:cd:cb:94:99:dd:c3:7f:fa: 5b:c4:86:c9:7a:e5:a8:1b:c7:bd:58:3b:9d:61:00: 69:a8:37:0c:e8:3a:2b:66:7c:b1:40:18:10:55:b7: e4:a5:7d:dd:e2:98:4c:ef:f4:50:31:a4:b1:db:37: 9d:89:8d:ca:20:96:62:e2:9c:df:81:8e:ee:2a:44: a5:21:36:ff:40:8f:25:18:c8:54:db:3e:0f:d0:31: 1b:47:40:26:22:95:be:2e:05:5c:4e:78:6b:ad:be: c5:1b:7a:43:f7:9b:f5:65:0e:3e:93:8a:62:71:ea: 1d:27:35:3d:37:26:51:ea:64:0b:5e:21:e0:6f:06: d8:da:f5:47:6f:b2:57:db:6b:78:c6:4b:6c:01:97: 34:66:25:58:c8:d2:92:76:e3:72:e7:57:9a:ec:6e: 33:ca:3b:cd:ea:98:0a:95:b8:81:80:81:65:a1:22: d4:ee:1b:3f:57:52:80:48:87:f9:9c:a4:d4:fd:16: 62:4f:fd:75:26:2d:5f:58:72:55:18:6d:1d:c7:9f: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:63:6D:61:19:4C:B5:91:33:7D:F5:39:B4:B9:6A:0B:7A:2A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ff:df:cf:6c:15:f3:3f:a8:25:e9:3e:1d:67:33:93:fe:cb: 4a:20:2d:e6:19:de:52:8f:26:27:7c:48:99:24:3d:a2:87:d6: 0e:bd:d4:7c:c4:50:1f:d7:18:dd:3d:ef:94:ce:df:d0:d9:b3: 08:71:93:fa:aa:53:72:49:1f:2f:ea:76:e5:a0:d4:05:fc:e1: 72:19:47:7b:03:a3:a2:30:e6:d1:e1:72:3c:34:08:ee:31:1c: 2e:d2:7b:0b:19:f1:e7:af:12:d5:7c:88:06:bf:21:17:a2:a3: 06:f8:ab:2c:e5:cd:e5:8b:71:45:28:ee:96:ae:10:d0:48:5c: 34:58:a6:b1:34:36:8b:51:53:00:7d:60:5e:e9:17:9e:68:c9: 38:e9:70:15:35:7f:4c:13:26:1d:83:54:20:e8:23:21:54:30: 50:55:e6:ff:4f:64:f6:c2:c4:9e:62:62:49:34:13:02:73:05: 1d:38:26:15:87:a5:33:f8:ee:d0:23:5c:2f:5c:01:12:06:8c: 4a:84:3e:d3:2e:bd:9a:10:43:2d:c7:95:42:bd:13:82:a8:ef: 2f:d3:36:31:e7:98:ef:2a:bd:89:db:06:ad:57:49:e6:e2:51: 0c:60:be:e3:18:a8:4d:b9:f6:cf:bf:7d:96:d0:11:2e:a8:0b: 61:a0:91:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDiKqsMATP9PryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YjEzOGRmMmQtMTljYi00Yzk5LTk1MjktNWQzYTNiMTk0MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS5yZxKbt/akMZEELNLNeK/e55sEf6auB/3J lMVhHqA2dJ6jgpDnmPYpigSQNSq2jCGrzcuUmd3Df/pbxIbJeuWoG8e9WDudYQBp qDcM6DorZnyxQBgQVbfkpX3d4phM7/RQMaSx2zediY3KIJZi4pzfgY7uKkSlITb/ QI8lGMhU2z4P0DEbR0AmIpW+LgVcTnhrrb7FG3pD95v1ZQ4+k4piceodJzU9NyZR 6mQLXiHgbwbY2vVHb7JX22t4xktsAZc0ZiVYyNKSduNy51ea7G4zyjvN6pgKlbiB gIFloSLU7hs/V1KASIf5nKTU/RZiT/11Ji1fWHJVGG0dx59eXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPcY21hGUy1kTN99Tm0uWoLeiosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2IzMmNlNjktYmU0OC0z NGU1LTlmOTAtNmE1YWZiOGZhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH/389sFfM/qCXpPh1nM5P+y0ogLeYZ3lKPJid8SJkkPaKH1g691HzE UB/XGN0975TO39DZswhxk/qqU3JJHy/qduWg1AX84XIZR3sDo6Iw5tHhcjw0CO4x HC7SewsZ8eevEtV8iAa/IReiowb4qyzlzeWLcUUo7pauENBIXDRYprE0NotRUwB9 YF7pF55oyTjpcBU1f0wTJh2DVCDoIyFUMFBV5v9PZPbCxJ5iYkk0EwJzBR04JhWH pTP47tAjXC9cARIGjEqEPtMuvZoQQy3HlUK9E4Ko7y/TNjHnmO8qvYnbBq1XSebi UQxgvuMYqE259s+/fZbQES6oC2GgkQk= -----END CERTIFICATE-----Generated at Sun Apr 6 10:50:43 2025 by rpki-client