$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa File: 4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa (raw, json) Hash identifier: NRBdBnNELdm/UQBkKsdBt9X93+DLk4EFlrkNlo/ekPk= Subject key identifier: 00:8A:DF:81:68:C5:26:47:A8:6A:BE:5A:6E:19:F6:C4:A4:34:6D:1E Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F432858491AA6BA42C7005BE276D8CE70 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 25645 IP address blocks: 137.239.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ba:42:c7:00:5b:e2:76:d8:ce:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=642cdf1d-59c0-4c31-816d-7e5a9b584d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:49:0e:21:13:e8:b7:0e:b5:f3:ee:e2:71:d3: 95:32:25:42:ce:db:02:e0:12:3b:a3:f5:99:c6:b0: c0:14:14:5e:54:62:7b:14:4a:8a:0b:ac:d2:c6:c4: 2f:27:74:89:b4:d9:8c:75:66:91:34:ea:9d:e9:0f: 0e:bc:54:4a:5a:c3:82:f0:66:a2:6a:48:43:c4:48: 7a:b2:df:cd:cc:ee:32:a2:dd:5d:0f:8c:39:f2:e1: 06:f3:8a:94:db:cf:e7:0e:b8:c0:1a:33:e4:46:13: 64:28:11:65:f9:02:0d:57:2d:3b:e0:82:9f:bb:bc: 88:89:2d:22:9c:1c:c1:20:b5:92:e8:48:75:24:16: e2:17:74:1a:7d:b9:ce:8b:67:ff:ac:7c:28:33:c1: 66:d3:7a:93:60:2e:51:cc:91:8e:5f:f7:ea:f9:fd: 55:ac:22:e9:95:a7:39:b3:93:8c:34:13:d6:ec:a6: eb:9a:a9:08:c3:8d:78:4d:fd:26:b9:df:92:3e:cf: f2:2e:23:d7:ba:21:b3:d0:18:a1:21:70:8b:4a:d4: 3f:7d:e3:1e:69:ba:f1:00:15:fd:99:b0:a4:4d:69: 3f:f5:41:b3:4b:84:76:4c:56:93:f0:77:cb:ee:08: fc:d2:af:2a:12:dd:c8:34:2a:c6:42:11:5d:8b:b0: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8A:DF:81:68:C5:26:47:A8:6A:BE:5A:6E:19:F6:C4:A4:34:6D:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4a1a3d11-26ae-3def-8147-6a22a351bfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ae:c6:23:76:40:f4:e4:f3:c4:fc:2a:70:31:f9:c1:00:75: 83:6b:69:e7:7b:76:78:c3:dd:53:df:78:33:83:64:85:60:ba: 4d:54:5d:52:12:b0:ba:4c:e6:49:4f:28:ee:b7:74:25:26:1c: c1:91:9e:5d:c4:59:97:7f:cc:6c:85:65:2d:24:5f:9c:d9:68: 68:fa:bc:93:42:92:7a:27:40:6c:d7:42:33:e1:2f:24:29:c8: f4:33:f9:11:1c:54:81:c7:04:34:d6:04:7a:dc:c3:be:d6:01: 16:b9:5d:e0:dc:00:dd:16:d6:2c:e3:a3:38:4d:88:0b:e1:a6: 06:e0:0a:01:b4:74:6f:f1:9a:23:35:d8:ed:aa:49:ad:f4:77: 19:9d:a5:ae:55:8b:8c:80:e0:3a:a2:52:4b:8f:1c:45:39:a7: 13:97:85:ba:9a:a9:63:a7:6a:0a:8b:7f:85:83:6e:e6:c2:26: a6:15:3b:fa:6f:94:3c:42:3c:0a:10:ee:72:ab:a7:f0:0f:75: 0c:98:a9:d7:03:8e:96:92:a3:e8:a9:9b:63:20:13:dd:82:0e: be:d2:e0:85:ce:c0:5d:ca:2f:6d:78:cf:ae:9c:90:ce:02:25: a6:49:24:32:cd:95:60:f4:be:e1:5e:cc:aa:fd:1b:de:f6:01: 79:8b:95:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprpCxwBb4nbYznAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NjQyY2RmMWQtNTljMC00YzMxLTgxNmQtN2U1YTliNTg0ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEkOIRPotw618+7icdOVMiVCztsC4BI7o/WZ xrDAFBReVGJ7FEqKC6zSxsQvJ3SJtNmMdWaRNOqd6Q8OvFRKWsOC8GaiakhDxEh6 st/NzO4yot1dD4w58uEG84qU28/nDrjAGjPkRhNkKBFl+QINVy074IKfu7yIiS0i nBzBILWS6Eh1JBbiF3QafbnOi2f/rHwoM8Fm03qTYC5RzJGOX/fq+f1VrCLplac5 s5OMNBPW7KbrmqkIw414Tf0mud+SPs/yLiPXuiGz0BihIXCLStQ/feMeabrxABX9 mbCkTWk/9UGzS4R2TFaT8HfL7gj80q8qEt3INCrGQhFdi7D6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACK34FoxSZHqGq+Wm4Z9sSkNG0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGExYTNkMTEtMjZhZS0z ZGVmLTgxNDctNmEyMmEzNTFiZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiuxiN2QPTk88T8KnAx+cEAdYNraed7dnjD3VPfeDODZIVguk1UXVIS sLpM5klPKO63dCUmHMGRnl3EWZd/zGyFZS0kX5zZaGj6vJNCknonQGzXQjPhLyQp yPQz+REcVIHHBDTWBHrcw77WARa5XeDcAN0W1izjozhNiAvhpgbgCgG0dG/xmiM1 2O2qSa30dxmdpa5Vi4yA4DqiUkuPHEU5pxOXhbqaqWOnagqLf4WDbubCJqYVO/pv lDxCPAoQ7nKrp/APdQyYqdcDjpaSo+ipm2MgE92CDr7S4IXOwF3KL214z66ckM4C JaZJJDLNlWD0vuFezKr9G972AXmLlSs= -----END CERTIFICATE-----Generated at Fri Apr 11 22:26:14 2025 by rpki-client