$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa File: 7a888043-beb0-31c5-9d07-936396c8d27a.roa (raw, json) Hash identifier: rv6lucN+FZsF0glgoBLcG42DhObsz6UM/nCv4ZSCNfM= Subject key identifier: 79:B1:AC:DB:D7:EC:C2:07:EA:92:17:06:73:D1:8D:C1:D1:4A:88:62 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285848D211438AA8DE0FD44FC31140 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 25645 IP address blocks: 137.239.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:43:8a:a8:de:0f:d4:4f:c3:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8071b5e0-331e-4434-bb2f-04d672acd4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bd:0d:c3:78:a2:d0:01:e0:be:11:91:df:cc: 05:78:30:64:ce:e2:bc:8e:d6:5b:36:0b:90:4f:31: 9a:e0:7e:32:a2:a4:bb:f0:1a:a9:bb:ef:a4:d0:03: 52:0e:a3:2c:01:a6:e0:3d:64:71:e5:3f:99:d0:27: cf:72:b1:d4:30:2d:a7:fa:3d:7b:d7:e0:dd:ca:db: 67:9d:90:ca:6c:52:f6:a1:fb:82:12:e4:81:ff:59: e4:52:fa:a3:8c:bb:3c:a5:a2:35:b7:f0:06:e0:a4: 33:9f:fe:f8:c3:ae:be:69:ea:c0:85:cb:57:9e:dd: 35:f3:25:7a:51:f3:46:a9:ce:1c:ce:95:51:ef:89: 9f:79:bd:2c:cc:36:f7:56:bf:ee:65:2b:32:ea:1d: 6c:fe:1f:6d:45:16:c7:42:36:42:16:05:67:b0:3b: 5b:7e:6b:84:5f:a4:92:61:84:4b:53:50:bb:57:97: 9f:f7:fb:7d:b3:52:96:74:b6:04:4d:94:57:24:2d: ae:8b:c1:ca:5e:d8:2e:8f:ac:ad:1f:a6:99:8d:18: 09:2f:2d:63:ea:f4:ba:04:b0:4f:c5:72:e1:56:3a: 4f:88:fd:4b:fe:96:93:cf:b6:9e:d9:5f:01:68:1d: ec:8c:8d:99:ab:19:41:b8:fe:d8:5d:51:0c:02:8f: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B1:AC:DB:D7:EC:C2:07:EA:92:17:06:73:D1:8D:C1:D1:4A:88:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/7a888043-beb0-31c5-9d07-936396c8d27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b3:d5:fc:40:a7:0a:0f:8c:93:f5:91:f3:67:6f:7f:15:af: 2c:8e:82:5c:a7:eb:de:9d:1b:83:a5:ee:6a:8e:e9:81:66:e9: db:aa:18:75:92:98:a5:7f:4d:2b:be:62:17:17:f8:2f:15:b8: 53:74:aa:49:1c:72:2d:ef:7e:3d:d1:be:bc:6c:d6:f2:75:6e: a5:21:80:6f:1e:04:6f:46:a5:69:b5:73:3c:a6:a8:86:8b:d5: ad:b1:5a:82:53:ec:49:eb:77:69:f2:7e:2b:3b:f8:54:17:51: 0b:2e:0a:b7:20:43:48:41:86:22:e9:e8:09:29:c4:4f:3d:ed: 74:9e:7b:37:94:80:76:d7:87:d4:59:5c:e4:2a:ed:b1:0d:44: 8c:c7:f6:80:bb:89:07:30:f1:39:1f:5d:36:ad:ad:b2:b2:d3: 7f:49:9b:f7:c8:ad:c6:f6:1c:25:0c:a4:08:97:96:c3:7a:13: 13:ac:d1:78:c5:30:d7:37:ae:98:6c:ea:de:dd:29:6b:e7:5d: c2:42:ca:a9:c4:8f:de:c3:78:50:69:09:25:36:87:84:75:54: dc:96:b7:ee:59:84:2b:7c:b9:4a:6f:45:ee:9f:7f:fc:f5:fc: e5:3f:f6:91:1a:24:d3:35:c9:d3:02:df:e9:4c:c3:ea:40:a3: ed:97:b7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEUOKqN4P1E/DEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODA3MWI1ZTAtMzMxZS00NDM0LWJiMmYtMDRkNjcyYWNkNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb0Nw3ii0AHgvhGR38wFeDBkzuK8jtZbNguQ TzGa4H4yoqS78Bqpu++k0ANSDqMsAabgPWRx5T+Z0CfPcrHUMC2n+j171+Ddyttn nZDKbFL2ofuCEuSB/1nkUvqjjLs8paI1t/AG4KQzn/74w66+aerAhctXnt018yV6 UfNGqc4czpVR74mfeb0szDb3Vr/uZSsy6h1s/h9tRRbHQjZCFgVnsDtbfmuEX6SS YYRLU1C7V5ef9/t9s1KWdLYETZRXJC2ui8HKXtguj6ytH6aZjRgJLy1j6vS6BLBP xXLhVjpPiP1L/paTz7ae2V8BaB3sjI2ZqxlBuP7YXVEMAo8HRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmxrNvX7MIH6pIXBnPRjcHRSohiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvN2E4ODgwNDMtYmViMC0z MWM1LTlkMDctOTM2Mzk2YzhkMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6z1fxApwoPjJP1kfNnb38VryyOglyn696dG4Ol7mqO6YFm6duqGHWS mKV/TSu+YhcX+C8VuFN0qkkcci3vfj3Rvrxs1vJ1bqUhgG8eBG9GpWm1czymqIaL 1a2xWoJT7Enrd2nyfis7+FQXUQsuCrcgQ0hBhiLp6AkpxE897XSeezeUgHbXh9RZ XOQq7bENRIzH9oC7iQcw8TkfXTatrbKy039Jm/fIrcb2HCUMpAiXlsN6ExOs0XjF MNc3rphs6t7dKWvnXcJCyqnEj97DeFBpCSU2h4R1VNyWt+5ZhCt8uUpvRe6ff/z1 /OU/9pEaJNM1ydMC3+lMw+pAo+2Xt+0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:48:20 2025 by rpki-client