$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa File: 9929da4e-946a-3592-bfea-22b4659f8ef7.roa (raw, json) Hash identifier: x3ZCTW6OijUa0c6W7azd7CIBoobEk0jjJo4VX4LRUFw= Subject key identifier: EC:BD:EA:9F:2E:5D:4A:DC:46:72:FB:8D:DC:6B:DC:40:41:CC:26:83 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584957F41390FED21B464951B300 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 25645 IP address blocks: 137.239.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:13:90:fe:d2:1b:46:49:51:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=5b74f454-f857-494a-83bf-624eab89fd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:23:27:11:1a:ce:7d:43:af:ec:50:38:8c: c5:0a:de:94:60:3f:5c:89:62:87:07:e4:94:de:48: f1:f3:49:e6:8e:cb:07:30:db:1d:75:58:c1:37:3b: 12:61:3b:78:22:bf:fd:ea:23:71:e7:0e:c5:b0:11: 25:08:d0:96:6f:70:40:59:53:55:08:25:a5:7e:e0: 92:ca:bb:e3:7d:0f:8d:39:24:5b:21:7e:d6:37:c3: 63:ec:ec:d4:e9:26:71:55:21:63:c0:cb:55:e7:ea: d6:33:10:9a:93:8b:b8:3e:fe:1b:c9:ef:6c:b8:c2: 04:43:cd:0b:88:a7:71:6f:16:22:84:02:ee:78:89: 2f:40:66:2a:5e:14:00:c9:ce:b2:11:20:f5:80:64: 28:39:86:25:be:48:63:20:a8:fc:4f:41:5a:99:aa: db:08:8d:f5:90:02:c9:22:d7:48:dc:3f:c8:37:62: b4:8a:8b:b8:c8:41:9f:79:6b:8a:c7:4d:1a:e4:8f: 9f:ad:fc:83:54:fc:02:76:e1:cf:29:0d:b3:96:c6: 95:09:a6:f9:00:ff:6d:db:90:a9:48:32:ad:a5:c5: 7b:e5:ec:8d:97:39:2a:06:7d:c4:2c:89:96:9e:77: 55:db:69:c0:b6:d3:d6:cc:9f:28:c1:b9:2a:46:37: f8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:EA:9F:2E:5D:4A:DC:46:72:FB:8D:DC:6B:DC:40:41:CC:26:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9929da4e-946a-3592-bfea-22b4659f8ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:62:41:fb:c4:1d:8b:96:d2:c6:92:d6:c7:7a:4f:e3:8a:39: 4e:ff:bb:4a:7f:e1:24:61:8c:46:ea:45:b6:6d:f1:3e:d1:09: d2:3e:b3:a5:88:46:54:3e:1d:d9:ef:c2:e0:d8:6c:de:b0:8e: 4c:30:7e:a5:85:48:30:87:49:5e:d7:65:34:43:bb:d9:5c:07: 10:f3:7b:47:a7:8f:30:b2:e5:ef:61:c8:11:9e:5a:13:93:4a: c8:e4:5c:85:dc:ba:c4:c6:13:0b:ed:87:4f:a8:1b:56:24:fc: 43:b0:a4:f4:83:d8:37:a3:da:f4:46:b4:57:4a:34:59:23:47: 9f:4b:4e:a0:fc:bf:1a:ad:49:1d:49:91:92:e9:e5:42:0c:03: fb:74:9d:5f:8d:3d:35:1b:ac:f3:e0:0c:d3:96:00:e3:f6:ca: 9e:a3:8a:07:7e:ab:b8:ab:0a:d1:91:15:24:34:97:96:31:74: f4:25:a7:53:4e:da:72:94:19:c7:29:a8:6e:d6:6a:87:9a:4d: 58:4c:3e:cb:d8:1f:47:9a:c1:e8:ec:3e:41:98:8c:14:6a:4f: 0a:37:88:25:a3:b1:43:69:66:46:ef:4c:d0:90:6a:9d:81:2d: 1c:d9:ec:3f:94:7f:4a:f0:f9:58:55:54:4a:8f:bb:2e:72:2d: 81:91:8b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BOQ/tIbRklRswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NWI3NGY0NTQtZjg1Ny00OTRhLTgzYmYtNjI0ZWFiODlmZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRYjJxEazn1Dr+xQOIzFCt6UYD9ciWKHB+SU 3kjx80nmjssHMNsddVjBNzsSYTt4Ir/96iNx5w7FsBElCNCWb3BAWVNVCCWlfuCS yrvjfQ+NOSRbIX7WN8Nj7OzU6SZxVSFjwMtV5+rWMxCak4u4Pv4bye9suMIEQ80L iKdxbxYihALueIkvQGYqXhQAyc6yESD1gGQoOYYlvkhjIKj8T0FamarbCI31kALJ ItdI3D/IN2K0iou4yEGfeWuKx00a5I+frfyDVPwCduHPKQ2zlsaVCab5AP9t25Cp SDKtpcV75eyNlzkqBn3ELImWnndV22nAttPWzJ8owbkqRjf4dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOy96p8uXUrcRnL7jdxr3EBBzCaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOTkyOWRhNGUtOTQ2YS0z NTkyLWJmZWEtMjJiNDY1OWY4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZiQfvEHYuW0saS1sd6T+OKOU7/u0p/4SRhjEbqRbZt8T7RCdI+s6WI RlQ+HdnvwuDYbN6wjkwwfqWFSDCHSV7XZTRDu9lcBxDze0enjzCy5e9hyBGeWhOT SsjkXIXcusTGEwvth0+oG1Yk/EOwpPSD2Dej2vRGtFdKNFkjR59LTqD8vxqtSR1J kZLp5UIMA/t0nV+NPTUbrPPgDNOWAOP2yp6jigd+q7irCtGRFSQ0l5YxdPQlp1NO 2nKUGccpqG7WaoeaTVhMPsvYH0eawejsPkGYjBRqTwo3iCWjsUNpZkbvTNCQap2B LRzZ7D+Uf0rw+VhVVEqPuy5yLYGRiww= -----END CERTIFICATE-----Generated at Sat Apr 12 00:30:47 2025 by rpki-client