$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa File: ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa (raw, json) Hash identifier: J8hRe0TPJMVYrZY0ZxsSSeO2FjtPjEEr0gRrPQe1JRw= Subject key identifier: 87:10:A8:90:FC:27:F6:85:0F:A1:22:F6:95:38:FB:6C:43:64:27:FD Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584940394D9862B94B7AF13D1860 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 25645 IP address blocks: 137.239.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4d:98:62:b9:4b:7a:f1:3d:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=1241d2e8-5e11-4d50-bbf2-63081beb64f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:50:4b:7c:ea:10:78:d0:bf:41:a0:83:f5: f0:ef:16:aa:8b:07:b8:4a:5f:23:01:c2:98:c3:6a: 53:4a:40:e7:40:37:0d:58:3b:ca:4b:73:ab:01:42: c8:0e:51:9d:58:44:6c:a4:38:38:47:11:d2:4d:2b: 97:21:8f:4e:71:98:0a:dc:9a:bf:69:11:c0:28:eb: f0:6f:4e:a4:a5:aa:41:6e:b7:78:c8:be:5e:d8:32: 57:b9:8d:49:9d:c3:8d:0f:38:8f:67:a8:fb:35:05: 75:09:ef:b2:d4:14:b6:43:96:dc:e4:21:c6:3a:5f: 94:26:b8:60:54:1b:ab:42:4c:f0:1e:e8:8a:2b:2a: 50:7c:6e:85:ba:c4:45:65:4b:6b:6b:03:d5:c0:4d: b7:a3:64:92:3a:d0:16:fc:96:8e:60:be:4c:e0:f9: 00:5e:95:c9:3b:9b:62:8f:58:5c:74:71:7f:72:90: 93:4c:33:f3:45:e2:83:21:28:f0:f0:55:7c:52:6c: e3:8f:21:c6:dd:8e:d3:40:eb:1a:0c:34:3c:64:d4: 8d:3b:8d:66:4b:8d:cd:09:2c:7b:34:d2:cb:a4:88: e6:51:46:ee:79:c2:08:9f:f4:5f:50:55:ed:1b:90: 73:ee:aa:c4:0c:f4:40:68:03:ac:2a:e2:1e:aa:ae: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:10:A8:90:FC:27:F6:85:0F:A1:22:F6:95:38:FB:6C:43:64:27:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f4:33:84:b0:60:b7:ca:64:59:4d:40:6c:a3:f7:9d:d2:4d: a8:51:4b:33:21:93:97:7f:ef:02:1a:66:d2:85:07:da:67:db: 05:40:45:a4:76:14:4c:69:e6:60:55:21:96:4f:a8:6d:4c:8b: a5:cc:c4:22:4a:0b:17:fa:36:96:18:36:bf:6e:b6:7a:8e:a6: b0:74:02:6e:c3:9b:af:83:bf:02:e0:30:75:1d:4f:f1:5d:56: 95:86:4a:a0:b6:8d:3f:8a:4c:17:b9:fb:77:b3:20:a1:bf:f4: 9e:3e:72:02:8c:81:a9:1d:2b:7b:06:6e:f2:45:c5:cd:9e:d6: 4f:2a:2a:25:9b:39:82:d1:c3:be:bd:16:ad:24:33:1d:c4:90: aa:d8:90:f2:a9:53:15:a6:20:bf:f5:ad:5d:39:2f:35:f9:8f: 90:38:78:4f:84:8e:1a:83:87:88:df:7e:b8:ff:97:f2:7b:6c: 1d:49:9f:fd:b8:7c:85:36:3f:75:e0:32:84:74:52:e7:11:3a: 77:64:ba:58:cc:c3:39:19:52:c9:7f:50:b0:4e:9e:22:01:22: f6:4c:38:cb:3a:46:6d:5d:dc:1f:de:ee:03:9b:2f:22:56:66: 98:3b:11:68:3e:0e:f7:33:9c:03:21:f9:c9:cb:3c:de:86:a8: 24:cd:92:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU2YYrlLevE9GGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MTI0MWQyZTgtNWUxMS00ZDUwLWJiZjItNjMwODFiZWI2NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltBQS3zqEHjQv0Ggg/Xw7xaqiwe4Sl8jAcKY w2pTSkDnQDcNWDvKS3OrAULIDlGdWERspDg4RxHSTSuXIY9OcZgK3Jq/aRHAKOvw b06kpapBbrd4yL5e2DJXuY1JncONDziPZ6j7NQV1Ce+y1BS2Q5bc5CHGOl+UJrhg VBurQkzwHuiKKypQfG6FusRFZUtrawPVwE23o2SSOtAW/JaOYL5M4PkAXpXJO5ti j1hcdHF/cpCTTDPzReKDISjw8FV8UmzjjyHG3Y7TQOsaDDQ8ZNSNO41mS43NCSx7 NNLLpIjmUUbuecIIn/RfUFXtG5Bz7qrEDPRAaAOsKuIeqq4GgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcQqJD8J/aFD6Ei9pU4+2xDZCf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYWI4YjNlNzAtOWQ3Yy0z YWYyLTliMTEtYzVjMjhlNjBlZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID0M4SwYLfKZFlNQGyj953STahRSzMhk5d/7wIaZtKFB9pn2wVARaR2 FExp5mBVIZZPqG1Mi6XMxCJKCxf6NpYYNr9utnqOprB0Am7Dm6+DvwLgMHUdT/Fd VpWGSqC2jT+KTBe5+3ezIKG/9J4+cgKMgakdK3sGbvJFxc2e1k8qKiWbOYLRw769 Fq0kMx3EkKrYkPKpUxWmIL/1rV05LzX5j5A4eE+EjhqDh4jffrj/l/J7bB1Jn/24 fIU2P3XgMoR0UucROndkuljMwzkZUsl/ULBOniIBIvZMOMs6Rm1d3B/e7gObLyJW Zpg7EWg+DvcznAMh+cnLPN6GqCTNkoY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:36:46 2025 by rpki-client