$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa File: 8504dbf1-b1c3-3afa-96dc-c510762f1210.roa (raw, json) Hash identifier: CwN4lPT4L9DctXeltjKuSXI6ejPZrc5n+GODKcjERoc= Subject key identifier: 0A:41:B1:7F:D2:29:BD:16:5E:AE:B1:28:87:01:65:64:6D:8D:A9:AD Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B6417EF1D63324F520DC1C0 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 174.137.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:17:ef:1d:63:32:4f:52:0d:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=c7c8a08c-7ede-4144-8fac-145ffa522666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c4:25:25:2a:bd:b8:5b:2d:90:9c:19:8a:36: 99:ad:4f:3a:cc:47:b4:7d:7f:d4:d9:6c:2c:a9:e7: d7:2e:f5:af:06:c0:66:6a:6b:a5:a4:7a:53:83:0c: 02:24:3a:8d:f9:d5:40:7d:4e:00:00:68:29:19:bb: 70:2f:f1:ec:c2:c6:47:86:fd:b6:a7:6a:bb:46:48: c0:62:78:d1:71:d0:de:87:08:b9:6b:a5:27:48:bf: 1c:bb:cb:84:c7:cf:4c:e3:42:d7:fa:f8:23:ef:8e: d3:88:62:3e:76:4f:fd:3a:c4:ef:60:1c:e2:86:83: 06:8b:21:2d:09:7a:f6:53:1c:d4:35:ca:2f:55:a7: 04:67:e9:df:37:ae:f3:51:9e:19:23:ab:0d:87:2a: 35:35:a1:8c:8b:37:b3:3f:a8:8d:53:f1:f9:34:77: 80:9d:2e:a7:59:18:74:68:3d:9d:92:40:14:52:84: b1:48:51:af:97:41:01:56:0c:7c:61:f3:d1:08:b6: ed:e9:ef:d7:42:ca:b6:fa:04:e5:ea:dc:62:77:08: be:10:42:05:69:33:00:d6:d8:2a:5d:40:17:19:36: 78:e0:f0:a4:54:90:f7:68:b7:d3:4f:a9:df:b1:d0: b7:56:62:7a:ec:a2:8c:60:b1:b0:f7:8a:2f:f8:d1: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:41:B1:7F:D2:29:BD:16:5E:AE:B1:28:87:01:65:64:6D:8D:A9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c6:10:b3:b2:12:e9:29:26:9f:ab:15:7b:f7:30:72:b2:01: e0:73:d6:1d:68:15:58:bb:c3:9c:bc:a3:63:05:ce:61:db:bd: 22:a4:32:34:6c:3b:bc:61:d6:04:70:3b:87:38:ae:f6:75:e7: 22:e6:c5:9a:b1:5c:c5:1b:a9:c3:e6:35:c2:9e:13:27:55:f5: 9d:eb:c7:3c:d3:c8:93:70:5b:83:cf:d9:15:75:43:1b:c2:53: 55:b0:f5:35:67:0b:29:34:f9:de:6d:26:17:4d:57:39:66:fa: 35:ff:46:06:6b:a1:aa:f0:c0:c3:ce:22:a1:3b:91:55:ec:84: 41:1e:22:7b:d1:3a:bb:0d:de:98:48:f5:54:12:9a:00:9e:bb: 7f:c4:a7:41:1e:de:ff:be:cb:61:af:0f:88:11:95:f7:16:88: 31:13:68:d7:11:32:13:89:f4:d2:0a:dc:66:7c:08:88:1f:e0: bd:04:9c:4b:67:e4:f4:52:4d:ba:cd:f1:30:47:5e:9f:a1:9c: c4:bd:05:f9:17:85:2e:b9:a5:6d:ff:87:5a:45:3f:71:42:a3: f8:bd:db:d7:a6:47:be:ef:c3:27:31:26:e3:69:0f:1f:3e:2d: 3b:13:23:70:68:a3:78:57:89:d0:b0:9a:cf:fd:52:17:2f:3a: ce:a9:ba:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBfvHWMyT1INwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YzdjOGEwOGMtN2VkZS00MTQ0LThmYWMtMTQ1ZmZhNTIyNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8QlJSq9uFstkJwZijaZrU86zEe0fX/U2Wws qefXLvWvBsBmamulpHpTgwwCJDqN+dVAfU4AAGgpGbtwL/HswsZHhv22p2q7RkjA YnjRcdDehwi5a6UnSL8cu8uEx89M40LX+vgj747TiGI+dk/9OsTvYBzihoMGiyEt CXr2UxzUNcovVacEZ+nfN67zUZ4ZI6sNhyo1NaGMizezP6iNU/H5NHeAnS6nWRh0 aD2dkkAUUoSxSFGvl0EBVgx8YfPRCLbt6e/XQsq2+gTl6txidwi+EEIFaTMA1tgq XUAXGTZ44PCkVJD3aLfTT6nfsdC3VmJ67KKMYLGw94ov+NFEsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApBsX/SKb0WXq6xKIcBZWRtjamtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvODUwNGRiZjEtYjFjMy0z YWZhLTk2ZGMtYzUxMDc2MmYxMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/GELOyEukpJp+rFXv3MHKyAeBz1h1oFVi7w5y8o2MFzmHbvSKkMjRs O7xh1gRwO4c4rvZ15yLmxZqxXMUbqcPmNcKeEydV9Z3rxzzTyJNwW4PP2RV1QxvC U1Ww9TVnCyk0+d5tJhdNVzlm+jX/RgZroarwwMPOIqE7kVXshEEeInvROrsN3phI 9VQSmgCeu3/Ep0Ee3v++y2GvD4gRlfcWiDETaNcRMhOJ9NIK3GZ8CIgf4L0EnEtn 5PRSTbrN8TBHXp+hnMS9BfkXhS65pW3/h1pFP3FCo/i929emR77vwycxJuNpDx8+ LTsTI3Boo3hXidCwms/9UhcvOs6pulo= -----END CERTIFICATE-----Generated at Sun Apr 6 23:00:27 2025 by rpki-client