$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa File: d8158ea6-675b-392f-9e70-902e8aa16a98.roa (raw, json) Hash identifier: KMI8tQIttNf4aBTUDZV3y/ruDQ3LtO+9na5S8Bx5bks= Subject key identifier: 37:AD:95:A0:01:DC:FC:B2:05:4F:88:70:83:67:B3:67:EC:4A:4F:3C Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F432858494B6418007486CD39F6571600 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 394285 IP address blocks: 174.137.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:18:00:74:86:cd:39:f6:57:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=45abb99e-996d-4c7d-8652-cbff1aa8adb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:7e:eb:82:56:eb:48:38:c2:85:c6:48:49: 2d:bc:62:51:52:39:d6:cc:86:29:20:c4:c0:2a:2a: b1:1f:dd:c9:82:55:f3:f8:99:4a:23:73:28:36:1f: bc:95:50:0d:8f:29:35:b0:bc:11:da:da:67:ef:54: 6f:17:e1:28:65:88:6d:bb:e6:66:a2:b9:53:d8:e6: 19:0b:87:35:c9:6c:fd:f5:93:7c:17:4c:3c:8b:c1: f5:82:ad:33:91:ff:11:24:68:e0:15:86:27:1e:90: ab:cf:df:30:c6:5b:a3:50:c8:b0:3c:8b:b9:40:e3: a2:cd:1d:0b:6c:80:fe:98:b8:d6:95:19:c9:a0:84: 5c:3a:18:7d:38:e4:50:62:50:b0:3b:b8:2b:81:77: 93:08:94:c4:fb:80:de:c0:cc:f4:f8:3d:8b:70:31: 6c:41:ef:e9:2d:9c:98:13:a7:ca:03:62:23:99:a0: eb:81:6c:e2:58:a4:91:92:bf:6d:0e:44:a2:8a:2b: b7:0e:87:47:f8:42:b8:ad:d5:53:ac:36:fc:34:b8: 98:8b:fd:1f:72:0f:94:1b:87:f5:e5:c1:e5:b2:34: cf:76:f4:80:1b:a4:59:23:70:ee:a9:eb:ee:83:c2: fc:4f:be:22:82:5f:7e:dc:3f:d6:49:95:e9:33:b6: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:95:A0:01:DC:FC:B2:05:4F:88:70:83:67:B3:67:EC:4A:4F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/d8158ea6-675b-392f-9e70-902e8aa16a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5d:04:ca:f6:4e:c6:bb:e7:fe:2f:81:63:de:8f:65:dc:e7: f5:a2:0a:f8:d3:a9:74:8f:8a:0c:ab:d4:c2:cb:53:a0:84:28: 5a:e3:89:c7:69:5f:3b:5e:a2:c0:b8:d9:ae:8f:80:28:5f:cf: 19:69:75:43:5d:c2:ea:17:58:bd:e5:9f:66:c6:f8:85:e5:e2: 81:f7:18:0d:95:36:9d:22:cf:0f:10:d1:c4:57:6b:7a:b7:55: 4a:1b:3c:91:53:5c:1f:9b:81:47:01:79:dd:29:b8:bd:43:dc: 1c:1d:65:3d:40:9b:3d:73:0a:9e:22:c4:47:f3:99:81:c8:b8: e1:e8:81:36:0a:4e:91:c4:de:90:8e:4d:3b:b5:80:46:36:09: 92:f2:b5:8c:2f:ed:9d:86:37:10:02:f8:a6:84:42:bc:a7:30: a9:eb:7d:5f:e9:3b:bb:7c:4a:d6:18:65:2a:6e:e7:82:45:fe: a8:3d:d0:4e:f0:a6:d2:13:f1:c4:e7:0f:60:51:77:e9:d2:d9: 23:fc:4f:a7:c2:d4:42:87:c5:8e:50:11:60:9e:8e:3f:fc:7e: b8:c6:13:36:2b:53:cf:2a:32:c6:f7:9d:be:a9:0e:c8:3e:9b: 48:7c:17:4c:42:55:a6:c4:f3:71:80:f5:9e:bc:9c:d1:22:14: 1f:48:79:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBgAdIbNOfZXFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NDVhYmI5OWUtOTk2ZC00YzdkLTg2NTItY2JmZjFhYThhZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGN+64JW60g4woXGSEktvGJRUjnWzIYpIMTA KiqxH93JglXz+JlKI3MoNh+8lVANjyk1sLwR2tpn71RvF+EoZYhtu+ZmorlT2OYZ C4c1yWz99ZN8F0w8i8H1gq0zkf8RJGjgFYYnHpCrz98wxlujUMiwPIu5QOOizR0L bID+mLjWlRnJoIRcOhh9OORQYlCwO7grgXeTCJTE+4DewMz0+D2LcDFsQe/pLZyY E6fKA2IjmaDrgWziWKSRkr9tDkSiiiu3DodH+EK4rdVTrDb8NLiYi/0fcg+UG4f1 5cHlsjTPdvSAG6RZI3Duqevug8L8T74igl9+3D/WSZXpM7agJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDetlaAB3PyyBU+IcINns2fsSk88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZDgxNThlYTYtNjc1Yi0z OTJmLTllNzAtOTAyZThhYTE2YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrolsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpdBMr2Tsa75/4vgWPej2Xc5/WiCvjTqXSPigyr1MLLU6CEKFrjicdp XzteosC42a6PgChfzxlpdUNdwuoXWL3ln2bG+IXl4oH3GA2VNp0izw8Q0cRXa3q3 VUobPJFTXB+bgUcBed0puL1D3BwdZT1Amz1zCp4ixEfzmYHIuOHogTYKTpHE3pCO TTu1gEY2CZLytYwv7Z2GNxAC+KaEQrynMKnrfV/pO7t8StYYZSpu54JF/qg90E7w ptIT8cTnD2BRd+nS2SP8T6fC1EKHxY5QEWCejj/8frjGEzYrU88qMsb3nb6pDsg+ m0h8F0xCVabE83GA9Z68nNEiFB9IeYc= -----END CERTIFICATE-----Generated at Sun Apr 6 22:40:17 2025 by rpki-client