$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa File: f3bf331d-19cf-3d03-986c-190a6e650b75.roa (raw, json) Hash identifier: QZDksHrrvqMBTY93FZkheeCIPxkD5cm4FcNGsHdIdtM= Subject key identifier: C7:9E:72:89:9D:D2:D6:3D:D4:4A:96:79:F0:F0:8E:82:B4:E3:5D:65 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F432858495EEEE85D0DF413FC7E0FCEC0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 14618 IP address blocks: 164.153.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e8:5d:0d:f4:13:fc:7e:0f:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=b1336b63-a6e2-4b6f-9b4d-d99a5a042c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:ff:4e:6e:05:39:db:0a:a2:2b:23:49:32: 8c:61:a5:73:a4:50:f6:b4:05:ee:af:1c:59:54:92: 97:20:fe:82:9c:fd:2d:5f:4c:07:07:b0:37:10:2a: 08:b1:04:49:d5:aa:6a:36:2e:38:90:b1:71:de:a6: c5:2f:53:3c:c2:af:31:1b:09:13:93:7d:b2:6c:4c: a8:24:18:57:33:ed:9c:d1:f9:49:5d:be:b7:ee:bc: f6:5f:c1:73:4b:db:28:bd:fa:0e:c0:de:f0:b8:25: 83:ee:5c:19:83:1b:28:a2:e7:e9:c9:08:70:48:ff: 1e:e1:fb:9a:15:0e:ca:fb:6b:11:f6:b9:01:fb:ec: bf:bd:1d:8b:6a:ec:18:97:c7:d9:55:b1:19:63:62: c4:4f:43:3f:f4:b3:31:be:42:3a:a6:f4:de:73:a6: 9c:fa:50:a8:8e:00:57:0a:6b:99:51:46:67:06:48: e7:1e:35:92:52:e5:04:e8:07:e5:b9:7c:54:3c:f2: f8:f8:f4:c9:0b:3b:86:17:d7:c0:07:64:98:be:07: aa:b2:0a:2c:b5:c7:44:ce:5a:c6:f3:12:22:2e:df: 67:05:83:ba:c3:b0:b5:5f:72:dd:4a:45:e8:e5:4c: cf:82:fa:c6:af:b3:60:c9:ca:f5:13:56:23:d5:63: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9E:72:89:9D:D2:D6:3D:D4:4A:96:79:F0:F0:8E:82:B4:E3:5D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:94:3a:09:25:46:69:cf:7c:4b:3a:aa:b9:82:f1:e7:ff:d1: 7d:32:8d:66:32:21:aa:09:3c:59:7d:cc:8a:b9:1c:66:e3:b6: 16:c0:d0:30:42:23:60:3a:ad:95:d2:60:00:81:d7:a7:db:1e: 4c:79:22:69:25:31:68:46:30:fe:65:d7:53:7f:2c:82:fc:3f: 65:85:94:14:27:8d:d2:e1:f0:f1:4c:5f:c7:37:35:1b:24:ff: d0:b0:9c:ea:12:27:6d:bb:a9:1a:ed:7f:2b:3d:68:1c:80:c4: d3:ba:6d:08:a9:d9:6d:1e:72:47:4f:29:1f:6e:a8:c1:2a:dc: 3c:57:e3:a5:84:b3:01:3c:de:63:98:7f:88:06:89:90:66:35: 78:db:a5:47:a9:34:48:54:39:ec:79:d0:55:51:5b:e4:6d:5f: 74:db:46:d9:2e:b5:f9:3a:b1:ee:ae:2f:92:0a:72:dd:2c:a0: 4c:08:65:81:07:91:5a:00:c5:5f:87:0a:92:13:85:dd:81:2c: 8d:16:22:bf:e3:ac:b5:f8:4c:c9:20:1a:f1:16:d2:7d:f7:fd: 46:ce:b2:72:e4:71:bb:30:24:2b:37:73:0c:7a:fb:e0:79:8b: 6a:3c:ed:71:bd:f9:93:4c:7f:b2:7f:81:ea:21:70:bc:de:3d: 7b:78:f3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uhdDfQT/H4PzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YjEzMzZiNjMtYTZlMi00YjZmLTliNGQtZDk5YTVhMDQyYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNz/Tm4FOdsKoisjSTKMYaVzpFD2tAXurxxZ VJKXIP6CnP0tX0wHB7A3ECoIsQRJ1apqNi44kLFx3qbFL1M8wq8xGwkTk32ybEyo JBhXM+2c0flJXb637rz2X8FzS9sovfoOwN7wuCWD7lwZgxsooufpyQhwSP8e4fua FQ7K+2sR9rkB++y/vR2LauwYl8fZVbEZY2LET0M/9LMxvkI6pvTec6ac+lCojgBX CmuZUUZnBkjnHjWSUuUE6AfluXxUPPL4+PTJCzuGF9fAB2SYvgeqsgostcdEzlrG 8xIiLt9nBYO6w7C1X3LdSkXo5UzPgvrGr7Ngycr1E1Yj1WN2lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeecomd0tY91EqWefDwjoK0411lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvZjNiZjMzMWQtMTljZi0z ZDAzLTk4NmMtMTkwYTZlNjUwYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqUOgklRmnPfEs6qrmC8ef/0X0yjWYyIaoJPFl9zIq5HGbjthbA0DBC I2A6rZXSYACB16fbHkx5ImklMWhGMP5l11N/LIL8P2WFlBQnjdLh8PFMX8c3NRsk /9CwnOoSJ227qRrtfys9aByAxNO6bQip2W0eckdPKR9uqMEq3DxX46WEswE83mOY f4gGiZBmNXjbpUepNEhUOex50FVRW+RtX3TbRtkutfk6se6uL5IKct0soEwIZYEH kVoAxV+HCpIThd2BLI0WIr/jrLX4TMkgGvEW0n33/UbOsnLkcbswJCs3cwx6++B5 i2o87XG9+ZNMf7J/geohcLzePXt483U= -----END CERTIFICATE-----Generated at Fri Apr 4 23:31:13 2025 by rpki-client