$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa File: 0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json) Hash identifier: mUmVV34y8mhJnacgRmM+PrDkDm5DEl0eH9s75WpvGn0= Subject key identifier: 01:7E:40:59:1E:90:C0:BF:92:51:9F:69:25:A7:DA:FE:13:99:09:11 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C416E266DAD5097FA1EE80 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 2153 IP address blocks: 137.164.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:16:e2:66:da:d5:09:7f:a1:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a917d75d-11c9-41e9-b035-4bd96655d272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:81:25:f2:dd:6c:0a:5c:ca:9d:22:62:1c: 8c:23:ac:92:56:70:de:84:49:e9:00:f2:c7:33:f3: 5d:75:99:d8:10:6e:d9:51:b2:f8:b5:0f:2b:22:1f: 64:26:7c:44:35:6f:96:30:f2:ef:fc:e9:3b:c3:17: ba:ea:e9:e1:1a:be:e4:70:82:6e:57:d3:53:77:27: 20:d3:52:6b:49:02:16:50:cd:00:ef:c1:ee:9c:8f: 04:db:50:42:86:a0:1a:5b:ad:30:ce:29:ac:5a:df: c2:5a:62:e4:52:3d:2b:cc:d7:2e:54:40:85:34:1a: 9d:0b:a5:8b:0d:46:e7:79:b3:69:a3:a6:c9:ad:84: 87:14:b8:74:6f:f6:05:50:8b:fe:a3:fb:63:57:6f: ed:ac:fc:d8:4a:35:37:0c:97:7b:ba:4f:06:9e:20: da:56:4f:0d:7a:1e:d3:0e:e2:6b:fd:6e:3d:76:91: 19:03:c4:1d:5b:22:89:a9:2c:a5:2a:69:b3:40:11: 8b:91:bf:a2:5a:78:44:3c:c4:d7:55:3e:8b:e3:87: 0d:1f:9b:81:e0:84:f4:76:1b:77:d8:c6:61:0f:cc: 08:50:cd:ab:6b:95:35:1e:67:6c:c6:b2:1d:9e:c8: 51:4d:15:96:b6:90:6c:d8:64:cf:5d:fa:dd:95:3c: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7E:40:59:1E:90:C0:BF:92:51:9F:69:25:A7:DA:FE:13:99:09:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:56:ce:ae:86:1e:ee:b9:87:e3:b6:1d:62:41:3a:c3:02:c2: 86:f8:35:b1:34:5f:66:05:df:83:f9:eb:c8:91:79:24:e4:7e: cf:44:02:66:8c:20:97:75:c1:6a:c4:5c:0d:d9:77:21:d1:ed: 0f:52:cb:17:e7:95:75:3a:ef:8f:d4:36:e1:77:a1:9b:4e:78: 8e:08:24:57:a6:2d:06:14:3f:d1:d7:21:57:a8:c7:4e:12:9d: fd:f9:46:26:b0:a8:5a:af:7e:27:fd:04:7f:29:6a:db:5d:65: ba:9f:92:03:d0:a2:f1:bb:97:f7:42:51:1f:91:f3:2d:a7:e8: 1f:5a:90:ff:a7:3c:dd:ad:d9:ba:59:94:97:b2:c3:b3:56:c4: ef:89:b5:54:14:18:7c:a3:15:ff:74:c0:71:80:48:4e:87:14: 88:dd:67:b4:ef:f6:c1:f5:84:2a:0f:48:74:49:18:45:e0:0e: 82:c1:f8:4b:44:15:ee:2c:48:62:74:18:b6:45:85:46:55:0e: 2b:39:1d:ae:ef:81:29:c3:09:c7:6f:71:1d:82:3c:ad:c0:a6: 43:21:72:4d:3a:00:c9:34:c5:ef:e1:02:67:87:1f:be:5f:05: 38:fc:f5:09:d3:f9:27:1b:3c:87:7a:cf:6d:de:e6:de:99:22: 16:d1:bc:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBbiZtrVCX+h7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTkxN2Q3NWQtMTFjOS00MWU5LWIwMzUtNGJkOTY2NTVkMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykaBJfLdbApcyp0iYhyMI6ySVnDehEnpAPLH M/NddZnYEG7ZUbL4tQ8rIh9kJnxENW+WMPLv/Ok7wxe66unhGr7kcIJuV9NTdycg 01JrSQIWUM0A78HunI8E21BChqAaW60wzimsWt/CWmLkUj0rzNcuVECFNBqdC6WL DUbnebNpo6bJrYSHFLh0b/YFUIv+o/tjV2/trPzYSjU3DJd7uk8GniDaVk8Neh7T DuJr/W49dpEZA8QdWyKJqSylKmmzQBGLkb+iWnhEPMTXVT6L44cNH5uB4IT0dht3 2MZhD8wIUM2ra5U1HmdsxrIdnshRTRWWtpBs2GTPXfrdlTzaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF+QFkekMC/klGfaSWn2v4TmQkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMGM5MjQwMjYtMTJkMS0z ZTc5LWEzY2UtZTUxZjcxYTNhZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxWzq6GHu65h+O2HWJBOsMCwob4NbE0X2YF34P568iReSTkfs9EAmaM IJd1wWrEXA3ZdyHR7Q9SyxfnlXU674/UNuF3oZtOeI4IJFemLQYUP9HXIVeox04S nf35RiawqFqvfif9BH8pattdZbqfkgPQovG7l/dCUR+R8y2n6B9akP+nPN2t2bpZ lJeyw7NWxO+JtVQUGHyjFf90wHGASE6HFIjdZ7Tv9sH1hCoPSHRJGEXgDoLB+EtE Fe4sSGJ0GLZFhUZVDis5Ha7vgSnDCcdvcR2CPK3ApkMhck06AMk0xe/hAmeHH75f BTj89QnT+ScbPId6z23e5t6ZIhbRvE4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:03 2025 by rpki-client