$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: n6v9iVTWD7ZdWq4WHLQ30rM1Dx4OyLJSuLmCQbwJ4ms= Subject key identifier: F4:89:70:94:BA:BE:24:FF:38:F6:64:31:3C:40:57:2D:C6:1F:53:C9 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F43285848C41B801669C4850E1C3D9000 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:80:16:69:c4:85:0e:1c:3d:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=dc9f2f6b-bfed-4c28-8608-208df31cad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:2f:f9:b0:8b:25:21:68:bc:4f:c8:f6:e7: 74:f5:29:24:d4:99:8a:3f:2e:e3:b7:a6:4b:f3:91: b4:b2:88:5b:a6:83:53:dd:ef:8f:c3:77:e9:6a:57: fc:c5:30:78:5c:0e:3f:45:53:3f:5d:0b:4e:f0:e5: 60:3b:a7:e1:4b:03:fd:36:d6:39:03:44:53:62:a3: 80:21:4e:a4:42:70:fc:3d:60:c8:94:89:24:19:b6: 47:84:f0:b7:89:69:1a:0e:4f:47:b0:0f:22:9e:5a: 30:b8:0e:44:6f:2d:0d:49:aa:1f:5e:ee:7a:d9:2f: 3a:a7:bf:99:6b:76:8c:bf:00:cf:ca:67:7d:d3:62: 81:af:13:78:f5:ca:98:92:20:7b:06:1d:1b:8f:30: cf:44:bf:0c:5c:ad:14:28:0a:a3:76:a6:f1:db:b0: 4d:f5:d9:fc:ec:ba:bf:21:4d:13:ef:e7:39:6d:42: c7:9c:78:09:53:28:85:26:00:a0:30:fd:bb:37:01: f9:b2:dd:79:a5:3f:bd:66:5d:d0:6d:6f:34:46:dc: d3:86:2d:56:79:d9:d3:14:b3:c1:da:af:3b:c1:3d: 86:59:6a:8d:cd:62:11:c0:aa:26:ab:dc:4d:48:e2: 2a:24:8d:20:e2:da:63:e0:cd:39:0d:41:d7:8a:5c: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:89:70:94:BA:BE:24:FF:38:F6:64:31:3C:40:57:2D:C6:1F:53:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:07:01:27:2b:a0:53:22:47:6c:80:66:98:8a:07:d4:b4:46: 56:61:4e:3c:1e:13:6a:b9:23:13:71:bc:a9:a6:77:02:04:bc: ea:f8:c8:7e:a8:32:1a:ac:44:9d:14:a1:c5:4e:bc:47:f4:c7: cf:6d:23:de:58:89:1c:3c:27:9f:3e:dd:26:3f:33:a7:78:82: ea:c3:29:84:52:73:d4:80:d9:e4:29:4c:ac:f4:07:55:d1:7b: 9d:89:00:75:ca:ed:1a:f9:2d:f7:c3:de:5d:60:00:49:ad:a0: ec:b8:1d:5c:a6:16:e6:0e:82:f9:bb:f9:e3:18:96:28:15:c3: d7:ed:5d:17:96:d4:2d:37:dd:d3:fd:06:43:af:2d:f8:a1:b5: 4f:65:ab:c6:68:ba:3d:7e:2d:ae:1e:2f:25:43:0e:9d:f6:41: f8:71:f1:d2:d0:68:8d:26:09:ff:5b:02:8e:75:c9:27:12:69: ec:65:db:13:9f:a0:5d:f5:22:8e:ac:4d:7f:32:1e:55:b1:6c: 0b:86:fd:73:59:1f:ba:a6:c0:8f:21:9d:68:35:de:00:ca:49: c4:1f:ed:01:88:39:10:94:90:52:59:57:41:5f:51:24:43:23: a7:ee:0e:78:b2:af:af:99:41:5f:3b:3b:22:12:86:d4:85:bb: 6d:ed:c2:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG4AWacSFDhw9kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk ZGM5ZjJmNmItYmZlZC00YzI4LTg2MDgtMjA4ZGYzMWNhZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGUv+bCLJSFovE/I9ud09Skk1JmKPy7jt6ZL 85G0sohbpoNT3e+Pw3fpalf8xTB4XA4/RVM/XQtO8OVgO6fhSwP9NtY5A0RTYqOA IU6kQnD8PWDIlIkkGbZHhPC3iWkaDk9HsA8inlowuA5Eby0NSaofXu562S86p7+Z a3aMvwDPymd902KBrxN49cqYkiB7Bh0bjzDPRL8MXK0UKAqjdqbx27BN9dn87Lq/ IU0T7+c5bULHnHgJUyiFJgCgMP27NwH5st15pT+9Zl3QbW80RtzThi1WednTFLPB 2q87wT2GWWqNzWIRwKomq9xNSOIqJI0g4tpj4M05DUHXilzunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSJcJS6viT/OPZkMTxAVy3GH1PJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgHAScroFMiR2yAZpiKB9S0RlZhTjweE2q5IxNxvKmmdwIEvOr4yH6o MhqsRJ0UocVOvEf0x89tI95YiRw8J58+3SY/M6d4gurDKYRSc9SA2eQpTKz0B1XR e52JAHXK7Rr5LffD3l1gAEmtoOy4HVymFuYOgvm7+eMYligVw9ftXReW1C033dP9 BkOvLfihtU9lq8Zouj1+La4eLyVDDp32Qfhx8dLQaI0mCf9bAo51yScSaexl2xOf oF31Io6sTX8yHlWxbAuG/XNZH7qmwI8hnWg13gDKScQf7QGIORCUkFJZV0FfUSRD I6fuDniyr6+ZQV87OyIShtSFu23twsE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:22 2025 by rpki-client