$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa File: 5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa (raw, json) Hash identifier: vGLGBm7FlrSghJUkY3oDyUDWhdNSFsSHk5ZKkgHTUro= Subject key identifier: 73:99:B8:9F:3D:7E:C0:28:A3:97:D9:DD:A7:0E:5C:13:A6:38:A3:46 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C41D31D81AA29485EC5B00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 2152 IP address blocks: 137.164.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1d:31:d8:1a:a2:94:85:ec:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=a4e001bf-0696-4a8c-8ba8-6af2c6aa9359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:99:d6:4b:98:fb:15:68:de:20:09:96:73: b0:46:52:d9:a6:53:8e:e1:86:60:69:a4:47:83:04: e3:61:33:36:91:71:99:b6:29:85:98:61:c6:56:8b: 4b:29:d1:b8:80:97:ef:9d:34:2e:bc:63:6e:6c:52: 82:e0:ba:c6:c6:36:46:32:8f:14:82:4f:93:ae:29: 5a:9d:f5:b4:1d:54:d5:ff:cb:c6:c6:cb:59:13:29: 2d:f3:f9:c0:df:9f:2d:ff:a6:68:99:00:b5:07:a3: 9b:02:52:13:ed:d1:30:c2:f6:34:ab:d5:83:ca:84: eb:d0:ca:fb:8d:ee:68:58:89:b5:63:ba:c8:90:cb: 13:b7:72:fb:59:47:e3:d4:45:21:46:af:ae:f7:7e: 74:f1:ff:30:24:33:1d:59:c3:be:d6:f3:ec:9a:da: c4:a6:1c:75:c3:03:8c:5f:88:06:6a:c6:d4:f3:a2: 57:c6:bd:38:d7:37:d1:b8:48:0d:d6:99:ed:80:2b: e2:e3:c8:7c:19:e0:15:37:6d:d3:45:04:d8:9a:21: e8:f8:3d:95:4b:d4:4d:7f:2f:a8:91:18:b5:1c:f0: f8:5f:f4:66:0f:4c:cb:02:c6:e1:35:89:52:84:6e: dd:1c:28:bc:a5:fb:a1:ab:6d:a1:bb:9b:8c:69:2f: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:B8:9F:3D:7E:C0:28:A3:97:D9:DD:A7:0E:5C:13:A6:38:A3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5ebc49a0-0ed6-3ffa-ae26-141da7dd8dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c1:ff:18:40:6b:3f:e6:47:87:6b:ed:8e:c5:b0:2d:56:60: 08:6a:3d:13:60:00:9f:7c:02:b1:8c:32:b9:e4:60:17:76:f3: 55:1d:ae:45:31:16:26:01:3f:d8:7a:50:cf:50:e2:0c:70:75: 93:83:9c:0e:de:bf:b6:22:47:92:73:50:30:c8:af:08:db:ae: 83:5d:09:1b:3d:8a:a4:dd:78:29:e5:55:f1:fd:30:3d:3e:77: d0:13:ad:b4:cb:ea:6f:6b:f1:19:5c:24:b9:f0:ff:7d:cc:16: fd:bb:99:fb:ff:da:57:ca:e1:60:db:49:eb:98:a1:18:0b:c1: 0a:fa:79:23:37:3c:67:9b:b8:6f:43:7e:98:83:91:de:5f:9b: b6:e3:4a:44:a9:6d:05:62:08:cd:03:9b:9c:7e:59:2b:81:31: b3:22:74:26:71:04:d2:e1:cc:c0:fe:6d:e1:4f:22:34:b8:e1: 9a:31:4c:77:26:7a:d7:57:e6:37:5a:39:99:0c:3d:06:04:4c: 95:80:11:f2:9a:ca:b4:29:d3:f4:1a:bb:98:fb:05:7e:9c:e6: f3:2d:7a:5d:ca:b0:6e:72:d2:ff:da:77:84:d2:8a:fc:57:c7: 56:df:e6:27:7d:4d:b7:bd:96:c0:e9:33:59:3e:9d:cb:50:21: a3:90:b8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB0x2BqilIXsWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTRlMDAxYmYtMDY5Ni00YThjLThiYTgtNmFmMmM2YWE5MzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5iZ1kuY+xVo3iAJlnOwRlLZplOO4YZgaaRH gwTjYTM2kXGZtimFmGHGVotLKdG4gJfvnTQuvGNubFKC4LrGxjZGMo8Ugk+Trila nfW0HVTV/8vGxstZEykt8/nA358t/6ZomQC1B6ObAlIT7dEwwvY0q9WDyoTr0Mr7 je5oWIm1Y7rIkMsTt3L7WUfj1EUhRq+u93508f8wJDMdWcO+1vPsmtrEphx1wwOM X4gGasbU86JXxr041zfRuEgN1pntgCvi48h8GeAVN23TRQTYmiHo+D2VS9RNfy+o kRi1HPD4X/RmD0zLAsbhNYlShG7dHCi8pfuhq22hu5uMaS8FpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOZuJ89fsAoo5fZ3acOXBOmOKNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNWViYzQ5YTAtMGVkNi0z ZmZhLWFlMjYtMTQxZGE3ZGQ4ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLB/xhAaz/mR4dr7Y7FsC1WYAhqPRNgAJ98ArGMMrnkYBd281UdrkUx FiYBP9h6UM9Q4gxwdZODnA7ev7YiR5JzUDDIrwjbroNdCRs9iqTdeCnlVfH9MD0+ d9ATrbTL6m9r8RlcJLnw/33MFv27mfv/2lfK4WDbSeuYoRgLwQr6eSM3PGebuG9D fpiDkd5fm7bjSkSpbQViCM0Dm5x+WSuBMbMidCZxBNLhzMD+beFPIjS44ZoxTHcm etdX5jdaOZkMPQYETJWAEfKayrQp0/Qau5j7BX6c5vMtel3KsG5y0v/ad4TSivxX x1bf5id9Tbe9lsDpM1k+nctQIaOQuK4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:54 2025 by rpki-client