$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/67b0bb87-4b27-3821-87e1-aeba74f7af7c.roa File: 67b0bb87-4b27-3821-87e1-aeba74f7af7c.roa (raw, json) Hash identifier: G5nNN1/n9Qatz7Jp67RcGnnwPUmHTLRBn4R2MYb34bs= Subject key identifier: EB:6E:A3:5F:52:35:17:AB:3A:CF:8E:BC:38:1A:CC:9C:A6:66:3A:8C Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C416BD800D4955BCD62720 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/67b0bb87-4b27-3821-87e1-aeba74f7af7c.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 2153 IP address blocks: 137.164.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:16:bd:80:0d:49:55:bc:d6:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=4d03079c-f7a7-469f-bd6b-e3a05a4b2ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:d5:64:21:d4:de:dc:34:b1:1c:c1:22:7c: f3:06:a0:3b:78:be:e1:6e:d6:5f:42:91:17:96:3b: b1:ad:e4:54:11:b1:3c:81:1e:85:28:c9:8e:7f:1d: 72:93:e5:ff:5a:09:20:12:ff:e0:3e:2d:df:da:39: d6:50:3f:9d:aa:1e:05:56:61:53:0d:da:c0:56:9f: f1:51:f3:df:26:6d:12:01:16:8a:81:09:93:4b:78: 36:77:d0:65:a4:71:d6:8d:11:13:2b:b2:b4:3e:7d: f6:14:fa:e3:17:33:d6:78:be:ce:a3:f7:f7:be:3e: de:5c:c4:0c:0e:bb:4e:66:69:c7:fc:c4:56:86:c3: 94:d1:34:44:10:9d:d7:2b:66:5b:fd:5d:99:76:e2: f5:9f:af:46:e7:22:db:be:20:48:02:c3:c3:e0:ef: 8b:73:19:e9:29:9e:84:48:66:a3:d7:a6:fc:e9:79: 96:98:d1:dd:ff:5e:16:ad:e4:97:31:2c:75:61:8a: 8e:65:c6:3e:b4:85:c7:ed:dc:39:44:11:18:f2:bb: 49:98:84:71:51:75:6a:5d:91:04:98:ee:de:19:95: f9:b8:d0:78:53:c6:ac:ba:b6:5e:00:26:6a:63:ed: d1:17:a4:39:77:4e:2f:53:22:3b:f6:9d:6d:bf:f2: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6E:A3:5F:52:35:17:AB:3A:CF:8E:BC:38:1A:CC:9C:A6:66:3A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/67b0bb87-4b27-3821-87e1-aeba74f7af7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:41:ef:8e:af:c4:d1:5a:a4:e4:40:a9:e3:73:34:d3:5f:a0: 98:68:a7:30:83:08:08:cd:00:14:74:44:06:76:9c:ea:4c:97: e4:d5:22:09:e1:4c:6e:60:43:c5:43:84:67:31:a2:73:bf:d3: 58:c5:79:29:03:68:41:3f:b0:db:72:93:1d:62:82:f3:8c:42: 5d:b5:9e:35:fc:f3:70:33:6f:ad:4e:74:b0:ac:81:8f:80:c7: 37:df:c4:2e:8e:8e:31:7d:73:44:d2:26:ad:2c:4e:0d:bd:1d: bf:6a:c0:f7:56:41:9b:20:b7:58:bd:86:1b:62:7b:7c:22:d9: b0:f1:b4:84:b0:2f:f6:44:32:6c:23:db:51:40:72:2c:fc:e6: 56:30:e6:91:be:e6:d0:2c:fb:d7:cf:61:db:59:5d:ad:8d:f4: dd:fe:01:c3:31:aa:c1:2a:59:ad:a3:2d:fc:d0:5c:03:8f:6e: d0:77:44:e4:cd:50:73:df:6d:cf:92:d8:d8:90:53:d3:27:51: dc:ec:5b:f2:e6:90:1a:49:ed:e7:dd:32:35:3f:7f:fb:0e:32: 6f:c2:93:fe:e3:e1:9a:bf:86:42:d4:58:9c:d7:06:08:f8:5f: 30:4f:74:61:35:f8:ce:9f:58:8f:6f:f3:85:56:ca:3f:b2:d2: 7c:70:65:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBa9gA1JVbzWJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGQwMzA3OWMtZjdhNy00NjlmLWJkNmItZTNhMDVhNGIyZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL3VZCHU3tw0sRzBInzzBqA7eL7hbtZfQpEX ljuxreRUEbE8gR6FKMmOfx1yk+X/WgkgEv/gPi3f2jnWUD+dqh4FVmFTDdrAVp/x UfPfJm0SARaKgQmTS3g2d9BlpHHWjRETK7K0Pn32FPrjFzPWeL7Oo/f3vj7eXMQM DrtOZmnH/MRWhsOU0TREEJ3XK2Zb/V2ZduL1n69G5yLbviBIAsPD4O+LcxnpKZ6E SGaj16b86XmWmNHd/14WreSXMSx1YYqOZcY+tIXH7dw5RBEY8rtJmIRxUXVqXZEE mO7eGZX5uNB4U8asurZeACZqY+3RF6Q5d04vUyI79p1tv/L4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtuo19SNRerOs+OvDgazJymZjqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNjdiMGJiODctNGIyNy0z ODIxLTg3ZTEtYWViYTc0ZjdhZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJB746vxNFapORAqeNzNNNfoJhopzCDCAjNABR0RAZ2nOpMl+TVIgnh TG5gQ8VDhGcxonO/01jFeSkDaEE/sNtykx1igvOMQl21njX883Azb61OdLCsgY+A xzffxC6OjjF9c0TSJq0sTg29Hb9qwPdWQZsgt1i9hhtie3wi2bDxtISwL/ZEMmwj 21FAciz85lYw5pG+5tAs+9fPYdtZXa2N9N3+AcMxqsEqWa2jLfzQXAOPbtB3ROTN UHPfbc+S2NiQU9MnUdzsW/LmkBpJ7efdMjU/f/sOMm/Ck/7j4Zq/hkLUWJzXBgj4 XzBPdGE1+M6fWI9v84VWyj+y0nxwZTI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:58 2025 by rpki-client