$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a54a0b62-8546-3c48-909b-08b3bbc51577.roa File: a54a0b62-8546-3c48-909b-08b3bbc51577.roa (raw, json) Hash identifier: xu1VotTuha98Qqz4fzmvUbPEZZAzLqzPZYI/0MjVMxU= Subject key identifier: 66:96:74:ED:0C:49:32:E2:AE:A5:3D:EA:33:44:51:29:EC:EA:BF:A9 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C41D5B9AD1CB3747791B00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a54a0b62-8546-3c48-909b-08b3bbc51577.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 2152 IP address blocks: 137.164.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1d:5b:9a:d1:cb:37:47:79:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=08277e3c-d9d6-4f47-aa80-8ff8b762860e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:1a:14:15:49:68:d8:fb:a3:f8:29:b4:b1: de:c8:49:39:dd:02:f7:ff:6d:b5:4f:92:9d:df:d2: 12:e5:a4:ed:58:d5:cc:19:1d:32:39:fa:6e:e3:51: bb:7e:36:e3:bd:5b:72:3d:53:73:f7:ff:8c:e2:ac: 6d:09:ae:79:6c:c8:ec:61:29:73:dd:12:04:4f:77: 73:bf:c4:88:cf:96:09:cf:5c:a7:ae:43:a6:b3:d6: b9:d6:5b:ac:1d:ef:e8:b1:7b:e7:34:0f:9c:20:c4: 34:ce:47:67:bd:63:53:2d:78:f1:82:16:8f:10:ca: b5:6f:2f:f3:e8:bb:95:db:93:a6:80:9a:98:54:70: f6:da:88:cf:15:1c:83:10:3c:66:21:77:a7:38:39: cd:4f:a7:93:70:7f:c8:64:f0:24:6a:16:62:38:aa: 22:40:8b:8a:74:d7:d6:e6:1c:c1:c4:f1:c3:eb:4d: 56:70:33:82:61:3c:c5:31:5a:21:9e:8b:b9:4b:51: 26:aa:e1:dd:30:c0:f8:ed:c0:74:8e:5c:a5:6b:06: 44:6a:f9:01:93:30:cf:61:75:bf:f2:82:95:5b:86: 7a:b1:07:fb:1a:0d:04:8d:2d:b2:91:53:ec:43:3b: 6d:34:ff:1f:13:15:fe:f7:91:33:77:81:11:5e:41: 45:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:74:ED:0C:49:32:E2:AE:A5:3D:EA:33:44:51:29:EC:EA:BF:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/a54a0b62-8546-3c48-909b-08b3bbc51577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cf:ed:8a:19:cd:3e:ee:bd:51:c7:69:8a:8c:60:a1:31:bf: b4:04:5b:aa:02:4c:7d:7c:bd:12:29:f5:92:f6:a8:99:91:ca: ec:ff:0d:e7:32:7f:e9:7b:00:81:14:aa:80:42:d5:61:7f:03: 3e:70:93:32:ec:ab:f5:63:a5:b1:96:b8:d2:24:e7:79:be:5c: 85:1a:ef:74:f4:9c:6f:cd:cf:e6:68:8d:19:a1:c2:d5:b6:c6: cf:33:8a:e7:1e:5e:13:76:43:93:61:f7:d9:04:33:c8:5e:ea: c1:59:e9:14:b0:a0:05:49:e8:0b:98:ce:d0:55:87:f7:46:74: 9c:e8:22:9f:03:f7:4c:2e:7f:2a:d7:ed:e2:8f:b1:c2:8e:d2: 91:a6:8f:b5:e7:d7:f9:2d:9a:79:99:1f:a0:78:b6:ec:03:3c: a1:f1:57:28:48:45:09:21:cf:b8:58:da:6e:36:52:fb:a9:9c: bd:88:86:06:ad:c2:e4:c5:bc:f7:41:98:bb:b2:27:94:bc:27: 04:30:30:09:a0:45:51:a9:38:c9:14:86:8d:4d:73:89:ae:84: 51:10:23:32:84:70:dd:45:63:9d:a8:b5:df:10:c4:4f:d6:e2: ea:8b:87:f7:c9:6b:74:5b:3c:b0:44:9c:d5:99:9e:0f:ea:85: 0a:08:76:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB1bmtHLN0d5GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDgyNzdlM2MtZDlkNi00ZjQ3LWFhODAtOGZmOGI3NjI4NjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttMaFBVJaNj7o/gptLHeyEk53QL3/221T5Kd 39IS5aTtWNXMGR0yOfpu41G7fjbjvVtyPVNz9/+M4qxtCa55bMjsYSlz3RIET3dz v8SIz5YJz1ynrkOms9a51lusHe/osXvnNA+cIMQ0zkdnvWNTLXjxghaPEMq1by/z 6LuV25OmgJqYVHD22ojPFRyDEDxmIXenODnNT6eTcH/IZPAkahZiOKoiQIuKdNfW 5hzBxPHD601WcDOCYTzFMVohnou5S1EmquHdMMD47cB0jlylawZEavkBkzDPYXW/ 8oKVW4Z6sQf7Gg0EjS2ykVPsQzttNP8fExX+95Ezd4ERXkFFDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaWdO0MSTLirqU96jNEUSns6r+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYTU0YTBiNjItODU0Ni0z YzQ4LTkwOWItMDhiM2JiYzUxNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfP7YoZzT7uvVHHaYqMYKExv7QEW6oCTH18vRIp9ZL2qJmRyuz/Decy f+l7AIEUqoBC1WF/Az5wkzLsq/VjpbGWuNIk53m+XIUa73T0nG/Nz+ZojRmhwtW2 xs8ziuceXhN2Q5Nh99kEM8he6sFZ6RSwoAVJ6AuYztBVh/dGdJzoIp8D90wufyrX 7eKPscKO0pGmj7Xn1/ktmnmZH6B4tuwDPKHxVyhIRQkhz7hY2m42UvupnL2Ihgat wuTFvPdBmLuyJ5S8JwQwMAmgRVGpOMkUho1Nc4muhFEQIzKEcN1FY52otd8QxE/W 4uqLh/fJa3RbPLBEnNWZng/qhQoIdjk= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:30 2025 by rpki-client