$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa File: 1e3d4f97-753b-354c-81de-02471daecfb2.roa (raw, json) Hash identifier: MJ7tm5SbVlej9unYSDsgxGhRTSoeq3TSQk+Rm6V//oM= Subject key identifier: C7:18:5C:76:8D:52:66:5E:FF:4A:A0:C7:D0:E0:10:60:09:0E:14:B4 Certificate issuer: /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Certificate serial: 010D0C9F4328584A093AA19C41105BA18A40D700 Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 3477 IP address blocks: 137.75.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a1:9c:41:10:5b:a1:8a:40:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=3c333c67-f033-4ae8-8ed3-abf5d75f3ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:05:8e:2e:f9:c9:1e:0c:53:db:49:07:94: ba:fc:4b:d8:1b:ac:6b:cd:cc:20:5b:da:0b:43:00: 4b:b2:e3:4f:d4:d2:5d:8f:88:ad:c2:f0:04:a1:92: 79:91:af:f6:cd:38:86:e8:d8:9b:3c:07:b4:23:8f: 53:51:72:6d:ac:97:6c:74:2a:32:5b:7a:be:91:42: 30:78:c2:2e:d5:0b:74:ac:b9:f0:91:ff:fe:ce:60: 7c:ea:ef:be:9f:89:a9:09:fc:60:c0:3d:20:43:af: 86:14:28:e8:51:8d:0d:8f:63:8c:34:3f:cf:b0:f8: 83:7f:a8:e9:2e:80:03:91:2e:9c:50:a9:fa:36:cc: ae:6b:65:29:3b:da:80:13:ef:db:e4:60:db:79:74: 74:3b:ec:b2:00:60:57:1e:2d:e5:bc:20:96:b7:bc: e1:b8:65:42:90:6e:1c:a2:82:78:0f:25:fb:d8:63: d3:16:8e:e2:6a:3f:ba:25:f7:53:7e:49:2e:87:5b: 80:d9:7e:89:bb:3e:16:c5:05:34:70:74:44:0f:e4: 6c:90:7d:72:0a:4f:39:ed:7d:63:45:35:e5:fc:2b: ae:10:9c:09:b3:aa:59:7c:4e:2d:c1:6b:73:52:27: 4e:d2:81:79:f3:b6:7e:af:3a:ea:5d:8f:6b:58:e7: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:18:5C:76:8D:52:66:5E:FF:4A:A0:C7:D0:E0:10:60:09:0E:14:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/1e3d4f97-753b-354c-81de-02471daecfb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl X509v3 Authority Key Identifier: keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer sbgp-ipAddrBlock: critical IPv4: 137.75.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a7:3c:1e:fc:6a:5c:6e:f5:18:40:e3:f8:2c:4d:65:ba:20: 7b:15:63:41:c0:91:26:6a:00:d1:cd:24:15:fe:5e:d3:63:8f: fd:75:32:9b:b9:81:f9:34:45:cd:2d:4d:c1:1c:18:0f:83:75: 18:87:86:0a:fd:ae:ca:be:ce:ec:76:7a:d2:f5:fc:25:01:d6: d2:7c:44:38:78:35:a1:fe:f7:ec:43:62:31:98:b8:64:9c:52: cc:73:b8:01:46:c8:17:c9:64:1a:d4:57:9f:d4:63:3b:4c:53: ec:b3:11:39:e6:2c:3f:d9:17:ed:9d:3a:6a:97:e4:d6:c8:0a: b5:c8:9f:60:63:b7:64:e8:4c:7f:59:b1:f6:ae:13:83:42:67: b1:87:44:dd:01:48:b3:97:b9:b8:77:ad:fe:da:ab:b2:c8:f1: ce:5a:e8:53:3d:44:4e:7c:75:a4:4a:93:d3:24:b8:02:1a:f0: 99:eb:2d:44:be:93:0f:8a:c5:1f:4f:af:8f:f7:97:54:3f:59: 70:24:d9:c4:8a:f3:6b:17:83:7a:a7:59:30:08:99:25:e3:d3: 16:29:2e:4d:fd:c4:95:31:bc:39:86:5c:d2:c9:b8:cc:0c:e2: 2d:03:2d:ea:07:bf:91:1b:7b:2e:9d:d4:92:fa:0d:32:7a:99: a6:25:52:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqGcQRBboYpA1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4ZDhkMWMtYTNlZi00MGUyLTk5MWEtOTc2NDJkZGRk NmFjMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk M2MzMzNjNjctZjAzMy00YWU4LThlZDMtYWJmNWQ3NWYzY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR0Fji75yR4MU9tJB5S6/EvYG6xrzcwgW9oL QwBLsuNP1NJdj4itwvAEoZJ5ka/2zTiG6NibPAe0I49TUXJtrJdsdCoyW3q+kUIw eMIu1Qt0rLnwkf/+zmB86u++n4mpCfxgwD0gQ6+GFCjoUY0Nj2OMND/PsPiDf6jp LoADkS6cUKn6Nsyua2UpO9qAE+/b5GDbeXR0O+yyAGBXHi3lvCCWt7zhuGVCkG4c ooJ4DyX72GPTFo7iaj+6JfdTfkkuh1uA2X6Juz4WxQU0cHRED+RskH1yCk857X1j RTXl/CuuEJwJs6pZfE4twWtzUidO0oF587Z+rzrqXY9rWOe9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcYXHaNUmZe/0qgx9DgEGAJDhS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZThk OGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRkZGQ2YWMvMWUzZDRmOTctNzUzYi0z NTRjLTgxZGUtMDI0NzFkYWVjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU4ZDhkMWMtYTNlZi00MGUyLTk5 MWEtOTc2NDJkZGRkNmFjLzJlOGQ4ZDFjLWEzZWYtNDBlMi05OTFhLTk3NjQyZGRk ZDZhYy5jcmwwHwYDVR0jBBgwFoAUsN1lnzvrigW9nzMaUiU6k/I7EvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0 MmRkZGQ2YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiUvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADynPB78alxu9RhA4/gsTWW6IHsVY0HAkSZqANHNJBX+XtNjj/11Mpu5 gfk0Rc0tTcEcGA+DdRiHhgr9rsq+zux2etL1/CUB1tJ8RDh4NaH+9+xDYjGYuGSc UsxzuAFGyBfJZBrUV5/UYztMU+yzETnmLD/ZF+2dOmqX5NbICrXIn2Bjt2ToTH9Z sfauE4NCZ7GHRN0BSLOXubh3rf7aq7LI8c5a6FM9RE58daRKk9MkuAIa8JnrLUS+ kw+KxR9Pr4/3l1Q/WXAk2cSK82sXg3qnWTAImSXj0xYpLk39xJUxvDmGXNLJuMwM 4i0DLeoHv5Ebey6d1JL6DTJ6maYlUmE= -----END CERTIFICATE-----Generated at Tue Jun 17 02:29:44 2025 by rpki-client