$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa File: 7388a857-6a24-35a6-b537-daa459258a2e.roa (raw, json) Hash identifier: u+K0GqmlKrULoeJGPjB5PW4X9lyoY/vBnC2EOtD3GHA= Subject key identifier: A5:0F:DB:8B:E2:C4:2C:92:E2:62:2B:4D:31:91:FE:36:52:60:CB:46 Certificate issuer: /CN=7054e196-fda1-4988-82d5-4d2f5013150d Certificate serial: 010D0C9F43285849ED4FC60F0D27DA1FDF6DF240 Authority key identifier: 52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 16509 IP address blocks: 170.39.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c6:0f:0d:27:da:1f:df:6d:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7054e196-fda1-4988-82d5-4d2f5013150d Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=93ce786c-a69f-48b5-b9d3-4f91d6c00777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:4d:31:70:fd:3f:a9:d0:85:c9:14:d3:52: 5e:d8:75:d0:90:52:7b:b7:78:74:11:43:98:51:75: 8f:a5:99:04:43:7b:60:8f:ea:41:7c:b6:3f:27:29: 56:3b:dd:0e:ef:62:d9:84:87:d1:30:8f:11:7d:2c: b9:1d:15:60:8b:9b:29:4c:9a:3d:de:b4:a8:30:cf: 79:ab:e7:0c:58:44:a9:be:c7:24:17:ed:52:c3:a5: af:95:a6:b2:b0:2e:40:68:0a:89:08:ca:66:50:c2: d6:f3:9c:cf:dc:04:5f:b2:99:a5:03:61:72:a8:f1: ef:71:3b:76:d2:c3:ea:83:7b:3d:ae:8c:67:9e:70: 75:ef:c6:10:ab:9b:b8:ac:48:f2:88:a6:59:22:35: 7f:0e:16:3e:ab:04:e3:f0:76:63:79:43:f8:b4:55: 0e:55:3b:4f:56:5e:75:c7:d7:6f:9b:98:21:cb:24: d8:e6:1c:b0:bb:a2:12:86:ae:d5:61:36:3a:b4:7b: 71:00:ad:7f:58:f6:25:51:90:52:d6:97:18:43:18: 62:5a:04:0e:25:79:54:c6:f2:1d:2e:f1:16:e1:78: f4:ca:1b:26:b4:5d:9f:5d:37:9f:dd:70:8e:a5:4c: cf:85:54:65:92:ae:f8:5e:5a:ae:9b:0c:c1:d2:b5: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:DB:8B:E2:C4:2C:92:E2:62:2B:4D:31:91:FE:36:52:60:CB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7388a857-6a24-35a6-b537-daa459258a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d/7054e196-fda1-4988-82d5-4d2f5013150d.crl X509v3 Authority Key Identifier: keyid:52:46:E6:08:EF:68:90:03:56:03:88:76:FC:E9:A7:67:C1:E4:B4:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7054e196-fda1-4988-82d5-4d2f5013150d.cer sbgp-ipAddrBlock: critical IPv4: 170.39.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:82:2d:b2:47:65:6b:41:17:44:86:5b:b0:e4:f7:0c:f5: fd:4b:5e:bb:0c:8c:d5:85:f1:04:b8:42:fb:c7:33:fb:92:22: a8:b2:57:65:e3:66:a5:6e:e6:99:71:05:9d:93:d2:5f:47:82: 15:eb:98:01:db:52:7c:f6:02:5a:c9:21:2e:9f:6c:29:ba:6f: 3b:0d:be:06:ae:d6:fa:4c:82:b9:b3:c6:24:c5:9a:0d:66:6d: a7:7c:c5:8d:aa:94:85:52:20:52:38:02:6a:e6:86:e5:2e:5d: c0:97:0c:f2:39:8d:5b:93:56:79:8f:2b:e8:1b:32:73:a1:ae: cc:b4:54:e2:df:47:1f:ca:b9:35:2e:86:53:8d:3e:d9:57:fa: eb:48:09:3a:23:7a:50:ab:6f:22:43:3e:e5:6a:08:ea:3a:dd: 11:c4:d2:08:9a:f8:d6:e5:1f:29:5c:3b:39:05:7f:d1:21:22: 72:7e:42:76:a2:16:3e:f1:5b:a9:42:42:ca:a4:4b:37:cd:b6: 52:c0:e3:39:37:42:27:92:ce:cd:61:0e:9d:c8:4c:1e:eb:68: fd:9f:36:d5:d0:06:55:dc:f6:66:89:5f:08:5d:b5:87:f7:92: d1:17:8d:15:2d:43:e1:9f:fe:45:6e:a9:29:35:7c:e8:b6:21: 44:92:9a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8YPDSfaH99t8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA1NGUxOTYtZmRhMS00OTg4LTgyZDUtNGQyZjUwMTMx NTBkMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTNjZTc4NmMtYTY5Zi00OGI1LWI5ZDMtNGY5MWQ2YzAwNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc5NMXD9P6nQhckU01Je2HXQkFJ7t3h0EUOY UXWPpZkEQ3tgj+pBfLY/JylWO90O72LZhIfRMI8RfSy5HRVgi5spTJo93rSoMM95 q+cMWESpvsckF+1Sw6WvlaaysC5AaAqJCMpmUMLW85zP3ARfspmlA2FyqPHvcTt2 0sPqg3s9roxnnnB178YQq5u4rEjyiKZZIjV/DhY+qwTj8HZjeUP4tFUOVTtPVl51 x9dvm5ghyyTY5hywu6IShq7VYTY6tHtxAK1/WPYlUZBS1pcYQxhiWgQOJXlUxvId LvEW4Xj0yhsmtF2fXTef3XCOpUzPhVRlkq74XlqumwzB0rWrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUP24vixCyS4mIrTTGR/jZSYMtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0 ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJmNTAxMzE1MGQvNzM4OGE4NTctNmEyNC0z NWE2LWI1MzctZGFhNDU5MjU4YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA1NGUxOTYtZmRhMS00OTg4LTgy ZDUtNGQyZjUwMTMxNTBkLzcwNTRlMTk2LWZkYTEtNDk4OC04MmQ1LTRkMmY1MDEz MTUwZC5jcmwwHwYDVR0jBBgwFoAUUkbmCO9okANWA4h2/OmnZ8HktKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDU0ZTE5Ni1mZGExLTQ5ODgtODJkNS00ZDJm NTAxMzE1MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrqgi2yR2VrQRdEhluw5PcM9f1LXrsMjNWF8QS4QvvHM/uSIqiyV2Xj ZqVu5plxBZ2T0l9HghXrmAHbUnz2AlrJIS6fbCm6bzsNvgau1vpMgrmzxiTFmg1m bad8xY2qlIVSIFI4AmrmhuUuXcCXDPI5jVuTVnmPK+gbMnOhrsy0VOLfRx/KuTUu hlONPtlX+utICTojelCrbyJDPuVqCOo63RHE0gia+NblHylcOzkFf9EhInJ+Qnai Fj7xW6lCQsqkSzfNtlLA4zk3QieSzs1hDp3ITB7raP2fNtXQBlXc9maJXwhdtYf3 ktEXjRUtQ+Gf/kVuqSk1fOi2IUSSmjM= -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:42 2025 by rpki-client