$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa File: 3c45f564-e010-32f9-9e47-024f8feaf419.roa (raw, json) Hash identifier: u6zuX+7LNQiLl6ER7X/ObKwAVSseRDwJZqO/iQdegLQ= Subject key identifier: 4A:5F:EE:D4:67:B2:75:4A:6C:7E:79:53:92:74:BC:C6:07:67:0A:EE Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F432858497974427D7241C235C236A200 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 25645 IP address blocks: 137.239.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:42:7d:72:41:c2:35:c2:36:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=6c4568ae-7a88-4629-b217-e79197829dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:f7:88:d8:1c:9f:86:b9:bd:b3:31:1a:8d: 88:42:41:ca:31:a0:4f:a5:55:a0:b0:42:1d:29:af: 99:b6:a5:d0:4d:98:67:9d:b8:3f:b6:9e:a1:a8:ec: 1f:c4:03:6a:31:4a:de:66:57:a9:15:33:b4:1a:50: 92:b9:60:57:24:38:27:bb:10:83:10:18:16:eb:7e: c7:29:b2:c7:33:20:3e:33:03:50:d9:2a:29:1a:0f: 6d:95:3b:20:2a:d0:2b:e8:df:61:0f:30:cb:01:90: 26:a0:ea:6a:72:49:71:11:8d:3d:e8:ac:26:f7:3c: 46:ad:5c:1b:56:cd:68:e0:21:89:99:c7:9d:37:41: 60:8c:61:ac:92:cc:1b:d6:bf:69:19:8f:54:20:79: 28:be:e2:0a:64:98:88:df:3b:2b:21:ef:8b:5b:4c: bf:3a:0a:6a:36:52:b3:3b:19:f1:d4:33:4d:5d:68: fb:24:e4:86:8e:6f:5d:bb:ba:0a:27:3c:5f:39:24: ea:b7:27:e0:45:e8:6c:2b:29:c7:bc:41:cf:a5:c6: 0f:43:57:a1:90:39:22:f9:9a:4d:e2:7e:0b:8a:ad: 8f:02:7e:16:8c:4c:09:44:ed:97:41:95:b1:eb:63: ca:91:7c:87:b2:d7:0b:df:11:ed:35:bd:da:85:82: bf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5F:EE:D4:67:B2:75:4A:6C:7E:79:53:92:74:BC:C6:07:67:0A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/3c45f564-e010-32f9-9e47-024f8feaf419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ac:c9:48:01:aa:4a:5f:0f:e0:18:59:62:97:1f:90:a9:f5: 54:d0:09:03:be:86:7f:c1:f4:2b:03:09:ba:a9:c1:bb:c4:99: 55:b2:b9:fe:26:1c:43:74:cc:a0:10:98:da:fa:cb:f0:2a:b0: dc:c6:71:23:db:2a:ef:69:c0:f0:8f:31:a2:d4:f9:0f:b4:7e: 5a:89:99:69:20:01:03:a6:6e:98:89:07:b5:47:54:28:12:b1: 43:4b:f6:e8:95:f1:36:7b:26:4b:ea:32:a8:04:26:23:09:e1: 03:ec:d3:70:15:ca:69:0c:04:8b:a0:e1:f6:1e:ed:d6:ed:e2: a7:75:6d:79:85:75:20:80:e2:e1:c9:10:d1:77:ff:a7:12:ec: 09:1c:be:9c:5a:3d:a8:f7:fd:1e:e8:c6:c1:16:0b:ca:6a:46: 51:78:ff:eb:97:02:a9:f6:a3:2f:bd:ee:92:9a:41:13:53:3a: 0b:03:a7:37:5d:c5:97:cf:a3:b4:a4:e5:ba:d4:01:4c:15:72: f5:d0:f2:5e:37:49:4e:66:2a:46:65:9e:27:14:64:55:87:c8: 25:bd:e7:71:84:50:59:bc:88:7e:d3:9c:ad:f6:9e:61:83:78: 89:4d:aa:6d:d4:2f:03:e2:30:b0:66:2b:ae:ce:9c:d9:6f:9c: 56:8a:b6:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEJ9ckHCNcI2ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk NmM0NTY4YWUtN2E4OC00NjI5LWIyMTctZTc5MTk3ODI5ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0f3iNgcn4a5vbMxGo2IQkHKMaBPpVWgsEId Ka+ZtqXQTZhnnbg/tp6hqOwfxANqMUreZlepFTO0GlCSuWBXJDgnuxCDEBgW637H KbLHMyA+MwNQ2SopGg9tlTsgKtAr6N9hDzDLAZAmoOpqcklxEY096Kwm9zxGrVwb Vs1o4CGJmcedN0FgjGGskswb1r9pGY9UIHkovuIKZJiI3zsrIe+LW0y/OgpqNlKz Oxnx1DNNXWj7JOSGjm9du7oKJzxfOSTqtyfgRehsKynHvEHPpcYPQ1ehkDki+ZpN 4n4Liq2PAn4WjEwJRO2XQZWx62PKkXyHstcL3xHtNb3ahYK//wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpf7tRnsnVKbH55U5J0vMYHZwruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvM2M0NWY1NjQtZTAxMC0z MmY5LTllNDctMDI0ZjhmZWFmNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADisyUgBqkpfD+AYWWKXH5Cp9VTQCQO+hn/B9CsDCbqpwbvEmVWyuf4m HEN0zKAQmNr6y/AqsNzGcSPbKu9pwPCPMaLU+Q+0flqJmWkgAQOmbpiJB7VHVCgS sUNL9uiV8TZ7JkvqMqgEJiMJ4QPs03AVymkMBIug4fYe7dbt4qd1bXmFdSCA4uHJ ENF3/6cS7AkcvpxaPaj3/R7oxsEWC8pqRlF4/+uXAqn2oy+97pKaQRNTOgsDpzdd xZfPo7Sk5brUAUwVcvXQ8l43SU5mKkZlnicUZFWHyCW953GEUFm8iH7TnK32nmGD eIlNqm3ULwPiMLBmK67OnNlvnFaKtpw= -----END CERTIFICATE-----Generated at Mon Apr 28 01:00:48 2025 by rpki-client