$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa File: 4c645004-5654-3403-b45f-d0b7069b81e6.roa (raw, json) Hash identifier: V+oq03CQ+sxrJT0yqxWjKPgH5Mx/Ya4wLWGsep9Ypqo= Subject key identifier: 57:94:7B:F5:CA:6B:DD:97:42:5A:47:02:8B:54:F7:66:15:86:88:93 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285848DEA12040C8E54EA43BB71F40 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 25645 IP address blocks: 137.239.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:20:40:c8:e5:4e:a4:3b:b7:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=21ca3f70-6c53-4170-802a-4491d49acf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:86:61:86:4a:37:ed:46:ca:d7:c5:a1:68: de:e5:d9:0f:35:68:c4:69:90:e0:31:21:a1:6d:d7: 4b:7c:4d:86:a8:6e:95:20:94:90:6f:3d:ac:e1:50: e0:aa:e3:d6:e6:c9:9c:c7:f5:7e:1d:9c:e9:90:5b: bb:06:cd:07:ba:38:d6:67:eb:c1:0d:7a:5d:21:fe: 33:58:49:31:fa:de:a9:59:16:9f:c5:8e:a6:e8:78: 9b:53:ef:a4:0c:26:99:46:e9:de:3a:54:ed:80:6a: 31:2f:aa:17:67:b1:84:cb:9d:4d:29:3c:7a:60:52: 1a:0c:1e:77:24:77:f7:e3:84:d2:dd:f5:8c:e2:e0: ac:b0:9e:c4:a8:d3:e9:7b:f5:74:57:47:e0:41:cf: db:e9:79:4a:0d:0a:80:dc:28:9a:4d:1d:43:fa:d7: b3:b8:6c:41:da:60:79:0f:ce:59:84:40:40:54:6f: a6:51:2d:e9:76:70:66:f5:61:b0:22:f5:93:95:75: ef:58:6c:99:96:53:5d:98:98:28:50:64:56:5d:21: e3:30:e7:04:5f:0e:57:a7:01:d8:25:67:ac:ff:87: eb:00:53:ab:7e:21:35:2f:87:99:57:d3:91:12:3d: db:25:c8:88:67:dd:d6:f5:7f:4e:03:74:9e:e9:86: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:94:7B:F5:CA:6B:DD:97:42:5A:47:02:8B:54:F7:66:15:86:88:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4c645004-5654-3403-b45f-d0b7069b81e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3f:78:3d:a2:8e:d7:ec:1f:31:51:e3:8b:06:40:6b:36:be: 4e:48:a2:37:7c:2b:19:c2:d2:04:55:66:b3:80:1a:a6:69:e6: 40:af:56:17:71:6d:31:04:0f:0d:bc:15:21:db:35:e6:de:24: be:cd:73:20:04:80:47:e1:58:5a:37:4c:bc:91:1f:37:f1:65: 58:53:9a:6f:81:d0:08:f2:54:85:fc:13:a9:fd:e9:44:85:2a: ea:47:ff:30:98:b8:93:58:43:d7:f6:85:65:cd:ef:07:1b:49: 8d:8f:29:df:d3:c9:8e:8e:57:77:e0:89:09:a7:10:d5:14:3c: 69:98:48:87:0b:51:9f:cc:47:6e:88:e0:49:9b:3c:e9:2d:68: 65:c3:29:6a:df:b2:42:12:a8:52:fd:2f:6e:a9:ce:f2:93:e7: e1:5b:6d:21:e3:77:59:1c:79:80:bc:f7:e4:2b:14:9c:1b:47: fb:9b:10:e3:8e:37:6c:c8:82:c9:32:81:5f:98:68:34:71:46: 11:aa:f4:52:19:3e:0c:71:b2:f8:d9:5f:a0:06:2d:59:e2:ea: a7:bf:1c:b7:8a:7b:c7:33:ce:25:fc:a0:39:49:b1:2b:d1:30: e7:f1:9d:88:ef:05:78:e4:93:7f:14:91:95:52:e3:9b:0a:eb: d3:74:ae:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSBAyOVOpDu3H0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MjFjYTNmNzAtNmM1My00MTcwLTgwMmEtNDQ5MWQ0OWFjZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw+GYYZKN+1GytfFoWje5dkPNWjEaZDgMSGh bddLfE2GqG6VIJSQbz2s4VDgquPW5smcx/V+HZzpkFu7Bs0HujjWZ+vBDXpdIf4z WEkx+t6pWRafxY6m6HibU++kDCaZRuneOlTtgGoxL6oXZ7GEy51NKTx6YFIaDB53 JHf344TS3fWM4uCssJ7EqNPpe/V0V0fgQc/b6XlKDQqA3CiaTR1D+tezuGxB2mB5 D85ZhEBAVG+mUS3pdnBm9WGwIvWTlXXvWGyZllNdmJgoUGRWXSHjMOcEXw5XpwHY JWes/4frAFOrfiE1L4eZV9OREj3bJciIZ93W9X9OA3Se6YZ5wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeUe/XKa92XQlpHAotU92YVhoiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNGM2NDUwMDQtNTY1NC0z NDAzLWI0NWYtZDBiNzA2OWI4MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc/eD2ijtfsHzFR44sGQGs2vk5Iojd8KxnC0gRVZrOAGqZp5kCvVhdx bTEEDw28FSHbNebeJL7NcyAEgEfhWFo3TLyRHzfxZVhTmm+B0AjyVIX8E6n96USF KupH/zCYuJNYQ9f2hWXN7wcbSY2PKd/TyY6OV3fgiQmnENUUPGmYSIcLUZ/MR26I 4EmbPOktaGXDKWrfskISqFL9L26pzvKT5+FbbSHjd1kceYC89+QrFJwbR/ubEOOO N2zIgskygV+YaDRxRhGq9FIZPgxxsvjZX6AGLVni6qe/HLeKe8czziX8oDlJsSvR MOfxnYjvBXjkk38UkZVS45sK69N0rh0= -----END CERTIFICATE-----Generated at Mon Apr 28 13:02:33 2025 by rpki-client