$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa File: ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa (raw, json) Hash identifier: xAkKMga+V9lum89K2nYthPlA57mVDMGNYQ42or8oLcs= Subject key identifier: EB:3E:37:C2:1A:5B:09:3B:4A:79:6C:3B:76:05:AA:04:91:18:59:0D Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A1F9021E99B77E2FB69853780 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 25645 IP address blocks: 137.239.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:21:e9:9b:77:e2:fb:69:85:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=efd507f0-bfd9-4f01-9bf3-76def986216a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:53:a1:20:14:92:5e:39:87:54:4b:7f:bc: 5c:97:11:b8:92:5c:6b:d1:1d:49:8b:38:8b:70:42: 2a:e2:f0:cf:7e:bf:7a:40:e0:ec:7e:dd:6f:20:f4: 7e:71:62:49:fb:c8:ff:67:10:e8:c1:e6:0a:d2:ce: 47:1f:41:52:91:f0:e5:5e:68:9f:21:0a:53:d2:2a: ce:28:b6:dc:5e:48:fa:82:b8:0a:a1:b9:98:58:14: 4a:57:ce:e1:02:12:d9:cf:4d:99:9e:f8:b7:ed:a4: ce:00:73:9c:c0:47:f4:bc:2c:79:a0:e9:ac:4c:ad: f0:d9:ac:f8:03:63:f7:65:8d:a1:7e:5e:b7:98:0d: 21:b9:53:7b:fa:65:a2:19:79:38:91:8c:ef:1e:1a: f7:b0:cd:dc:27:0a:af:41:cb:5a:a9:ec:80:9d:eb: a7:90:37:6b:50:1f:37:c9:c0:d8:4e:26:d5:13:7b: 9c:c3:10:bc:76:d9:c9:2b:cd:62:fb:72:7c:46:20: 28:38:c3:58:f6:76:b3:00:83:f2:b9:6c:7a:21:cf: 56:15:9b:97:67:61:c3:3c:ef:8f:dd:de:b8:86:9d: f4:1e:d7:fe:0e:b2:13:a9:8e:66:4f:67:38:f7:ac: 40:b7:35:f9:a3:fe:19:4f:a9:cd:17:f5:81:67:5c: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3E:37:C2:1A:5B:09:3B:4A:79:6C:3B:76:05:AA:04:91:18:59:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ab8b3e70-9d7c-3af2-9b11-c5c28e60ef00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6c:56:7e:9c:40:61:f4:59:04:f8:a2:d5:c0:d3:79:42:a5: 92:c9:8f:ce:a8:d3:f3:26:11:7b:bc:97:66:4e:1f:c2:c8:c0: 0e:4f:71:12:f9:ba:57:76:13:50:f4:8b:7d:57:57:10:fe:c9: 8f:7d:dc:78:bb:b6:06:70:58:54:00:01:a9:71:81:ec:04:1f: 4b:ff:fa:c1:35:96:e6:23:79:43:d6:53:4e:7e:ad:55:45:33: 33:2b:31:b3:2d:27:06:0a:5b:d8:1c:00:49:e7:e5:a7:6c:83: 7d:06:d0:f9:05:fb:4d:16:45:37:84:66:6f:71:93:e8:1d:9a: 39:52:12:06:f7:c1:21:fb:5b:36:7d:75:0a:9e:97:e4:8d:6a: 30:16:9a:92:09:b8:55:45:82:c4:95:55:99:9a:9f:ab:3e:ae: f1:49:30:c0:2f:b8:c5:80:14:82:14:c0:7f:78:92:85:26:c3: 79:a6:af:f2:03:a8:ec:49:8f:db:66:3f:af:81:2e:f7:24:b8: 78:91:a2:3f:ae:07:59:98:72:ba:f6:29:4d:79:f1:11:51:68: bd:9a:5a:01:05:33:93:48:c5:a0:4a:66:9f:54:bd:ac:22:3f: a7:7b:c1:4e:ee:f0:17:52:af:34:25:9f:40:0f:20:bb:46:fb: d7:09:52:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCHpm3fi+2mFN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ZWZkNTA3ZjAtYmZkOS00ZjAxLTliZjMtNzZkZWY5ODYyMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwZToSAUkl45h1RLf7xclxG4klxr0R1JiziL cEIq4vDPfr96QODsft1vIPR+cWJJ+8j/ZxDoweYK0s5HH0FSkfDlXmifIQpT0irO KLbcXkj6grgKobmYWBRKV87hAhLZz02Znvi37aTOAHOcwEf0vCx5oOmsTK3w2az4 A2P3ZY2hfl63mA0huVN7+mWiGXk4kYzvHhr3sM3cJwqvQctaqeyAneunkDdrUB83 ycDYTibVE3ucwxC8dtnJK81i+3J8RiAoOMNY9nazAIPyuWx6Ic9WFZuXZ2HDPO+P 3d64hp30Htf+DrITqY5mT2c496xAtzX5o/4ZT6nNF/WBZ1zZ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs+N8IaWwk7SnlsO3YFqgSRGFkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYWI4YjNlNzAtOWQ3Yy0z YWYyLTliMTEtYzVjMjhlNjBlZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtsVn6cQGH0WQT4otXA03lCpZLJj86o0/MmEXu8l2ZOH8LIwA5PcRL5 uld2E1D0i31XVxD+yY993Hi7tgZwWFQAAalxgewEH0v/+sE1luYjeUPWU05+rVVF MzMrMbMtJwYKW9gcAEnn5adsg30G0PkF+00WRTeEZm9xk+gdmjlSEgb3wSH7WzZ9 dQqel+SNajAWmpIJuFVFgsSVVZman6s+rvFJMMAvuMWAFIIUwH94koUmw3mmr/ID qOxJj9tmP6+BLvckuHiRoj+uB1mYcrr2KU158RFRaL2aWgEFM5NIxaBKZp9Uvawi P6d7wU7u8BdSrzQln0APILtG+9cJUoA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:23:33 2025 by rpki-client