$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa File: d8086889-6f1b-352b-8d9e-4174cd5980da.roa (raw, json) Hash identifier: LR8BYcsGxi4eE7WdFgnWcnI6GXeF/lrk0ZXUbwDvwpM= Subject key identifier: 49:52:00:E0:21:D8:5A:79:E7:3B:5D:1B:5B:DC:19:9D:0D:75:E6:00 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584A1F90217B864AE1C71E379F40 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 25645 IP address blocks: 137.239.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:21:7b:86:4a:e1:c7:1e:37:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=95a865be-8e3d-490b-a5d5-c1fac416ed26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:4a:74:9a:be:a1:77:39:09:42:2d:89:58: 11:61:0b:45:03:db:00:29:2a:0a:ab:c4:b0:0c:33: 79:c7:ca:8a:01:35:84:12:6a:74:e7:d1:6b:85:32: 05:a1:50:22:19:b1:af:1d:37:33:c2:d8:1a:83:f7: 93:46:da:0b:ee:7f:e3:f9:6f:cc:77:a4:95:b1:7d: 54:ab:bf:d4:da:b2:ee:20:e2:9d:44:ff:a6:7b:0a: c4:6e:8d:3a:fd:a8:d1:73:d4:43:84:60:b6:f6:47: 88:a3:d1:22:72:86:17:0f:75:c8:86:c4:55:33:b4: 3f:1f:6d:14:4f:76:5a:bd:30:8c:49:60:95:6f:14: c9:ea:52:c1:28:5e:5a:1b:ef:2d:9d:1b:af:31:36: 13:2d:71:45:5e:1c:cc:90:f4:51:2f:2a:74:46:3e: f3:89:7f:72:f7:7d:4b:fa:60:e7:b3:3b:05:9c:c1: 1a:76:9f:b7:c6:0b:42:2e:89:c5:47:ac:45:64:b3: 46:c2:fb:d4:39:cb:12:8c:fa:1d:95:f8:4a:8f:53: 81:e3:31:d2:5a:43:3f:1b:d1:21:47:05:03:48:8e: 7a:c5:3b:8a:36:c8:76:9b:53:fe:82:e0:a0:dc:54: 40:35:99:fe:a1:ed:55:2f:8c:ad:5d:22:db:59:9d: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:52:00:E0:21:D8:5A:79:E7:3B:5D:1B:5B:DC:19:9D:0D:75:E6:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d8086889-6f1b-352b-8d9e-4174cd5980da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:22:29:5b:14:b1:89:db:dd:ea:f6:78:41:db:ec:8f:87:92: 4c:9e:b3:19:d1:89:ad:55:62:71:ed:bc:7b:9d:14:51:1f:73: 4e:03:95:5d:5a:36:06:5f:73:03:b0:93:91:2b:cf:79:27:66: f6:f8:7b:f7:44:54:7c:24:a9:49:ab:aa:ec:88:34:e7:a3:df: bd:a3:ad:f8:52:20:f6:94:3f:fe:8b:a2:ce:3d:45:51:c1:a4: 9a:36:43:5e:f2:40:60:f9:2a:36:37:35:1c:90:b9:7c:54:ea: f0:f3:bb:8b:9a:10:3b:11:f1:95:70:01:32:74:d7:09:3c:f1: d2:bf:b3:d4:80:e5:26:90:24:1e:e9:22:54:1f:79:90:5e:04: 1b:eb:13:24:26:89:44:af:79:d0:42:d1:38:a7:3e:41:a0:81: 98:e6:7f:4b:5d:fc:9e:65:d2:ab:89:41:74:22:df:88:d4:ff: 7e:3a:a7:21:3f:c0:c4:9b:37:cc:85:97:d1:4a:0c:b6:8d:a4: 20:48:1b:e2:75:98:16:6d:b7:75:b3:9e:6b:6b:db:c3:84:91: 63:67:71:4c:de:d3:a2:4c:14:76:6d:61:b9:61:ed:76:d9:34: 9a:ad:24:0b:d6:d9:0b:ad:18:88:7f:0d:78:1f:ce:1c:c2:5c: ab:4c:9b:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCF7hkrhxx43n0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk OTVhODY1YmUtOGUzZC00OTBiLWE1ZDUtYzFmYWM0MTZlZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2xKdJq+oXc5CUItiVgRYQtFA9sAKSoKq8Sw DDN5x8qKATWEEmp059FrhTIFoVAiGbGvHTczwtgag/eTRtoL7n/j+W/Md6SVsX1U q7/U2rLuIOKdRP+mewrEbo06/ajRc9RDhGC29keIo9EicoYXD3XIhsRVM7Q/H20U T3ZavTCMSWCVbxTJ6lLBKF5aG+8tnRuvMTYTLXFFXhzMkPRRLyp0Rj7ziX9y931L +mDnszsFnMEadp+3xgtCLonFR6xFZLNGwvvUOcsSjPodlfhKj1OB4zHSWkM/G9Eh RwUDSI56xTuKNsh2m1P+guCg3FRANZn+oe1VL4ytXSLbWZ1fTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElSAOAh2Fp55ztdG1vcGZ0NdeYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDgwODY4ODktNmYxYi0z NTJiLThkOWUtNDE3NGNkNTk4MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFciKVsUsYnb3er2eEHb7I+HkkyesxnRia1VYnHtvHudFFEfc04DlV1a NgZfcwOwk5Erz3knZvb4e/dEVHwkqUmrquyINOej372jrfhSIPaUP/6Los49RVHB pJo2Q17yQGD5KjY3NRyQuXxU6vDzu4uaEDsR8ZVwATJ01wk88dK/s9SA5SaQJB7p IlQfeZBeBBvrEyQmiUSvedBC0TinPkGggZjmf0td/J5l0quJQXQi34jU/346pyE/ wMSbN8yFl9FKDLaNpCBIG+J1mBZtt3Wznmtr28OEkWNncUze06JMFHZtYblh7XbZ NJqtJAvW2QutGIh/DXgfzhzCXKtMm7w= -----END CERTIFICATE-----Generated at Tue Jun 17 11:47:55 2025 by rpki-client