$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa File: fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa (raw, json) Hash identifier: SPUW+eoby3OIGv22HKXhZ8ZfyvyIukpRGDiHE2rsqDk= Subject key identifier: 6E:F7:40:8E:3C:64:4D:93:46:DC:A1:C3:AB:17:44:9E:46:C6:07:69 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F432858490F7BFDFC33CDF84F5074BC80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 398202 IP address blocks: 137.239.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fd:fc:33:cd:f8:4f:50:74:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=28938eef-6188-4621-8e36-c16b7d0e129a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8c:ce:0e:0a:50:da:a1:ef:ac:5e:63:c0:8b: d7:49:86:ef:9d:25:b9:e0:6f:b8:e8:ed:42:d5:38: f4:aa:b5:c3:54:0d:70:67:eb:55:6a:c3:09:8c:57: 1b:a0:88:7b:eb:12:f4:ac:3a:d5:f4:57:55:fb:d2: 76:a3:0c:74:90:ee:ce:fb:89:51:77:1e:6a:88:01: 99:a9:51:d5:6e:06:72:68:51:5f:fe:46:7e:5c:12: 56:5f:3c:c7:2a:42:f1:4d:5b:39:4e:0a:6d:22:79: a1:e6:55:2f:18:41:ee:df:49:57:13:6f:81:a5:b2: 05:e4:b7:c9:6b:7b:7e:24:82:1a:ae:3d:91:d3:15: 22:e0:7f:25:0d:6e:bc:61:f9:ff:b0:65:56:df:0e: 29:47:75:1d:5c:0d:de:16:a2:16:04:e0:77:14:41: 7a:07:c1:43:8e:3b:bd:71:89:64:a1:d6:0f:72:f4: 6e:a6:0b:46:c3:dc:c0:e2:c2:19:c7:7c:10:d7:10: 05:80:89:d6:a1:aa:3d:35:d0:01:ff:9a:c4:8f:a7: ed:e7:b8:94:2c:50:d5:92:d1:96:15:d4:c4:26:da: 69:64:70:f1:40:58:85:15:71:39:d9:d4:ff:16:56: 92:68:32:9a:69:2b:83:1e:84:19:e1:0a:85:c8:dc: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:40:8E:3C:64:4D:93:46:DC:A1:C3:AB:17:44:9E:46:C6:07:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:18:24:f7:d6:18:5a:c2:5a:1f:01:54:a1:9d:3f:ec:00:ab: 39:e6:b9:90:d0:fe:a7:a3:5b:ce:c0:a2:94:7e:d9:8a:6b:11: ca:79:9e:d2:7e:5f:a4:fb:e9:b4:5c:85:9e:76:66:5b:b6:f6: e5:8b:8e:8c:1c:11:cb:b5:81:2a:3a:10:9e:08:51:43:91:c1: e7:8e:22:37:7c:5d:25:9a:b4:66:30:4a:1a:7a:c5:8a:7b:ad: ca:36:48:cb:26:c4:ad:e7:3d:4f:17:14:eb:86:9e:57:7a:ad: 30:b9:85:5b:02:cc:bf:d7:ad:00:ba:f3:c2:cc:69:7e:db:df: 38:81:aa:33:40:67:03:60:3e:52:ec:14:06:4c:4a:48:6a:a6: bf:52:4c:c5:59:29:b1:45:07:1b:9f:ff:9f:ad:42:42:88:78: 98:24:39:ff:55:15:fb:20:8b:85:f8:22:86:07:fc:eb:a7:74: 88:e9:97:5e:79:80:b7:e1:08:0c:ce:74:7c:3f:c8:5b:b2:10: ca:3f:cc:f2:e0:5d:1f:5c:e8:bb:81:a7:83:6d:f1:9e:7d:f5: e1:57:93:c0:3c:6a:c7:8e:46:31:65:ef:d4:61:10:62:11:a9: 3d:59:e1:77:24:3d:9b:22:d5:72:9b:50:5b:ed:e6:2d:ed:20: 7f:a5:87:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/38M834T1B0vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk Mjg5MzhlZWYtNjE4OC00NjIxLThlMzYtYzE2YjdkMGUxMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgozODgpQ2qHvrF5jwIvXSYbvnSW54G+46O1C 1Tj0qrXDVA1wZ+tVasMJjFcboIh76xL0rDrV9FdV+9J2owx0kO7O+4lRdx5qiAGZ qVHVbgZyaFFf/kZ+XBJWXzzHKkLxTVs5TgptInmh5lUvGEHu30lXE2+BpbIF5LfJ a3t+JIIarj2R0xUi4H8lDW68Yfn/sGVW3w4pR3UdXA3eFqIWBOB3FEF6B8FDjju9 cYlkodYPcvRupgtGw9zA4sIZx3wQ1xAFgInWoao9NdAB/5rEj6ft57iULFDVktGW FdTEJtppZHDxQFiFFXE52dT/FlaSaDKaaSuDHoQZ4QqFyNyt0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG73QI48ZE2TRtyhw6sXRJ5GxgdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmQwNTk5YWMtZDcxYi0z OTA0LTg2YzgtMDYxYjJlMWIyZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsYJPfWGFrCWh8BVKGdP+wAqznmuZDQ/qejW87AopR+2YprEcp5ntJ+ X6T76bRchZ52Zlu29uWLjowcEcu1gSo6EJ4IUUORweeOIjd8XSWatGYwShp6xYp7 rco2SMsmxK3nPU8XFOuGnld6rTC5hVsCzL/XrQC688LMaX7b3ziBqjNAZwNgPlLs FAZMSkhqpr9STMVZKbFFBxuf/5+tQkKIeJgkOf9VFfsgi4X4IoYH/OundIjpl155 gLfhCAzOdHw/yFuyEMo/zPLgXR9c6LuBp4Nt8Z599eFXk8A8aseORjFl79RhEGIR qT1Z4XckPZsi1XKbUFvt5i3tIH+lhyQ= -----END CERTIFICATE-----Generated at Mon Apr 28 00:44:15 2025 by rpki-client