$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa File: fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa (raw, json) Hash identifier: yGiE0ZG9+pxejxBNaxVYkCT4EZB7II53faLJbQf2Eig= Subject key identifier: 67:28:AE:B3:6D:D5:AD:D2:69:11:0E:F6:9A:9A:B1:C4:AB:62:A2:79 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849EEB4FD52F86CBD7EAF30D800 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 398202 IP address blocks: 137.239.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b4:fd:52:f8:6c:bd:7e:af:30:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=4966fe44-a9fb-4d13-b94a-33a63a8c0a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:0f:42:30:23:45:26:67:d6:5e:60:1a:86: 63:55:37:21:0e:fd:09:aa:13:e5:d1:cc:87:db:49: f4:5a:da:d0:4b:e2:13:bf:9c:e8:16:a7:81:08:8d: 7f:e2:ef:23:77:0a:4b:f4:bd:6e:67:86:48:5b:63: c8:0e:8c:e9:44:86:1b:0a:f7:05:08:78:73:2d:a3: 12:cb:a8:e7:40:8d:14:6b:82:db:3d:bb:87:88:84: 4c:83:2e:63:b1:e6:40:3a:d2:88:c2:d3:91:be:04: 26:1f:74:1b:da:1d:43:b9:6e:1e:66:28:74:66:b7: 9b:c1:29:cf:97:73:57:ad:d5:50:f6:71:35:c9:32: d1:f8:02:97:f8:15:14:0f:00:68:f4:1c:40:d0:83: 65:78:73:81:0d:28:cb:28:02:fc:ad:b4:f4:e1:8f: 89:f5:89:f7:f7:3b:93:5e:5d:4d:91:f0:9e:a8:9c: 47:f3:be:03:cc:10:15:98:12:11:49:48:50:1e:fb: 39:c3:01:f8:f5:e8:a6:6f:4a:18:46:4e:98:b8:4f: 59:48:65:cb:e7:d6:4c:c0:a1:be:85:30:05:09:e0: ac:79:60:9a:bf:9a:83:79:ef:f8:50:f5:0f:33:33: 70:2c:c1:08:38:39:f4:a3:b4:6b:6e:f0:eb:80:6c: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:AE:B3:6D:D5:AD:D2:69:11:0E:F6:9A:9A:B1:C4:AB:62:A2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 137.239.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4d:3e:fb:65:d5:e3:1f:0f:9b:e8:4c:cd:91:fb:b1:7e:0a: 4e:62:d5:74:97:cb:b5:ce:55:97:1a:b6:59:af:33:48:96:ca: 50:dd:65:1d:2b:5e:23:63:2f:60:74:cb:ad:48:25:79:b4:ca: 50:a2:aa:b0:19:73:11:bc:bf:86:f0:01:d0:11:8d:05:c1:a4: 80:79:0a:2e:47:71:8e:1c:13:fb:d6:f4:63:fd:8b:8b:af:11: be:4c:f1:5e:9f:f3:d1:9f:cb:df:03:47:c0:c5:f2:ee:02:cb: 30:c7:2d:17:f1:5e:fb:78:7e:75:98:13:da:4b:4f:16:c7:2b: af:62:56:48:e6:34:4a:5f:82:2b:8d:ec:4f:c0:ab:4f:1b:91: 62:52:f3:ed:19:74:64:d5:18:5a:19:7a:1d:4d:28:bc:93:89: 19:5e:09:c0:63:23:96:d0:e9:e2:95:69:4c:7a:71:8e:a5:3b: 9e:ae:2f:51:b0:86:9e:a2:41:eb:70:ac:17:17:8e:c4:c0:13: 8a:4e:74:da:a4:0d:42:eb:27:d0:c8:73:7f:83:26:e3:1f:ea: cb:c7:e6:0a:2e:06:0f:82:4c:44:93:98:04:54:81:79:dc:dd: de:cc:84:3e:4c:7b:df:1a:a7:6e:cd:7f:a5:ca:8d:aa:9f:fb: 8c:b1:83:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutP1S+Gy9fq8w2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk NDk2NmZlNDQtYTlmYi00ZDEzLWI5NGEtMzNhNjNhOGMwYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhsPQjAjRSZn1l5gGoZjVTchDv0JqhPl0cyH 20n0WtrQS+ITv5zoFqeBCI1/4u8jdwpL9L1uZ4ZIW2PIDozpRIYbCvcFCHhzLaMS y6jnQI0Ua4LbPbuHiIRMgy5jseZAOtKIwtORvgQmH3Qb2h1DuW4eZih0ZrebwSnP l3NXrdVQ9nE1yTLR+AKX+BUUDwBo9BxA0INleHOBDSjLKAL8rbT04Y+J9Yn39zuT Xl1NkfCeqJxH874DzBAVmBIRSUhQHvs5wwH49eimb0oYRk6YuE9ZSGXL59ZMwKG+ hTAFCeCseWCav5qDee/4UPUPMzNwLMEIODn0o7RrbvDrgGxZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcorrNt1a3SaREO9pqascSrYqJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmQwNTk5YWMtZDcxYi0z OTA0LTg2YzgtMDYxYjJlMWIyZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlNPvtl1eMfD5voTM2R+7F+Ck5i1XSXy7XOVZcatlmvM0iWylDdZR0r XiNjL2B0y61IJXm0ylCiqrAZcxG8v4bwAdARjQXBpIB5Ci5HcY4cE/vW9GP9i4uv Eb5M8V6f89Gfy98DR8DF8u4CyzDHLRfxXvt4fnWYE9pLTxbHK69iVkjmNEpfgiuN 7E/Aq08bkWJS8+0ZdGTVGFoZeh1NKLyTiRleCcBjI5bQ6eKVaUx6cY6lO56uL1Gw hp6iQetwrBcXjsTAE4pOdNqkDULrJ9DIc3+DJuMf6svH5gouBg+CTESTmARUgXnc 3d7MhD5Me98ap27Nf6XKjaqf+4yxg70= -----END CERTIFICATE-----Generated at Mon Jun 16 13:07:51 2025 by rpki-client