$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa File: 8504dbf1-b1c3-3afa-96dc-c510762f1210.roa (raw, json) Hash identifier: qKG8JHhJEPqZFeddYyQjsKX9pyPwaHBSz+ukFQnFo0w= Subject key identifier: 76:CB:A6:F4:DF:2E:08:F7:82:AC:D1:4A:A2:C1:18:21:0D:82:11:39 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584A2ABAE32659F9F18610143240 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 394285 IP address blocks: 174.137.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e3:26:59:f9:f1:86:10:14:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=9abf8749-f4e8-4307-a2aa-7963aea7b76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:ff:c4:f7:41:54:43:6c:56:32:59:cd:92: 3e:48:21:94:6c:aa:ff:dc:15:07:ac:01:9f:c6:3e: ea:37:3a:01:8f:11:e6:48:47:c3:b7:0b:8d:91:ad: fe:62:13:10:70:31:22:61:38:c8:ca:fa:2b:ec:8c: 9a:da:2a:4b:e2:fe:cd:56:2b:2c:60:64:f6:53:0d: b3:a9:ef:9b:e4:cc:2b:d1:58:a1:c5:23:40:95:70: 67:e6:16:53:31:a3:2f:ce:11:69:a1:b8:80:b5:29: 55:5c:d0:1d:11:8d:72:ab:d1:b1:6b:e3:62:b1:bb: 68:8e:99:23:c7:28:96:28:7c:f1:4a:88:b1:c5:65: 6f:81:f5:99:ed:5a:38:2f:e9:b1:4d:d9:bf:2d:a2: 73:02:f7:ea:90:7b:31:be:a4:96:8c:05:e6:6b:44: a8:11:0a:f2:1c:58:58:8e:91:72:b9:28:54:ed:4b: f8:1d:0d:53:39:5f:39:f1:1e:07:26:bb:4a:d7:8c: 2f:c5:e3:8e:0f:b0:d3:d1:df:7d:7b:79:9b:8c:ec: e5:60:fa:59:54:5f:33:02:1d:fa:f5:72:fe:85:c6: 3a:f1:30:f5:fa:33:f9:7e:62:33:18:a2:c9:13:ad: 2f:1b:88:0e:9c:95:a1:87:2f:a1:65:52:a1:2f:96: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CB:A6:F4:DF:2E:08:F7:82:AC:D1:4A:A2:C1:18:21:0D:82:11:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 174.137.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:92:e0:93:de:c1:19:05:15:97:21:4d:8b:c5:42:b4:0b:50: 9b:a4:e3:37:0e:fa:70:85:de:30:5d:ba:fd:99:95:6b:f4:04: 61:85:ee:bf:f5:fe:91:39:38:71:6b:fd:11:b8:18:12:7c:47: ab:c3:ec:36:6e:80:9f:5e:25:64:25:e9:ee:d7:a6:72:99:d3: 4c:6d:e1:44:12:64:b5:02:86:5c:9c:34:dc:5d:cb:a2:5c:3a: 7a:a5:71:d7:5a:53:77:5d:d7:4f:87:8e:f1:57:d8:fe:7d:26: 04:c1:86:1e:18:99:b3:59:65:d4:80:b5:92:c9:56:91:aa:ce: 0f:44:4c:94:19:29:de:d9:fe:29:e9:a8:2c:5f:44:9e:50:f8: 9b:b7:ce:63:f1:dd:54:96:b5:4b:26:29:45:85:6d:f5:4a:f2: 48:74:7c:62:d7:78:fd:b7:b5:56:80:00:4b:b0:0a:8a:41:a4: 39:96:1a:de:f3:66:cb:6f:e0:53:3c:6a:0f:86:e1:88:dd:dc: a3:7f:38:b9:36:d2:80:6e:5a:13:60:99:66:35:38:9c:e4:c8: 09:3f:75:b8:70:7f:9e:7d:45:db:11:a0:a4:73:b9:cc:c0:a2: c7:0d:74:86:dd:6b:78:61:cb:b2:90:c3:de:79:75:1d:6e:36: e6:37:d8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuMmWfnxhhAUMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk OWFiZjg3NDktZjRlOC00MzA3LWEyYWEtNzk2M2FlYTdiNzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUT/xPdBVENsVjJZzZI+SCGUbKr/3BUHrAGf xj7qNzoBjxHmSEfDtwuNka3+YhMQcDEiYTjIyvor7Iya2ipL4v7NVissYGT2Uw2z qe+b5Mwr0VihxSNAlXBn5hZTMaMvzhFpobiAtSlVXNAdEY1yq9Gxa+Nisbtojpkj xyiWKHzxSoixxWVvgfWZ7Vo4L+mxTdm/LaJzAvfqkHsxvqSWjAXma0SoEQryHFhY jpFyuShU7Uv4HQ1TOV858R4HJrtK14wvxeOOD7DT0d99e3mbjOzlYPpZVF8zAh36 9XL+hcY68TD1+jP5fmIzGKLJE60vG4gOnJWhhy+hZVKhL5ZBVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbLpvTfLgj3gqzRSqLBGCENghE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvODUwNGRiZjEtYjFjMy0z YWZhLTk2ZGMtYzUxMDc2MmYxMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyS4JPewRkFFZchTYvFQrQLUJuk4zcO+nCF3jBduv2ZlWv0BGGF7r/1 /pE5OHFr/RG4GBJ8R6vD7DZugJ9eJWQl6e7XpnKZ00xt4UQSZLUChlycNNxdy6Jc OnqlcddaU3dd10+HjvFX2P59JgTBhh4YmbNZZdSAtZLJVpGqzg9ETJQZKd7Z/inp qCxfRJ5Q+Ju3zmPx3VSWtUsmKUWFbfVK8kh0fGLXeP23tVaAAEuwCopBpDmWGt7z Zstv4FM8ag+G4Yjd3KN/OLk20oBuWhNgmWY1OJzkyAk/dbhwf559RdsRoKRzuczA oscNdIbda3hhy7KQw955dR1uNuY32Gw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:12:32 2025 by rpki-client