$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa File: a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa (raw, json) Hash identifier: dKUcJLZtQ7O4zEs4qbMaup5FpqadqAlyJiK2xt2JXj0= Subject key identifier: CC:67:41:CF:EA:9B:5B:79:89:F0:1F:D4:07:6E:1D:0B:1A:D6:0B:E1 Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F43285849A8E9E36196E1D888AAB7CB18 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 40495 IP address blocks: 174.137.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e3:61:96:e1:d8:88:aa:b7:cb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=6d244a40-42f0-4b07-b12f-661f3a2d2fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:b1:7d:55:ef:57:af:72:7b:00:8a:ff:29: 73:52:d1:64:d7:72:86:d2:2f:39:94:49:6a:f8:72: 5d:96:48:52:b5:a6:f6:b5:fb:00:84:af:89:da:5c: 65:c4:31:3d:64:bd:10:cb:06:d2:74:19:36:71:12: d4:a7:4f:e8:10:d9:8c:e4:83:af:a3:fe:00:78:cc: ed:07:ed:6f:b5:cd:97:5a:bb:d8:01:cf:b8:d1:7b: a2:48:88:ab:94:1d:74:5f:32:45:a8:3f:27:a9:b3: e2:dc:51:76:25:cc:59:55:96:6f:29:34:0f:a7:da: b6:47:79:26:77:c4:a6:14:23:99:29:68:54:6c:23: e6:69:c0:31:42:06:fa:5a:8e:c0:3a:df:95:fa:cf: fe:a4:88:ae:7a:13:f8:c1:e8:38:5b:65:cc:c3:94: ad:c7:97:43:dd:6b:89:8d:db:e9:4b:ec:95:ec:61: fd:b5:d4:0b:ad:cb:86:56:73:64:94:54:9f:8e:63: 5b:67:59:62:cc:08:ac:eb:8f:e7:65:12:56:04:2c: 5d:b6:56:75:8d:b4:17:d3:07:55:94:63:07:2d:b8: e8:3e:4c:0c:60:eb:2a:d1:5d:e1:68:4e:ba:f2:da: 51:6c:38:86:a9:11:bc:a1:8a:a8:e8:ac:74:12:1a: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:67:41:CF:EA:9B:5B:79:89:F0:1F:D4:07:6E:1D:0B:1A:D6:0B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/a7c7708c-a8b9-3ab8-be88-97548bbc3121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:17:21:60:41:06:37:73:d1:76:eb:ee:43:e3:93:f8:ae:84: 3a:97:2b:12:5f:20:b6:a7:e9:59:49:f1:df:2b:91:45:58:a0: 93:05:57:bd:c7:e6:ac:85:16:59:0d:aa:17:b1:a2:75:b5:32: 84:33:f1:04:f2:9d:6e:80:24:87:8d:f6:88:b2:31:7f:4e:6f: da:39:cc:40:74:a7:5f:74:19:84:29:e7:21:be:af:c8:1c:4f: 76:12:51:af:74:11:3b:8c:f2:30:31:68:23:b4:3f:d4:4e:2c: dd:41:1d:b1:ca:3f:15:3c:e9:58:9c:58:3f:4e:a8:ee:68:65: e4:b1:23:f3:7b:d1:70:3d:10:9d:84:a6:a2:89:18:d6:84:c8: 5c:a0:d2:81:2e:62:12:34:1d:d1:25:1f:7b:76:30:ac:cb:66: 32:9b:25:4e:22:85:a6:8b:38:56:f3:07:da:4c:7d:2e:8a:81: 18:35:90:e3:4e:b4:84:d2:4b:04:2d:00:88:fe:7f:d7:5e:a5: b6:c0:a9:68:aa:1c:32:4d:de:52:de:f8:02:c3:c4:84:78:82: d5:52:59:f3:e7:28:04:b6:56:a9:c2:c5:ac:32:fd:7a:36:7e: ff:85:69:86:89:2a:a2:5e:5e:e8:32:f0:02:f7:62:2f:d0:48: 50:2b:14:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eNhluHYiKq3yxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NmQyNDRhNDAtNDJmMC00YjA3LWIxMmYtNjYxZjNhMmQyZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWqxfVXvV69yewCK/ylzUtFk13KG0i85lElq +HJdlkhStab2tfsAhK+J2lxlxDE9ZL0QywbSdBk2cRLUp0/oENmM5IOvo/4AeMzt B+1vtc2XWrvYAc+40XuiSIirlB10XzJFqD8nqbPi3FF2JcxZVZZvKTQPp9q2R3km d8SmFCOZKWhUbCPmacAxQgb6Wo7AOt+V+s/+pIiuehP4weg4W2XMw5Stx5dD3WuJ jdvpS+yV7GH9tdQLrcuGVnNklFSfjmNbZ1lizAis64/nZRJWBCxdtlZ1jbQX0wdV lGMHLbjoPkwMYOsq0V3haE668tpRbDiGqRG8oYqo6Kx0EhrjZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxnQc/qm1t5ifAf1AduHQsa1gvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYTdjNzcwOGMtYThiOS0z YWI4LWJlODgtOTc1NDhiYmMzMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgXIWBBBjdz0Xbr7kPjk/iuhDqXKxJfILan6VlJ8d8rkUVYoJMFV73H 5qyFFlkNqhexonW1MoQz8QTynW6AJIeN9oiyMX9Ob9o5zEB0p190GYQp5yG+r8gc T3YSUa90ETuM8jAxaCO0P9ROLN1BHbHKPxU86VicWD9OqO5oZeSxI/N70XA9EJ2E pqKJGNaEyFyg0oEuYhI0HdElH3t2MKzLZjKbJU4ihaaLOFbzB9pMfS6KgRg1kONO tITSSwQtAIj+f9depbbAqWiqHDJN3lLe+ALDxIR4gtVSWfPnKAS2VqnCxawy/Xo2 fv+FaYaJKqJeXugy8AL3Yi/QSFArFHk= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:26 2025 by rpki-client