$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa File: 41e19a7e-8f36-383d-904b-62952b216c8e.roa (raw, json) Hash identifier: brHjjiwpEqLKqcru3zLuDSDlmrCpI5qhZnF+OGX14zk= Subject key identifier: B6:41:D3:D7:E4:CA:BE:49:8D:E4:0D:64:9D:8F:BB:BF:16:6A:4E:E4 Certificate issuer: /CN=ae9833c8-8b19-48ba-8b98-e74734094959 Certificate serial: 010D0C9F432858499294A90D797D20D721C3DC80 Authority key identifier: A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 1252 IP address blocks: 137.197.0.0/16 maxlen: 24 192.94.102.0/24 maxlen: 24 192.94.103.0/24 maxlen: 24 192.94.104.0/24 maxlen: 24 192.94.105.0/24 maxlen: 24 192.94.106.0/24 maxlen: 24 192.94.107.0/24 maxlen: 24 192.94.108.0/24 maxlen: 24 192.198.32.0/20 maxlen: 24 192.198.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a9:0d:79:7d:20:d7:21:c3:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9833c8-8b19-48ba-8b98-e74734094959 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=a72835ab-269a-4138-8642-f13157215ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:18:06:d4:3c:7b:66:2a:9b:f5:91:b3:1e:1b: 5d:5f:9b:25:b1:fd:94:df:d3:d3:a8:74:37:8b:bd: aa:33:97:79:88:de:27:77:54:32:e3:70:da:da:f6: bc:74:4a:7e:a7:2b:df:36:25:cf:35:37:a8:27:cf: d5:3a:61:56:6a:e4:39:0c:6d:95:80:95:f5:1c:eb: c9:47:14:9f:91:5b:e2:d9:d6:96:b4:c1:b8:ce:94: ce:cc:71:6c:db:b7:98:93:9f:64:32:65:99:3b:ec: 3b:6c:13:00:60:09:51:67:ef:be:db:dc:da:3e:cc: 9f:30:09:94:20:05:1d:23:97:f7:fc:51:f7:8a:84: b3:61:cc:cf:d6:f8:bc:40:52:e1:3a:8f:10:59:4e: d6:2c:66:f0:32:12:64:c8:4c:b9:b3:02:35:33:48: f4:65:8a:a8:6e:01:fb:ef:d9:8e:5a:ff:c5:54:b1: b5:92:30:91:6d:85:60:64:13:d5:be:e9:86:19:f9: 21:c5:7e:ee:a3:61:a3:8f:ef:96:19:3c:6c:05:87: 7a:ed:83:1d:fa:15:7a:54:a1:08:b3:c5:26:47:60: 20:a2:6c:b7:1e:ed:31:ce:d8:71:fb:0b:7f:ec:37: 01:96:ad:dc:06:6d:58:58:d0:fd:dd:dd:9e:6d:b4: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:41:D3:D7:E4:CA:BE:49:8D:E4:0D:64:9D:8F:BB:BF:16:6A:4E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl X509v3 Authority Key Identifier: keyid:A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer sbgp-ipAddrBlock: critical IPv4: 137.197.0.0/16 192.94.102.0-192.94.108.255 192.198.32.0-192.198.55.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c4:c9:37:c7:70:d3:af:6b:52:22:c2:c9:4c:e5:91:7b:1a: 51:91:b9:2a:59:d0:00:a8:d4:6e:61:d6:95:ea:08:43:c8:a0: 82:8b:42:20:e4:5a:16:64:f7:16:1b:0a:f4:b8:ca:5c:96:5f: 86:96:5d:94:3e:b1:f4:3e:be:e0:39:31:7f:b6:e4:6e:53:1e: 52:f0:86:12:be:10:5c:ef:27:4f:d3:c6:55:b4:72:83:be:b4: 09:89:27:a1:fc:89:90:2d:a3:4e:25:04:48:bf:59:36:3b:74: 6f:65:6a:eb:7c:e7:75:47:da:75:b9:70:a0:85:53:59:df:a8: 4a:4e:c3:50:19:9d:3b:f1:b7:c7:ae:51:e8:60:9b:72:bf:40: 1d:18:c5:80:b1:a0:99:f5:b1:58:39:51:8a:26:ee:cd:b7:fb: a7:6d:0b:ba:d9:45:a7:b1:91:ea:26:dd:3c:36:07:93:85:1c: b3:3e:ab:01:ba:da:1f:5c:82:ba:b0:bd:01:67:7e:4d:15:47: cd:c2:e6:0b:8e:ee:7d:2c:12:56:51:be:d6:45:80:55:19:a0: 4e:c6:c1:75:bd:9d:1c:fc:b3:3c:5e:a0:9b:3a:05:e9:be:dc: 39:50:7e:46:3b:1c:0a:e2:e3:ed:b5:c0:7c:ff:33:cf:bc:f0: 8f:ea:b7:35 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEmSlKkNeX0g1yHD3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU5ODMzYzgtOGIxOS00OGJhLThiOTgtZTc0NzM0MDk0 OTU5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk YTcyODM1YWItMjY5YS00MTM4LTg2NDItZjEzMTU3MjE1YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhgG1Dx7Ziqb9ZGzHhtdX5slsf2U39PTqHQ3 i72qM5d5iN4nd1Qy43Da2va8dEp+pyvfNiXPNTeoJ8/VOmFWauQ5DG2VgJX1HOvJ RxSfkVvi2daWtMG4zpTOzHFs27eYk59kMmWZO+w7bBMAYAlRZ+++29zaPsyfMAmU IAUdI5f3/FH3ioSzYczP1vi8QFLhOo8QWU7WLGbwMhJkyEy5swI1M0j0ZYqobgH7 79mOWv/FVLG1kjCRbYVgZBPVvumGGfkhxX7uo2Gjj++WGTxsBYd67YMd+hV6VKEI s8UmR2Agomy3Hu0xzthx+wt/7DcBlq3cBm1YWND93d2ebbSK8QIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFLZB09fkyr5JjeQNZJ2Pu78Wak7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4 MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3MzQwOTQ5NTkvNDFlMTlhN2UtOGYzNi0z ODNkLTkwNGItNjI5NTJiMjE2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU5ODMzYzgtOGIxOS00OGJhLThi OTgtZTc0NzM0MDk0OTU5L2FlOTgzM2M4LThiMTktNDhiYS04Yjk4LWU3NDczNDA5 NDk1OS5jcmwwHwYDVR0jBBgwFoAUqeNiGHAp+7ec17x8Iv7DVcdDUBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3 MzQwOTQ5NTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAicUwDAME AcBeZgMEAMBebDAMAwQFwMYgAwQDwMYwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH3EyTfHcNOva1IiwslM 5ZF7GlGRuSpZ0ACo1G5h1pXqCEPIoIKLQiDkWhZk9xYbCvS4ylyWX4aWXZQ+sfQ+ vuA5MX+25G5THlLwhhK+EFzvJ0/TxlW0coO+tAmJJ6H8iZAto04lBEi/WTY7dG9l aut853VH2nW5cKCFU1nfqEpOw1AZnTvxt8euUehgm3K/QB0YxYCxoJn1sVg5UYom 7s23+6dtC7rZRaexkeom3Tw2B5OFHLM+qwG62h9cgrqwvQFnfk0VR83C5guO7n0s ElZRvtZFgFUZoE7GwXW9nRz8szxeoJs6Bem+3DlQfkY7HAri4+21wHz/M8+88I/q tzU= -----END CERTIFICATE-----Generated at Wed Apr 30 03:05:26 2025 by rpki-client