$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json) Hash identifier: I3nyDre8XuZaBL3AJRHF/n5a5jrwDpo8brShxweGkGM= Subject key identifier: 0C:AE:63:95:1C:8F:D7:73:AD:EF:C4:CF:93:3E:53:38:4D:C0:6F:33 Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F432858496A19AD569DDFAFD94F4E7B00 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 8075 IP address blocks: 137.70.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ad:56:9d:df:af:d9:4f:4e:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=e4b859ab-4fdb-43df-8721-5c6306d0c50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:0a:ac:9b:c0:d7:29:e9:98:4a:3e:72:1e: 1f:fd:9c:ac:7f:80:43:6b:f0:7b:9d:91:d8:05:2d: 50:c3:85:7f:b5:30:50:dd:ef:2d:f2:d7:08:f6:7a: 5c:b1:7d:71:2c:7c:f1:81:b4:41:67:37:54:99:2d: 83:6e:05:a4:88:0b:e3:74:38:e2:37:0f:e9:2a:0a: d2:33:e9:41:59:a1:2a:37:ad:ea:b8:37:d5:3f:ee: 97:dc:40:34:45:f3:5f:19:52:e3:c1:7f:71:53:16: f1:86:de:c5:d6:a6:73:c4:b7:2e:14:75:75:4c:b7: 38:41:e0:22:57:c6:67:4a:ca:48:22:a1:14:7d:e8: ba:c6:c9:a2:2f:b4:ff:da:08:47:1b:1b:fc:0e:fc: ee:95:aa:b7:1d:ad:b1:97:4e:b8:24:dc:0f:8c:40: 58:9e:e0:c5:f3:2c:cb:37:7a:35:a3:ff:bf:3e:6e: 16:0a:ed:00:73:35:fb:d0:09:31:87:e4:34:ff:52: d4:80:ef:39:a9:6b:41:35:f0:ab:6a:d5:5e:0d:91: 14:64:94:3f:d5:db:06:82:d5:2d:e1:0c:f7:80:56: 14:44:ef:c5:a6:45:0d:79:a5:f1:6b:d8:30:d3:03: 09:94:23:81:53:d9:c0:a7:99:71:6b:97:e8:69:e3: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AE:63:95:1C:8F:D7:73:AD:EF:C4:CF:93:3E:53:38:4D:C0:6F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:42:0e:73:d0:a1:55:0e:0f:cc:cb:d2:31:9c:d2:85:c7:41: f7:8f:6d:8b:d4:4b:f0:d0:0d:d2:d1:f9:20:c9:00:97:08:05: b1:56:7f:18:e6:20:dd:96:3c:ac:bc:5b:f9:34:42:b1:b3:6e: f8:17:a0:4f:cf:bb:42:43:2b:87:e0:d2:39:60:60:e5:57:15: a1:d9:f4:23:c0:1d:83:ba:ed:57:58:6b:9e:68:54:60:4e:48: 51:1d:bf:90:89:29:fa:be:3f:6a:5f:1c:96:c5:50:f0:3c:b2: 55:1e:85:78:b6:8b:b4:b0:7b:5e:3f:9a:2d:6b:9b:fb:e3:a1: 71:b2:c4:0a:43:90:71:42:0f:b1:67:65:d6:18:22:0a:73:9b: 6f:4e:bf:ab:9d:a0:fd:74:c3:e3:b9:4e:fb:81:f4:8d:fa:f3: 85:21:51:47:90:c9:fa:d0:bf:67:75:7c:c4:ec:f7:2a:e2:bd: 2b:20:6d:31:f5:ac:0a:71:f0:fe:09:69:63:ce:4c:e4:b1:0a: 54:ba:2c:00:91:29:bf:b7:3d:d8:a7:76:ec:5b:19:7d:09:49: 83:53:bd:6d:14:f4:a9:be:69:aa:08:cc:f8:d5:56:7a:1c:4b: 15:1e:32:ae:b7:fa:dd:bf:f2:70:c9:35:c8:86:7e:0f:0f:d9: 5e:a6:bc:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGa1Wnd+v2U9OewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZTRiODU5YWItNGZkYi00M2RmLTg3MjEtNWM2MzA2ZDBjNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplsKrJvA1ynpmEo+ch4f/Zysf4BDa/B7nZHY BS1Qw4V/tTBQ3e8t8tcI9npcsX1xLHzxgbRBZzdUmS2DbgWkiAvjdDjiNw/pKgrS M+lBWaEqN63quDfVP+6X3EA0RfNfGVLjwX9xUxbxht7F1qZzxLcuFHV1TLc4QeAi V8ZnSspIIqEUfei6xsmiL7T/2ghHGxv8Dvzulaq3Ha2xl064JNwPjEBYnuDF8yzL N3o1o/+/Pm4WCu0AczX70Akxh+Q0/1LUgO85qWtBNfCratVeDZEUZJQ/1dsGgtUt 4Qz3gFYURO/FpkUNeaXxa9gw0wMJlCOBU9nAp5lxa5foaePwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyuY5Ucj9dzre/Ez5M+UzhNwG8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvYTdiOTkyNGEtZjlhMy0z MDgzLWFhNmYtMzhkNjg1NWFjYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRCDnPQoVUOD8zL0jGc0oXHQfePbYvUS/DQDdLR+SDJAJcIBbFWfxjm IN2WPKy8W/k0QrGzbvgXoE/Pu0JDK4fg0jlgYOVXFaHZ9CPAHYO67VdYa55oVGBO SFEdv5CJKfq+P2pfHJbFUPA8slUehXi2i7Swe14/mi1rm/vjoXGyxApDkHFCD7Fn ZdYYIgpzm29Ov6udoP10w+O5TvuB9I3684UhUUeQyfrQv2d1fMTs9yrivSsgbTH1 rApx8P4JaWPOTOSxClS6LACRKb+3PdinduxbGX0JSYNTvW0U9Km+aaoIzPjVVnoc SxUeMq63+t2/8nDJNciGfg8P2V6mvHU= -----END CERTIFICATE-----Generated at Wed Apr 30 03:47:54 2025 by rpki-client