$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa File: 0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa (raw, json) Hash identifier: xMb1KQLDszajSI/sjqmT8uJGVTiLziHh9QcTVvwqPp0= Subject key identifier: DE:5D:C0:34:EF:DE:49:25:4E:35:F9:16:85:24:A6:16:53:A7:07:39 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A331AF1FB6479FA61E667E880 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 2153 IP address blocks: 137.164.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f1:fb:64:79:fa:61:e6:67:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=2b733396-b964-45e5-9e85-5f1e88b7d936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:a2:a1:a4:d0:3a:75:e0:e5:9b:6e:68:46: 2d:5b:d6:37:71:1b:24:fb:f2:03:6d:d6:55:e0:86: 96:db:4f:88:ac:80:21:6c:33:13:4f:73:27:ba:42: c1:3b:09:a3:d3:49:51:ff:23:0f:32:b1:7d:2c:b2: 04:89:c2:b0:b6:24:ed:14:7d:a0:dd:a0:d5:84:c2: ed:56:b8:6c:77:a3:80:7f:a4:a5:9e:71:9c:66:3f: 5b:4a:95:6c:7e:13:d7:d8:52:de:a0:71:e0:d1:df: ab:c6:76:8d:62:d3:fa:78:25:66:ef:38:c1:42:f2: 7e:4b:68:eb:7e:36:d2:ef:ff:57:36:50:94:0f:a8: 48:e8:0b:a7:86:79:92:56:e0:80:aa:97:a1:3d:f0: ff:31:7d:6e:87:9e:9b:b0:cc:d3:52:33:16:c3:11: 67:05:0d:96:7f:3b:93:d1:67:b2:96:07:4e:8f:2f: 1e:99:17:1d:d9:6a:3b:ce:68:8f:7b:33:93:cd:42: 5f:c4:60:3b:fc:ca:40:93:3f:ee:52:34:0c:ab:43: e7:b0:70:ff:c8:1e:b6:e1:d8:03:89:97:e5:74:93: e0:6c:df:d1:ff:15:e2:87:ca:ba:be:43:67:dc:f4: 09:a1:49:09:0a:f7:9e:f2:82:44:1d:46:f0:8d:be: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5D:C0:34:EF:DE:49:25:4E:35:F9:16:85:24:A6:16:53:A7:07:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/0c924026-12d1-3e79-a3ce-e51f71a3aeb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a9:d3:96:84:28:42:51:77:eb:b0:57:a4:36:70:25:ba:99: 78:54:34:74:bb:3f:8e:2c:5d:31:44:23:b1:f1:f0:53:b4:8c: 82:5f:8b:30:34:43:25:31:ee:ea:99:c3:cd:72:93:b7:98:cc: 8d:a3:8a:01:6c:d2:3b:55:d9:b5:8e:e7:aa:97:5d:21:98:81: 1f:fd:01:21:ce:af:d9:b5:bb:cf:df:0d:0d:fe:da:6c:6d:91: 47:6c:e3:e7:f1:25:05:e9:73:d6:21:55:84:e0:2d:fc:73:b4: 4e:ad:19:16:86:cb:97:17:2f:69:d6:a0:68:15:e7:f6:4f:2a: 5a:78:bf:40:97:3f:8b:4e:87:8b:7f:86:23:3a:ef:64:2c:a5: 8e:42:0c:3e:0e:d7:3c:ba:d5:94:75:9d:32:bf:3e:93:a6:f5: bb:11:38:60:bb:57:ed:7b:85:0c:d7:ae:0d:c3:94:96:5c:66: ef:0a:47:35:8f:51:e8:bd:98:fa:86:db:bb:a5:78:78:8f:27: 78:09:31:a2:e4:57:e9:0d:9e:44:76:c1:94:6d:21:f5:3a:43: b8:46:30:0d:93:25:3a:81:bc:4e:ef:fd:00:e0:14:00:6e:67: e6:42:82:53:9c:4b:04:c6:1c:84:32:f8:4b:57:7a:52:7b:e3: 62:73:1d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvH7ZHn6YeZn6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MmI3MzMzOTYtYjk2NC00NWU1LTllODUtNWYxZTg4YjdkOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZSioaTQOnXg5ZtuaEYtW9Y3cRsk+/IDbdZV 4IaW20+IrIAhbDMTT3MnukLBOwmj00lR/yMPMrF9LLIEicKwtiTtFH2g3aDVhMLt Vrhsd6OAf6SlnnGcZj9bSpVsfhPX2FLeoHHg0d+rxnaNYtP6eCVm7zjBQvJ+S2jr fjbS7/9XNlCUD6hI6AunhnmSVuCAqpehPfD/MX1uh56bsMzTUjMWwxFnBQ2WfzuT 0WeylgdOjy8emRcd2Wo7zmiPezOTzUJfxGA7/MpAkz/uUjQMq0PnsHD/yB624dgD iZfldJPgbN/R/xXih8q6vkNn3PQJoUkJCvee8oJEHUbwjb7xtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5dwDTv3kklTjX5FoUkphZTpwc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMGM5MjQwMjYtMTJkMS0z ZTc5LWEzY2UtZTUxZjcxYTNhZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6p05aEKEJRd+uwV6Q2cCW6mXhUNHS7P44sXTFEI7Hx8FO0jIJfizA0 QyUx7uqZw81yk7eYzI2jigFs0jtV2bWO56qXXSGYgR/9ASHOr9m1u8/fDQ3+2mxt kUds4+fxJQXpc9YhVYTgLfxztE6tGRaGy5cXL2nWoGgV5/ZPKlp4v0CXP4tOh4t/ hiM672QspY5CDD4O1zy61ZR1nTK/PpOm9bsROGC7V+17hQzXrg3DlJZcZu8KRzWP Uei9mPqG27uleHiPJ3gJMaLkV+kNnkR2wZRtIfU6Q7hGMA2TJTqBvE7v/QDgFABu Z+ZCglOcSwTGHIQy+EtXelJ742JzHSE= -----END CERTIFICATE-----Generated at Mon Jun 16 05:09:15 2025 by rpki-client