$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa File: 3337e7f1-99bd-35db-a708-aa0072ca0d31.roa (raw, json) Hash identifier: 15mIZB6DWu37ELJBZas24J+AmEfFjg+lPUYpqMXmIwo= Subject key identifier: 86:BC:ED:16:B1:72:71:18:6A:6A:15:3B:88:F4:3D:CF:82:CF:14:3C Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A82AB4AF0D39D79188EA7A5C0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 2153 IP address blocks: 137.164.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4a:f0:d3:9d:79:18:8e:a7:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=10dd61ae-9c13-4f8a-8509-e3aa98747df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:44:cb:2c:ee:96:f8:9e:c9:8b:58:0b:49: 0c:e6:42:a7:c7:67:67:33:7d:92:bf:6e:aa:c9:39: c6:59:9e:c7:c2:4a:d1:37:db:d2:95:6c:ea:27:04: c2:21:67:b9:6b:73:7b:40:ad:94:86:9f:5c:62:68: e3:4e:47:21:ef:cb:23:f9:de:74:89:1d:73:af:ad: 6b:aa:6e:60:8a:76:6c:b5:29:13:ad:6e:58:fa:12: 2f:7f:f0:98:73:e8:1a:b4:b9:e5:f1:ae:97:0b:5c: 0d:b0:20:66:c8:b5:28:fd:5e:46:c6:b7:15:7b:09: a2:d7:ba:80:eb:74:ff:94:33:58:fb:34:f7:fc:71: 0a:f0:d2:7d:ef:30:ee:c9:02:f3:5a:c8:ad:03:fe: f7:b4:e3:5c:a6:81:4d:31:89:c8:fa:cc:e1:62:0b: 59:2e:ad:f2:29:a8:a8:d7:ea:fc:23:a7:58:f4:25: 6f:c3:40:e1:95:44:de:a3:dd:ce:b0:63:a2:aa:97: e1:4e:42:55:a0:51:8c:95:06:f6:bd:95:9c:48:55: a1:d4:35:b9:ae:78:7f:49:f9:5e:67:64:24:c4:25: 8b:db:7f:9a:ed:88:ed:9c:76:47:7b:74:f3:6d:19: ae:56:7f:6b:f7:c7:49:00:9b:ba:38:21:2a:97:c4: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BC:ED:16:B1:72:71:18:6A:6A:15:3B:88:F4:3D:CF:82:CF:14:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/3337e7f1-99bd-35db-a708-aa0072ca0d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4a:ec:49:19:4f:c4:6c:dc:b3:16:01:1b:16:7e:da:a5:27: 3c:b2:a1:a8:ec:87:a8:2d:02:22:d7:87:8f:92:3a:d4:66:01: 92:53:ed:eb:5f:f5:5d:e8:47:72:bb:b9:b6:a9:14:d2:71:e0: bd:88:0b:70:80:b5:c4:5e:b9:c3:5b:42:05:c6:f0:25:a7:bc: f0:9f:bc:28:56:9c:a1:e6:24:8d:5d:ec:3c:d2:59:3c:db:bc: b1:06:88:1e:82:38:9e:fc:7c:50:2c:4e:c1:94:3e:8e:a1:97: 7f:1d:f2:55:3d:19:c8:e9:0b:30:08:60:47:b5:b3:ea:3b:2b: cb:25:7a:d9:00:4d:69:5d:1b:d0:60:ef:88:5a:c5:e9:52:c4: 4d:b0:01:a5:ed:82:68:83:f5:5b:a5:32:09:10:23:b1:a7:79: dc:d3:ba:f3:f1:0a:66:25:fc:11:57:ae:e4:d0:55:cf:52:fe: 7a:f7:b0:14:ac:6b:f3:96:e8:e9:d8:5e:7f:af:5b:ac:b3:d2: ad:b0:3f:57:57:3e:8f:0c:8d:c7:20:ff:f9:92:e0:2a:ca:7e: 1e:3b:0b:7a:d1:7b:96:b2:da:fb:19:9f:8b:28:15:50:ff:cd: 6f:f7:88:8a:ab:b8:a4:fd:84:9c:54:ff:cc:06:0e:cd:0f:8d: 92:93:9f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0rw0515GI6npcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk MTBkZDYxYWUtOWMxMy00ZjhhLTg1MDktZTNhYTk4NzQ3ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLxEyyzulvieyYtYC0kM5kKnx2dnM32Sv26q yTnGWZ7HwkrRN9vSlWzqJwTCIWe5a3N7QK2Uhp9cYmjjTkch78sj+d50iR1zr61r qm5ginZstSkTrW5Y+hIvf/CYc+gatLnl8a6XC1wNsCBmyLUo/V5GxrcVewmi17qA 63T/lDNY+zT3/HEK8NJ97zDuyQLzWsitA/73tONcpoFNMYnI+szhYgtZLq3yKaio 1+r8I6dY9CVvw0DhlUTeo93OsGOiqpfhTkJVoFGMlQb2vZWcSFWh1DW5rnh/Sfle Z2QkxCWL23+a7YjtnHZHe3TzbRmuVn9r98dJAJu6OCEql8TisQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa87RaxcnEYamoVO4j0Pc+CzxQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMzMzN2U3ZjEtOTliZC0z NWRiLWE3MDgtYWEwMDcyY2EwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExK7EkZT8Rs3LMWARsWftqlJzyyoajsh6gtAiLXh4+SOtRmAZJT7etf 9V3oR3K7ubapFNJx4L2IC3CAtcReucNbQgXG8CWnvPCfvChWnKHmJI1d7DzSWTzb vLEGiB6COJ78fFAsTsGUPo6hl38d8lU9GcjpCzAIYEe1s+o7K8sletkATWldG9Bg 74haxelSxE2wAaXtgmiD9VulMgkQI7GnedzTuvPxCmYl/BFXruTQVc9S/nr3sBSs a/OW6OnYXn+vW6yz0q2wP1dXPo8Mjccg//mS4CrKfh47C3rRe5ay2vsZn4soFVD/ zW/3iIqruKT9hJxU/8wGDs0PjZKTn3Q= -----END CERTIFICATE-----Generated at Thu Aug 7 14:45:45 2025 by rpki-client