$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa File: 5e637b51-80c2-35fa-ad18-b5f148be60c5.roa (raw, json) Hash identifier: yzuZfZywLkUM32E8GwSL5MWa4OfwUHRs5grYU1XaKjg= Subject key identifier: 1C:83:2A:61:0F:2A:30:2E:21:36:B3:D2:03:BC:81:64:0E:16:8D:DB Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584953C41D8A3A37B70BB3BA9600 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 2152 IP address blocks: 137.164.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1d:8a:3a:37:b7:0b:b3:ba:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=065863e4-1e97-44ab-b4f0-80b16b420f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:c9:7b:4a:ba:4a:6e:95:d8:65:29:30:f3: 7b:62:64:50:41:b9:93:6b:09:66:66:81:a2:2d:cc: 60:4e:30:be:f8:49:99:37:a2:8e:32:2c:67:c5:c3: 71:00:3e:af:34:73:8b:63:c3:69:5a:df:84:35:b5: 6f:9f:bd:e3:7e:56:c2:0e:c5:4b:4d:ee:dc:91:1d: 5f:f8:e3:d5:f9:0d:19:ed:b7:ab:f9:f9:fe:a2:b3: 20:07:1a:a1:2c:6f:1a:02:27:2d:52:fd:97:68:52: ab:a1:53:49:25:b8:24:5b:94:ad:b7:61:4f:17:3a: 2e:2c:19:5c:b3:57:d5:ca:40:c6:07:75:c3:a8:95: 38:76:71:f5:14:98:f7:c4:7b:73:b4:a9:4b:77:07: 51:a5:b9:4b:6c:d9:34:35:7e:ca:ea:89:2f:3c:a6: 4e:67:59:a9:7b:8a:4f:c6:9c:70:4c:05:af:d0:5b: 76:03:1c:cb:21:4b:4e:38:34:5a:a2:b6:3f:6a:20: ae:0c:db:f5:f5:2b:aa:21:bb:b1:7f:52:07:19:69: 2e:23:34:70:07:57:31:9d:9c:b2:17:4a:2f:90:a5: 98:1c:55:ca:3c:f7:8f:5f:b1:61:f9:bd:e0:6c:11: 8d:40:69:3b:7e:9a:89:36:cb:a9:3e:ab:c3:ca:dc: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:83:2A:61:0F:2A:30:2E:21:36:B3:D2:03:BC:81:64:0E:16:8D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:01:29:0a:4c:55:a9:c4:92:30:a8:21:df:de:b7:9e:b6:a0: 7e:68:58:9f:47:a0:ab:38:a3:47:0a:a5:22:10:1f:cf:03:13: 41:0c:e1:10:29:e6:a4:9b:6a:5c:13:f3:3a:3f:95:d9:48:b7: 63:a1:44:03:ab:2f:97:b7:35:32:99:85:a2:0a:97:d3:58:5a: a9:00:ed:6a:18:78:2c:d4:aa:5f:67:5e:35:36:53:eb:ae:e9: b7:d4:65:2b:8a:9b:4d:7d:16:c6:40:72:9b:3b:45:dd:a4:7c: 72:9b:29:a2:48:f3:e9:9a:49:d3:80:ed:1b:1f:26:bd:1a:26: 77:bb:f6:f0:c7:54:ea:c3:f6:e5:fd:f7:e5:39:6b:17:76:b7: fa:24:31:d6:aa:17:55:4a:b4:98:8f:a7:2f:78:c8:f3:cf:24: 8a:66:a4:9a:f0:c4:de:be:d8:6d:fb:66:ac:63:dc:1e:dd:fb: 6a:ba:5f:a7:af:96:d4:5f:bc:f9:7d:b4:84:84:c1:89:e6:eb: bf:1b:63:7c:fa:2a:bf:ca:b6:db:09:0a:bd:09:c4:8d:61:3e: a9:ea:10:8b:79:6c:1b:d9:81:b3:3e:b1:ae:f7:e6:5f:99:a3: 26:b1:22:be:01:4c:93:04:e1:b0:76:98:cd:38:bb:51:eb:a0: be:12:3d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB2KOje3C7O6lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDY1ODYzZTQtMWU5Ny00NGFiLWI0ZjAtODBiMTZiNDIwZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvXJe0q6Sm6V2GUpMPN7YmRQQbmTawlmZoGi LcxgTjC++EmZN6KOMixnxcNxAD6vNHOLY8NpWt+ENbVvn73jflbCDsVLTe7ckR1f +OPV+Q0Z7ber+fn+orMgBxqhLG8aAictUv2XaFKroVNJJbgkW5Stt2FPFzouLBlc s1fVykDGB3XDqJU4dnH1FJj3xHtztKlLdwdRpblLbNk0NX7K6okvPKZOZ1mpe4pP xpxwTAWv0Ft2AxzLIUtOODRaorY/aiCuDNv19SuqIbuxf1IHGWkuIzRwB1cxnZyy F0ovkKWYHFXKPPePX7Fh+b3gbBGNQGk7fpqJNsupPqvDytxrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByDKmEPKjAuITaz0gO8gWQOFo3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNWU2MzdiNTEtODBjMi0z NWZhLWFkMTgtYjVmMTQ4YmU2MGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEBKQpMVanEkjCoId/et562oH5oWJ9HoKs4o0cKpSIQH88DE0EM4RAp 5qSbalwT8zo/ldlIt2OhRAOrL5e3NTKZhaIKl9NYWqkA7WoYeCzUql9nXjU2U+uu 6bfUZSuKm019FsZAcps7Rd2kfHKbKaJI8+maSdOA7RsfJr0aJne79vDHVOrD9uX9 9+U5axd2t/okMdaqF1VKtJiPpy94yPPPJIpmpJrwxN6+2G37Zqxj3B7d+2q6X6ev ltRfvPl9tISEwYnm678bY3z6Kr/KttsJCr0JxI1hPqnqEIt5bBvZgbM+sa735l+Z oyaxIr4BTJME4bB2mM04u1HroL4SPec= -----END CERTIFICATE-----Generated at Wed Apr 30 03:35:24 2025 by rpki-client