$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa File: aea63acb-037d-3e18-9b17-e44e4031484e.roa (raw, json) Hash identifier: lidPu5fvCmvuTbkH1Kws3G5UQaRsVAHjzBPG8833DYI= Subject key identifier: 66:9B:6A:D6:11:FE:19:7D:9B:F3:30:F3:F7:28:9E:6E:07:1E:D5:CC Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F43285849C904E96EE00DCB8DED947E00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 2152 IP address blocks: 137.164.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:e9:6e:e0:0d:cb:8d:ed:94:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=8d664800-ad61-4ea7-805a-e606e80fe93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:75:21:b4:11:0a:11:ec:05:1d:67:8c:9a: 44:73:39:4b:dd:4a:b8:c4:80:9e:ca:6c:49:b6:72: 35:ce:bf:09:a1:ea:30:b1:ca:38:76:67:53:20:75: 90:a3:0c:0c:22:a4:f6:f2:8f:3f:da:0c:a7:05:ff: 43:20:c2:68:90:49:69:f3:3b:2d:20:d0:4e:fa:f3: b0:04:7c:fc:1e:4d:a7:67:b7:24:b7:c8:f2:3a:da: 45:1e:55:fd:9b:dd:01:29:3a:88:fe:d3:5f:02:ca: 0a:67:1b:8a:d5:bd:a0:2d:e1:5a:7d:16:c6:78:ff: 2a:9f:f0:43:87:5b:3e:2c:8e:be:a5:8f:2a:54:d9: 9b:ee:72:8f:55:c2:b7:5d:a4:6c:e5:da:91:5b:cf: 78:4b:7e:21:a4:63:a3:e6:58:d3:53:be:21:68:6b: b3:33:72:4a:c3:32:64:c3:5f:a3:16:82:7d:be:78: fe:ea:7a:45:95:86:72:04:9f:68:e9:06:75:45:14: 0f:4a:b8:b6:85:24:f6:1c:01:aa:26:89:fc:b4:71: 36:ca:2e:12:c8:c9:16:c6:52:db:44:a3:f0:3e:d5: f5:62:cb:c5:cd:da:a9:11:0c:cb:b6:b7:b5:0e:e6: 03:ba:c7:f1:d5:e9:a9:fb:2c:ad:c5:99:b4:3e:3e: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:6A:D6:11:FE:19:7D:9B:F3:30:F3:F7:28:9E:6E:07:1E:D5:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/aea63acb-037d-3e18-9b17-e44e4031484e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4d:6b:db:aa:e7:12:6b:ae:54:11:5c:ed:ff:6e:ee:6b:a8: 6b:0a:ef:aa:a5:4e:d3:3a:8d:36:d2:f0:9b:cd:14:fa:8a:2a: a7:41:68:ef:3f:36:78:73:47:c5:4b:82:0c:3c:07:7d:c5:c4: d8:c2:9f:79:bd:97:6b:6c:16:11:b4:48:53:19:b9:41:d1:99: b4:e6:6c:47:bd:53:a4:3b:0b:d8:fe:72:dd:7e:03:bd:c5:d1: 43:9a:55:4a:3c:ef:71:e1:db:a7:f7:97:65:8f:6f:f0:b9:bd: 59:7e:71:f6:2d:2d:b4:3e:d1:c2:60:b3:02:13:46:5c:c5:ca: 0d:19:01:34:38:8b:11:d1:d7:29:b7:01:b9:74:08:1f:a3:7b: 4a:51:dc:56:40:cc:36:02:d7:e5:43:53:92:0b:54:09:42:53: 2d:9b:ef:61:c0:84:22:ce:7b:04:5c:6f:d5:7d:be:13:3b:10: 8e:28:00:19:1f:b8:f7:8a:5b:c6:44:28:61:10:c1:78:72:ba: a5:5c:a5:84:68:28:b0:af:52:b0:5e:cd:47:f3:05:cd:25:bb: 73:8f:58:92:5f:44:96:d7:2e:9a:c6:06:dd:b7:6e:22:91:e5: d4:5a:74:c4:6b:04:f7:b8:22:c6:11:75:04:f4:53:1d:68:9d: be:1d:97:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBOlu4A3Lje2UfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk OGQ2NjQ4MDAtYWQ2MS00ZWE3LTgwNWEtZTYwNmU4MGZlOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2R1IbQRChHsBR1njJpEczlL3Uq4xICeymxJ tnI1zr8Joeowsco4dmdTIHWQowwMIqT28o8/2gynBf9DIMJokElp8zstINBO+vOw BHz8Hk2nZ7ckt8jyOtpFHlX9m90BKTqI/tNfAsoKZxuK1b2gLeFafRbGeP8qn/BD h1s+LI6+pY8qVNmb7nKPVcK3XaRs5dqRW894S34hpGOj5ljTU74haGuzM3JKwzJk w1+jFoJ9vnj+6npFlYZyBJ9o6QZ1RRQPSri2hST2HAGqJon8tHE2yi4SyMkWxlLb RKPwPtX1YsvFzdqpEQzLtre1DuYDusfx1emp+yytxZm0Pj4mzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGabatYR/hl9m/Mw8/conm4HHtXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYWVhNjNhY2ItMDM3ZC0z ZTE4LTliMTctZTQ0ZTQwMzE0ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9Na9uq5xJrrlQRXO3/bu5rqGsK76qlTtM6jTbS8JvNFPqKKqdBaO8/ NnhzR8VLggw8B33FxNjCn3m9l2tsFhG0SFMZuUHRmbTmbEe9U6Q7C9j+ct1+A73F 0UOaVUo873Hh26f3l2WPb/C5vVl+cfYtLbQ+0cJgswITRlzFyg0ZATQ4ixHR1ym3 Abl0CB+je0pR3FZAzDYC1+VDU5ILVAlCUy2b72HAhCLOewRcb9V9vhM7EI4oABkf uPeKW8ZEKGEQwXhyuqVcpYRoKLCvUrBezUfzBc0lu3OPWJJfRJbXLprGBt23biKR 5dRadMRrBPe4IsYRdQT0Ux1onb4dl/Y= -----END CERTIFICATE-----Generated at Sun Jun 15 16:23:56 2025 by rpki-client