$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa File: e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa (raw, json) Hash identifier: piYqsZi7Qs6csa/74jHP0jgNLbZjGO7ZQdOBk0ukyzQ= Subject key identifier: 29:19:83:68:03:ED:2D:24:80:D3:EE:90:06:0C:7C:06:7F:66:1F:ED Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A331AFABD7C095301FDEA6DA0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 2152 IP address blocks: 137.164.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:fa:bd:7c:09:53:01:fd:ea:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=3b1dcd7b-b08e-45c6-ab14-99d202c5ab6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:3b:29:90:b3:d2:46:ad:bb:98:7b:d6:ca: a2:5a:10:3e:5b:68:63:9f:74:ab:99:cb:2b:2b:2d: 8a:1e:42:b9:ba:0a:84:62:e5:10:7d:83:08:ca:6e: f7:2a:ce:c9:d1:4e:03:d7:c6:5d:7a:eb:2e:87:2e: ad:96:3f:20:cc:bb:d4:be:97:86:6d:b4:18:ee:a4: df:55:06:4e:68:e9:5d:95:fe:4f:54:2e:54:3a:7c: 77:20:73:ce:5a:2e:47:32:ec:29:b6:8d:8e:76:50: 65:d2:64:79:af:12:1b:21:72:ae:5e:b2:bf:24:89: 4f:a0:0b:c7:6c:80:76:01:56:ca:2e:7e:43:95:db: 32:24:a3:3f:5c:16:34:14:7d:51:24:1a:1b:ba:16: 2d:bb:30:65:9b:f2:ee:99:32:c5:3c:07:d2:47:fe: 63:af:f9:8c:6d:51:f6:b9:07:4f:1f:d0:fe:a8:87: f4:43:e4:40:49:49:2e:fd:c0:48:14:6b:04:f0:8a: e9:7f:79:94:ae:65:fd:db:43:30:9b:25:4c:1f:bc: d8:84:0b:94:7a:14:1a:ad:40:00:e3:f0:c9:d8:87: 6d:b8:7e:a1:d5:49:d2:3a:32:ce:b7:34:bd:c8:47: 48:25:92:bf:bc:8b:0a:a1:ab:bf:22:ff:8a:56:d6: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:83:68:03:ED:2D:24:80:D3:EE:90:06:0C:7C:06:7F:66:1F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f4:82:3e:d1:53:dd:4b:71:77:02:ea:de:8d:5c:84:c6:fa: eb:cc:a1:e3:ef:e4:ba:dd:4f:a2:c7:a0:b6:67:fe:78:74:73: 13:43:b5:94:d3:98:a7:4b:21:6d:ac:7a:c3:f7:ea:3e:0e:18: 37:99:19:15:fd:cf:9e:5a:ff:fc:a7:2b:47:91:92:e0:e4:05: 2f:4b:ec:33:4d:5e:5e:76:bc:a7:c7:68:11:04:79:3d:f5:ee: 6a:b6:23:53:c1:aa:8e:2a:ee:71:9b:aa:23:f2:7a:8e:ee:0c: 6a:53:c8:fb:2f:f3:31:f8:ef:4c:5d:08:b3:b4:35:77:12:c1: 78:ac:0b:fb:b9:1f:89:59:12:ae:b2:ea:e2:88:18:c2:a2:f1: c9:43:e6:1d:55:d4:61:4c:76:9b:f1:e7:f0:be:b9:99:c2:3d: c3:97:1d:81:76:52:28:4d:ec:1f:bb:f3:fa:d3:f8:ac:8d:77: ea:71:c9:85:60:f8:32:d8:b5:ee:e1:37:3a:c4:39:63:7c:7a: fd:8f:d9:89:47:91:f0:49:0f:8c:65:82:9d:41:22:25:69:12: f5:23:e8:47:b3:52:e2:8b:8e:bd:c1:b1:f2:79:61:0b:12:ac: 95:a9:50:31:8f:58:ad:1e:f2:c2:03:a0:e8:5a:7a:46:6c:97: 1e:62:b0:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvq9fAlTAf3qbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk M2IxZGNkN2ItYjA4ZS00NWM2LWFiMTQtOTlkMjAyYzVhYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+c7KZCz0katu5h71sqiWhA+W2hjn3Srmcsr Ky2KHkK5ugqEYuUQfYMIym73Ks7J0U4D18Zdeusuhy6tlj8gzLvUvpeGbbQY7qTf VQZOaOldlf5PVC5UOnx3IHPOWi5HMuwpto2OdlBl0mR5rxIbIXKuXrK/JIlPoAvH bIB2AVbKLn5DldsyJKM/XBY0FH1RJBobuhYtuzBlm/LumTLFPAfSR/5jr/mMbVH2 uQdPH9D+qIf0Q+RASUku/cBIFGsE8Irpf3mUrmX920MwmyVMH7zYhAuUehQarUAA 4/DJ2IdtuH6h1UnSOjLOtzS9yEdIJZK/vIsKoau/Iv+KVtZY3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkZg2gD7S0kgNPukAYMfAZ/Zh/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTVlNTIyMzEtMWNlZC0z NTZkLWI3NWUtY2EyYmFhYWY5ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALz0gj7RU91LcXcC6t6NXITG+uvMoePv5LrdT6LHoLZn/nh0cxNDtZTT mKdLIW2sesP36j4OGDeZGRX9z55a//ynK0eRkuDkBS9L7DNNXl52vKfHaBEEeT31 7mq2I1PBqo4q7nGbqiPyeo7uDGpTyPsv8zH470xdCLO0NXcSwXisC/u5H4lZEq6y 6uKIGMKi8clD5h1V1GFMdpvx5/C+uZnCPcOXHYF2UihN7B+78/rT+KyNd+pxyYVg +DLYte7hNzrEOWN8ev2P2YlHkfBJD4xlgp1BIiVpEvUj6EezUuKLjr3BsfJ5YQsS rJWpUDGPWK0e8sIDoOhaekZslx5isBY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:28:25 2025 by rpki-client