$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa File: e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa (raw, json) Hash identifier: WOmO0tyrKfIqXqPfVofoBFdGTdWtJApYNpys8IMB7eo= Subject key identifier: 6A:E7:F4:A3:CF:68:05:22:9D:B1:F0:C0:19:46:DD:4D:B1:21:E0:D0 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584A331AFAF6F1F6BA15BAAE3DC0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 2152 IP address blocks: 137.164.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:fa:f6:f1:f6:ba:15:ba:ae:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=c53a7467-f058-4500-9c28-e81d1cfeacd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:72:8c:3d:93:a3:59:de:4a:a2:ba:97:e4: 68:b5:27:34:c8:50:89:65:d5:0f:80:41:a5:ce:53: 0e:d4:ef:35:5b:1a:d2:17:47:48:f8:36:42:9a:e8: d0:10:6c:88:69:82:0b:bc:6f:79:a8:e6:de:9e:0c: cb:dc:98:9f:36:eb:30:f7:61:7c:03:4d:99:98:cd: c5:11:31:6e:c1:8d:4e:43:34:6f:11:56:20:c7:c6: 57:17:4e:e4:aa:53:ef:4a:d0:e4:e4:fd:9e:27:b7: 11:de:a4:26:7a:10:91:8d:f1:f2:ed:98:5d:68:ba: 98:59:f2:d7:24:1f:9c:cb:40:8b:de:cd:78:7f:94: c6:78:f6:cd:3e:29:f2:37:f9:19:ab:32:c6:5f:51: 8d:59:8a:2d:a6:e9:6f:ef:35:74:8e:66:ed:43:2e: df:f2:26:ec:b1:ae:77:c8:98:af:24:e3:39:98:a8: 5e:5a:da:9c:c2:1f:fb:a9:fe:14:42:03:6c:2f:d0: c1:1b:7a:e4:f4:d7:8b:99:2c:3b:34:a1:19:59:80: 5f:08:ff:ba:7a:99:18:0e:4b:b4:26:d7:ea:a9:c7: c1:7e:09:52:7a:b7:4c:4a:ff:46:34:24:f3:a1:5e: 0a:34:96:51:be:fd:52:31:e7:e1:6d:80:b5:af:66: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E7:F4:A3:CF:68:05:22:9D:B1:F0:C0:19:46:DD:4D:B1:21:E0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e8948fc6-c8e8-3ebf-b4f3-99bf7e79d5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 137.164.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:4a:18:a8:4b:0f:e1:99:6d:68:37:c4:dd:33:28:07:e3:fe: ee:fe:14:f9:08:5f:c4:aa:51:d5:c1:5e:98:95:b0:13:5c:fd: 90:99:85:59:cc:fd:c8:2e:7d:fe:26:5a:45:8c:05:cc:04:70: 18:ba:a6:85:e8:ac:09:04:f2:13:44:08:39:6d:58:6a:ff:c6: 12:97:13:4e:7a:54:19:22:18:8a:3a:7b:58:25:b2:58:fb:49: 24:e2:67:79:b8:cb:51:55:aa:35:12:ec:7a:dd:ef:ee:0a:4e: 01:15:61:38:04:f5:ee:d0:7a:f1:29:6a:68:f2:51:20:0d:43: 86:8f:42:29:da:d7:2a:b6:49:df:de:3f:aa:af:44:11:76:2f: c1:53:47:d1:04:1a:6a:b0:94:fb:98:1e:ae:cb:97:b8:d1:d1: 87:73:00:3a:d2:30:07:72:27:d0:72:6a:4a:50:f9:4d:39:e0: a5:d9:a0:4a:53:fd:00:46:0e:ff:fd:21:42:8f:b4:31:c3:1f: 93:af:9c:e6:3b:6c:75:5c:c4:89:ba:31:13:24:3f:36:d3:f2: 7f:42:53:dd:72:67:9f:2a:2c:47:68:46:ba:30:10:91:fe:ba: bf:d9:09:3d:af:d6:45:cb:12:a3:65:8c:19:76:d1:9a:e5:41: 34:d6:5e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvr28fa6FbquPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YzUzYTc0NjctZjA1OC00NTAwLTljMjgtZTgxZDFjZmVhY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHtyjD2To1neSqK6l+RotSc0yFCJZdUPgEGl zlMO1O81WxrSF0dI+DZCmujQEGyIaYILvG95qObengzL3JifNusw92F8A02ZmM3F ETFuwY1OQzRvEVYgx8ZXF07kqlPvStDk5P2eJ7cR3qQmehCRjfHy7ZhdaLqYWfLX JB+cy0CL3s14f5TGePbNPinyN/kZqzLGX1GNWYotpulv7zV0jmbtQy7f8ibssa53 yJivJOM5mKheWtqcwh/7qf4UQgNsL9DBG3rk9NeLmSw7NKEZWYBfCP+6epkYDku0 JtfqqcfBfglSerdMSv9GNCTzoV4KNJZRvv1SMefhbYC1r2Z/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrn9KPPaAUinbHwwBlG3U2xIeDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZTg5NDhmYzYtYzhlOC0z ZWJmLWI0ZjMtOTliZjdlNzlkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaTxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBKGKhLD+GZbWg3xN0zKAfj/u7+FPkIX8SqUdXBXpiVsBNc/ZCZhVnM /cguff4mWkWMBcwEcBi6poXorAkE8hNECDltWGr/xhKXE056VBkiGIo6e1glslj7 SSTiZ3m4y1FVqjUS7Hrd7+4KTgEVYTgE9e7QevEpamjyUSANQ4aPQina1yq2Sd/e P6qvRBF2L8FTR9EEGmqwlPuYHq7Ll7jR0YdzADrSMAdyJ9ByakpQ+U054KXZoEpT /QBGDv/9IUKPtDHDH5OvnOY7bHVcxIm6MRMkPzbT8n9CU91yZ58qLEdoRrowEJH+ ur/ZCT2v1kXLEqNljBl20ZrlQTTWXmI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:53:21 2025 by rpki-client