$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa File: dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa (raw, json) Hash identifier: NZtb2NjibZ8mdaUfW+gKzlkWtw1yjxljKTpI6iSo720= Subject key identifier: 85:57:64:AA:84:9A:0F:45:AB:2C:7E:DC:7A:2D:12:9F:46:20:79:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5EB643FFEFDEECB32AE01 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 107.3.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:eb:64:3f:fe:fd:ee:cb:32:ae:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=729b3b96-fa74-4226-b534-8491c3b08b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:41:fb:ea:b3:02:e8:df:93:75:28:a3:0e: 62:72:29:c7:c9:8f:84:8d:74:05:cc:f8:74:af:5d: 31:1e:c1:62:25:aa:c9:36:03:65:35:c8:8e:66:f3: 64:14:27:a3:57:4e:48:b7:30:47:07:e7:e9:c7:22: bc:55:a1:0e:08:a2:4d:9d:9c:fc:42:9a:4d:4e:0b: f7:53:dc:cf:c7:f9:2b:85:c6:99:35:6b:65:7b:e7: 8d:ca:59:e0:3f:b3:9f:f8:7a:68:f5:f4:62:d0:d7: 71:62:53:ba:bb:a9:3c:5c:cb:09:fb:28:d1:52:88: aa:4d:5f:38:fe:e1:19:76:7e:97:6a:2d:f6:a6:fe: 7f:7a:1c:46:ec:39:57:b4:61:e3:8f:38:0c:7f:e9: 2b:d2:10:9c:9d:c7:f1:99:4d:6f:cf:17:9d:ab:77: 2d:02:85:18:56:32:c5:d4:d9:e8:d5:4d:54:75:58: 76:39:5a:26:a6:0a:cd:3d:9e:c7:16:77:0c:2b:11: 62:ca:85:1d:d4:a6:39:7a:a7:59:7b:f1:83:33:7a: fd:08:57:50:80:18:38:a3:93:da:8e:af:b4:77:23: 28:95:c8:a5:59:98:52:2a:53:ad:f8:06:c2:01:20: 23:40:90:b5:8c:aa:08:00:8a:67:63:1b:f0:09:03: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:57:64:AA:84:9A:0F:45:AB:2C:7E:DC:7A:2D:12:9F:46:20:79:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfcb7a75-a46e-3a4a-8e39-022eb641300b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:61:05:33:6b:bf:8d:8f:47:99:fa:9b:6a:a8:01:c0:54:1e: 56:28:d4:f3:e6:28:1a:5d:b3:ff:62:2a:7c:42:f1:f4:7c:7c: ed:ec:dd:65:fe:ec:e4:49:55:73:a5:c6:5e:d6:2b:5e:78:ed: b1:36:60:89:f3:3d:07:97:98:a4:19:cb:72:f6:3a:06:b1:f9: 50:a8:51:91:98:e6:e1:58:cd:da:96:4b:ff:47:14:14:12:19: 19:2d:95:e5:74:f7:94:5d:54:d2:3e:5a:f5:9a:11:a1:0c:e4: 16:26:4d:e2:15:23:91:d4:9b:eb:83:71:9e:ca:41:49:8f:fd: 49:64:4a:2c:31:12:af:9d:84:9e:0f:bc:f9:09:93:1e:19:0b: 04:6d:de:7d:ad:ec:51:4f:99:d4:01:33:d3:ac:ed:55:73:a6: af:87:c6:8c:a2:aa:cf:25:ca:ca:b5:a7:5d:a1:8c:40:52:1a: 34:04:1e:f4:f9:ec:8e:59:2f:7c:1f:12:43:e4:02:90:ef:14: 73:e2:cf:7d:5b:37:b4:f7:1d:97:0b:2b:ef:ab:71:da:7f:89: 0c:32:7e:f4:5c:63:11:31:95:50:07:7b:15:2b:92:34:04:b9: df:88:81:cc:a4:69:63:cb:fd:a6:e9:61:54:78:7d:50:80:64: de:23:70:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9petkP/797ssyrgEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzI5YjNiOTYtZmE3NC00MjI2LWI1MzQtODQ5MWMzYjA4YjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWRB++qzAujfk3Uoow5icinHyY+EjXQFzPh0 r10xHsFiJarJNgNlNciOZvNkFCejV05ItzBHB+fpxyK8VaEOCKJNnZz8QppNTgv3 U9zPx/krhcaZNWtle+eNylngP7Of+Hpo9fRi0NdxYlO6u6k8XMsJ+yjRUoiqTV84 /uEZdn6Xai32pv5/ehxG7DlXtGHjjzgMf+kr0hCcncfxmU1vzxedq3ctAoUYVjLF 1Nno1U1UdVh2OVompgrNPZ7HFncMKxFiyoUd1KY5eqdZe/GDM3r9CFdQgBg4o5Pa jq+0dyMolcilWZhSKlOt+AbCASAjQJC1jKoIAIpnYxvwCQNZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVXZKqEmg9Fqyx+3HotEp9GIHkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZjYjdhNzUtYTQ2ZS0z YTRhLThlMzktMDIyZWI2NDEzMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCawPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNhBTNrv42PR5n6m2qoAcBUHlYo1PPmKBpds/9iKnxC8fR8fO3s3WX+ 7ORJVXOlxl7WK1547bE2YInzPQeXmKQZy3L2Ogax+VCoUZGY5uFYzdqWS/9HFBQS GRktleV095RdVNI+WvWaEaEM5BYmTeIVI5HUm+uDcZ7KQUmP/UlkSiwxEq+dhJ4P vPkJkx4ZCwRt3n2t7FFPmdQBM9Os7VVzpq+Hxoyiqs8lysq1p12hjEBSGjQEHvT5 7I5ZL3wfEkPkApDvFHPiz31bN7T3HZcLK++rcdp/iQwyfvRcYxExlVAHexUrkjQE ud+IgcykaWPL/abpYVR4fVCAZN4jcPQ= -----END CERTIFICATE-----Generated at Sun Apr 27 06:25:41 2025 by rpki-client