$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa File: 2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa (raw, json) Hash identifier: 8aVHo4wP9qaLg4fLnoK/hmyzHpaa55u30tnFThfGZhI= Subject key identifier: F9:58:C8:E6:D0:78:7C:64:94:C6:63:AE:D5:13:29:74:6A:E2:2F:7A Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858498E648E6D8ABDD5A9638C8B80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 139880 IP address blocks: 107.151.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:8e:6d:8a:bd:d5:a9:63:8c:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=e10e4de5-0992-43ce-a610-a78033d01179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a8:1b:40:99:e3:8b:74:1c:a0:e9:de:32:60: 87:17:c4:1e:7a:91:0e:fa:e3:da:49:2d:72:cc:f0: ae:4b:16:c2:6a:5c:5b:b6:1a:0a:a5:34:25:61:d2: 6e:5b:a5:98:21:98:d7:52:4e:94:e7:4e:96:ed:f3: 73:09:94:40:f0:24:c2:80:03:c0:af:8c:27:6d:57: 48:f9:4c:f0:ee:8d:ca:d1:09:57:f3:66:9a:91:98: 9b:fb:a2:81:60:a1:fe:41:7e:f5:61:15:a3:f9:df: 2d:67:8d:33:df:43:f7:76:69:a8:d4:d8:7d:db:e3: df:85:15:11:a0:d6:8f:1f:0d:f6:42:3f:98:9c:c7: 90:c5:6b:7f:d3:14:7e:7b:6f:5a:31:83:59:cb:3c: 0d:36:a8:f9:fb:18:31:db:36:57:a2:32:68:8e:54: 0f:54:7c:b3:1c:f4:e2:f6:4a:b2:e9:92:69:87:01: 65:22:07:f5:a8:3b:cd:6d:88:b0:ff:57:d7:12:f3: e7:9f:10:a5:dd:78:39:14:26:4f:f9:2c:2a:46:a5: fe:10:f7:25:b3:db:0c:35:3a:f8:b7:5f:ed:9e:96: 9f:35:23:1e:d8:7c:b6:38:89:c9:c3:0a:44:06:a8: 52:29:f1:25:78:10:51:23:02:46:a9:d8:ef:45:69: 96:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:58:C8:E6:D0:78:7C:64:94:C6:63:AE:D5:13:29:74:6A:E2:2F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2b39f22d-16a1-3dad-944a-c79ca1ea7754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f4:7b:c4:6c:a3:e0:1f:65:d1:1a:e4:bd:8a:2c:53:0e:9c: 89:1c:ad:7e:7b:e9:82:ba:28:de:06:c9:be:05:20:d2:39:01: 77:60:ce:86:58:ce:f1:d7:1b:e1:1a:3a:0c:c3:75:b1:63:27: d0:15:6c:35:33:c3:0b:4b:36:bf:1c:ac:86:ae:79:38:20:ac: 98:a0:0a:88:6b:09:f6:c5:47:be:a9:9b:bb:1e:44:02:e1:9e: 92:32:35:04:15:1d:44:3c:fa:8d:4b:c9:ae:14:c4:f3:bd:11: dd:58:59:3d:75:f6:98:a1:25:f3:33:fb:78:7d:ef:87:c6:a5: a5:81:40:f7:9d:9b:20:d4:8b:aa:35:a6:a8:fe:be:da:c4:de: c8:3f:74:5a:ce:fa:1e:a4:15:ad:7b:af:ba:5d:79:56:3a:a6: 17:ae:45:77:19:40:85:f5:67:68:12:a7:e4:31:d6:2c:71:28: a9:83:22:e1:61:92:ad:97:95:b9:35:67:57:c1:0c:4d:c1:12: 18:af:22:50:b9:05:1f:8c:d2:94:32:74:5c:f8:42:1c:b9:98: dc:14:42:a7:06:59:da:c5:d0:0b:29:5e:e5:a7:34:24:d9:05: 9b:9b:35:1d:c1:81:cf:4f:12:c2:f8:5c:66:85:e6:c5:fe:42: 83:12:24:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZI5tir3VqWOMi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTEwZTRkZTUtMDk5Mi00M2NlLWE2MTAtYTc4MDMzZDAxMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqgbQJnji3QcoOneMmCHF8QeepEO+uPaSS1y zPCuSxbCalxbthoKpTQlYdJuW6WYIZjXUk6U506W7fNzCZRA8CTCgAPAr4wnbVdI +Uzw7o3K0QlX82aakZib+6KBYKH+QX71YRWj+d8tZ40z30P3dmmo1Nh92+PfhRUR oNaPHw32Qj+YnMeQxWt/0xR+e29aMYNZyzwNNqj5+xgx2zZXojJojlQPVHyzHPTi 9kqy6ZJphwFlIgf1qDvNbYiw/1fXEvPnnxCl3Xg5FCZP+SwqRqX+EPcls9sMNTr4 t1/tnpafNSMe2Hy2OInJwwpEBqhSKfEleBBRIwJGqdjvRWmWOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlYyObQeHxklMZjrtUTKXRq4i96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMmIzOWYyMmQtMTZhMS0z ZGFkLTk0NGEtYzc5Y2ExZWE3NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD0e8Rso+AfZdEa5L2KLFMOnIkcrX576YK6KN4Gyb4FINI5AXdgzoZY zvHXG+EaOgzDdbFjJ9AVbDUzwwtLNr8crIaueTggrJigCohrCfbFR76pm7seRALh npIyNQQVHUQ8+o1Lya4UxPO9Ed1YWT119pihJfMz+3h974fGpaWBQPedmyDUi6o1 pqj+vtrE3sg/dFrO+h6kFa17r7pdeVY6pheuRXcZQIX1Z2gSp+Qx1ixxKKmDIuFh kq2Xlbk1Z1fBDE3BEhivIlC5BR+M0pQydFz4Qhy5mNwUQqcGWdrF0AspXuWnNCTZ BZubNR3Bgc9PEsL4XGaF5sX+QoMSJFw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:11 2025 by rpki-client