$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa File: 4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa (raw, json) Hash identifier: 2PCKrCkxmtBm4xtfkY57558+0MbjiOx7GzAbYjMtBzg= Subject key identifier: 5E:BC:D9:B7:0F:09:E8:F9:1B:F2:EF:A5:E1:54:7A:BF:32:6D:4D:C7 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858498769B958DDDCA8A4D7B09500 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 21859 IP address blocks: 107.151.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b9:58:dd:dc:a8:a4:d7:b0:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c3b07153-da6d-4e05-9ec1-d860c15a05a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:cf:e8:40:a6:6e:d0:de:99:f4:10:01:14: ac:ba:78:1d:d0:cd:de:07:f8:fb:76:19:46:b5:7e: 78:06:4a:e4:ca:ac:b1:c4:c2:63:a0:43:b1:d9:cb: f0:91:5b:30:f5:49:05:a0:9c:f9:cf:d5:78:e8:47: a5:06:a0:9d:a1:b8:e8:ad:0d:84:61:da:75:6c:e6: 0e:43:ec:b5:49:63:7c:1d:05:6d:48:c9:7b:06:d0: cc:8e:3d:d4:8b:fc:7a:00:fc:ae:a6:e0:77:f0:5d: 46:68:2e:02:f8:67:1b:ee:7e:cb:4a:4e:7a:0f:67: 0a:a3:6d:a0:1e:86:87:a7:f1:43:98:9b:bc:86:02: 1c:6e:3c:03:7c:67:a4:df:78:6a:7a:e5:a1:2e:2a: c6:e0:da:f1:85:76:01:c5:9d:66:fa:59:e8:ff:88: 3a:e8:3b:3c:2b:27:6a:55:4e:35:ee:d7:23:10:8e: d7:fb:d3:32:62:50:90:ff:9f:c3:3d:81:92:30:b8: b0:54:74:5e:a6:4c:f2:5a:1c:f2:20:4b:2f:4b:36: c3:1b:8f:ae:23:dc:8d:57:5e:ac:b1:9c:d1:56:32: 11:a8:9f:e8:5d:b2:be:8b:1f:5f:5a:ad:da:55:3b: be:80:7a:5f:e8:d5:db:af:0f:30:e2:1b:94:06:cb: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BC:D9:B7:0F:09:E8:F9:1B:F2:EF:A5:E1:54:7A:BF:32:6D:4D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4bb81d2a-1f28-3975-9f81-d4d601be4f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:60:5c:1a:a7:ac:e1:02:f0:d7:4f:08:fc:2e:93:85:57:90: 50:d5:0f:81:c7:dd:3a:b4:8e:e9:ca:77:e4:22:ca:3e:fa:1c: 27:0f:78:97:ba:d4:29:01:6f:05:f3:cb:df:48:54:09:8c:3f: 51:06:73:92:27:d4:b1:05:33:d5:25:93:08:dd:6a:7a:f0:ba: 7d:27:06:f4:b3:ab:f8:4e:07:ac:43:a8:65:0e:35:89:7d:73: b8:0e:c4:4a:db:76:7e:7d:89:cc:ba:37:16:cb:1b:9a:b7:5c: 74:a5:8a:38:40:93:ff:94:4a:0c:ef:be:e6:8f:a0:91:80:2b: fe:d6:1d:14:b0:77:85:cf:43:ee:51:e4:06:d2:2d:5b:ef:14: 41:a1:ca:28:e9:08:55:62:d6:cf:40:c2:74:93:f0:e3:ad:a5: 01:6d:df:de:aa:25:4b:c2:ce:3a:60:af:17:75:ec:93:1c:fd: 0a:ad:53:de:67:d3:58:85:f5:39:92:13:59:ad:76:e9:fb:d4: 85:9f:30:10:4e:cd:d8:a7:ca:bb:87:ba:f8:ab:0e:a0:f2:22: 4d:18:c7:42:2f:43:fb:42:55:6a:0d:ff:62:3f:a8:f1:02:b9: 90:14:87:63:a2:6e:10:98:5a:75:13:bf:b4:0b:48:d5:96:eb: 1b:dc:41:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHablY3dyopNewlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzNiMDcxNTMtZGE2ZC00ZTA1LTllYzEtZDg2MGMxNWEwNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE/P6ECmbtDemfQQARSsungd0M3eB/j7dhlG tX54BkrkyqyxxMJjoEOx2cvwkVsw9UkFoJz5z9V46EelBqCdobjorQ2EYdp1bOYO Q+y1SWN8HQVtSMl7BtDMjj3Ui/x6APyupuB38F1GaC4C+Gcb7n7LSk56D2cKo22g HoaHp/FDmJu8hgIcbjwDfGek33hqeuWhLirG4NrxhXYBxZ1m+lno/4g66Ds8Kydq VU417tcjEI7X+9MyYlCQ/5/DPYGSMLiwVHRepkzyWhzyIEsvSzbDG4+uI9yNV16s sZzRVjIRqJ/oXbK+ix9fWq3aVTu+gHpf6NXbrw8w4huUBstkLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF682bcPCej5G/LvpeFUer8ybU3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGJiODFkMmEtMWYyOC0z OTc1LTlmODEtZDRkNjAxYmU0ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5frMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpgXBqnrOEC8NdPCPwuk4VXkFDVD4HH3Tq0junKd+Qiyj76HCcPeJe6 1CkBbwXzy99IVAmMP1EGc5In1LEFM9Ulkwjdanrwun0nBvSzq/hOB6xDqGUONYl9 c7gOxErbdn59icy6NxbLG5q3XHSlijhAk/+USgzvvuaPoJGAK/7WHRSwd4XPQ+5R 5AbSLVvvFEGhyijpCFVi1s9AwnST8OOtpQFt396qJUvCzjpgrxd17JMc/QqtU95n 01iF9TmSE1mtdun71IWfMBBOzdinyruHuvirDqDyIk0Yx0IvQ/tCVWoN/2I/qPEC uZAUh2OibhCYWnUTv7QLSNWW6xvcQew= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:53 2025 by rpki-client