$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa File: 685ceee8-b900-37c5-8e47-74eadff0d2fe.roa (raw, json) Hash identifier: 64PFJsye+/mmao6FGdQgiM9t8A9X8pSXFs9c9vFPODM= Subject key identifier: 65:F7:C8:4D:A9:BF:30:D5:FA:78:A3:37:0E:4F:A5:1E:48:E4:95:58 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858499C59E38D52A8A8D75CE4BB00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 62468 IP address blocks: 107.151.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e3:8d:52:a8:a8:d7:5c:e4:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=00d3bb9e-cef1-419d-b00f-17e4a9467fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:49:c5:4e:72:0a:c2:da:b5:e9:c0:11:91: c6:6d:fb:3b:71:a7:33:f8:82:9d:85:4f:4d:16:da: a7:e5:c4:e6:0f:f1:6b:1b:e1:6a:d0:bb:53:ad:d4: 01:f3:65:bc:7e:a6:11:47:f1:41:aa:30:58:46:00: 8e:cd:e7:e5:d7:9d:ec:ee:af:26:77:da:b5:58:95: a2:da:73:ff:7f:d5:ec:6c:50:e2:c7:7c:78:f6:2b: f0:42:78:06:66:3e:d1:29:7a:31:30:85:10:f2:cb: cd:74:35:3b:63:c5:f9:21:b0:92:b3:0d:1e:c2:07: ed:69:53:75:4e:64:9a:a2:71:b5:8d:53:ff:0b:75: 70:db:ad:84:ee:31:53:3c:9f:8a:3d:01:02:12:5d: 48:60:c2:de:fe:c6:01:b4:ad:a2:0f:b7:be:ce:95: 5d:96:7d:fa:52:df:15:b8:87:91:fb:ec:af:0d:de: 50:e6:99:93:bd:a2:ef:87:07:43:2a:a7:56:31:78: ba:06:a2:e3:d1:f5:86:07:39:8c:a9:f4:47:ef:0e: a8:ed:7b:cd:2e:9f:3b:69:9e:8b:49:fc:dd:09:25: cc:90:b1:13:09:2f:16:c6:a3:1e:6d:57:6d:6f:a9: 74:89:c1:8c:be:69:32:b7:f6:92:a4:cb:fd:fc:31: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:C8:4D:A9:BF:30:D5:FA:78:A3:37:0E:4F:A5:1E:48:E4:95:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/685ceee8-b900-37c5-8e47-74eadff0d2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:14:63:ea:fb:e0:ad:1c:f7:8f:7e:ef:80:1c:2f:53:b4:91: 61:40:a6:e2:9e:b8:d4:ea:13:11:c5:3c:62:27:fb:96:60:92: 73:37:2a:35:17:79:da:4f:af:d1:55:b1:be:1c:57:5f:81:5b: e3:5e:64:ab:c0:83:64:83:8e:8e:3c:e5:48:0a:9e:e6:d3:f4: 50:af:d0:ed:19:cb:ea:bb:ee:23:cc:06:6c:47:fa:67:9e:0a: 6e:6d:eb:67:25:f3:37:ca:79:27:3d:80:71:37:2a:d4:c9:04: 98:52:07:23:80:5c:3c:5e:c9:2a:ad:ea:ab:a4:9b:bb:3d:31: c4:3f:fb:a6:b4:5c:6f:c2:4f:75:e3:27:36:0b:4d:99:a3:bb: ae:39:be:60:b7:67:d8:54:f4:0c:62:54:c3:0e:38:2a:05:6e: aa:c4:99:6e:93:32:f1:7f:22:25:74:f6:04:a3:f0:15:11:f0: 87:be:df:32:c3:69:1c:2e:00:54:b4:0e:69:4b:22:0d:cd:4c: b5:3a:b5:de:d9:2e:e5:3a:e2:eb:05:0e:c8:c5:c1:e7:7f:78: 7b:c9:70:75:c4:af:0c:52:d3:5f:a8:36:62:ff:82:79:fc:ed: 57:4a:6c:3e:e7:d6:3e:50:8a:f5:18:3d:61:7b:a3:e5:5d:2a: 55:13:89:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWeONUqio11zkuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MDBkM2JiOWUtY2VmMS00MTlkLWIwMGYtMTdlNGE5NDY3ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/xJxU5yCsLatenAEZHGbfs7cacz+IKdhU9N Ftqn5cTmD/FrG+Fq0LtTrdQB82W8fqYRR/FBqjBYRgCOzefl153s7q8md9q1WJWi 2nP/f9XsbFDix3x49ivwQngGZj7RKXoxMIUQ8svNdDU7Y8X5IbCSsw0ewgftaVN1 TmSaonG1jVP/C3Vw262E7jFTPJ+KPQECEl1IYMLe/sYBtK2iD7e+zpVdln36Ut8V uIeR++yvDd5Q5pmTvaLvhwdDKqdWMXi6BqLj0fWGBzmMqfRH7w6o7XvNLp87aZ6L SfzdCSXMkLETCS8WxqMebVdtb6l0icGMvmkyt/aSpMv9/DFqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX3yE2pvzDV+nijNw5PpR5I5JVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNjg1Y2VlZTgtYjkwMC0z N2M1LThlNDctNzRlYWRmZjBkMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4UY+r74K0c949+74AcL1O0kWFApuKeuNTqExHFPGIn+5ZgknM3KjUX edpPr9FVsb4cV1+BW+NeZKvAg2SDjo485UgKnubT9FCv0O0Zy+q77iPMBmxH+mee Cm5t62cl8zfKeSc9gHE3KtTJBJhSByOAXDxeySqt6qukm7s9McQ/+6a0XG/CT3Xj JzYLTZmju645vmC3Z9hU9AxiVMMOOCoFbqrEmW6TMvF/IiV09gSj8BUR8Ie+3zLD aRwuAFS0DmlLIg3NTLU6td7ZLuU64usFDsjFwed/eHvJcHXErwxS01+oNmL/gnn8 7VdKbD7n1j5QivUYPWF7o+VdKlUTiQQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:16:29 2025 by rpki-client