$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa File: a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json) Hash identifier: f+RwFfxDVJO4GYusvxCneDTHMkwxcfSmUU+GI2+nvG0= Subject key identifier: 88:26:F2:A6:99:2A:D3:00:50:25:9F:76:FF:9B:B1:AB:88:5F:2D:C6 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858499C59E79FC923E8FD2D978D80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 137443 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e7:9f:c9:23:e8:fd:2d:97:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=bc524223-fa30-49ca-bfa1-f10f4372909d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:fc:52:28:2f:5d:cf:ee:fa:1b:90:3c:93: 1d:73:c2:33:71:27:78:9b:fc:70:06:48:0e:d0:41: 1f:f4:50:67:d3:4d:fa:62:01:8b:05:4d:e4:26:77: 91:f8:2d:a1:01:a1:50:85:10:d1:47:e4:13:94:9c: 8f:8c:33:c9:e8:17:25:97:bb:7c:c0:31:66:2f:03: 0b:0c:b6:a6:b4:65:0c:f0:95:b1:bb:63:66:f8:62: dc:86:6b:39:5e:16:21:5f:29:52:41:41:4f:d1:21: f6:89:ce:28:6c:16:f4:ef:df:92:e1:c7:02:31:3e: b3:35:da:58:87:a0:aa:01:7c:0d:bf:8e:73:46:63: 29:01:79:27:80:06:f2:7f:2f:83:f6:51:65:50:1a: 92:25:e4:34:f6:69:31:3d:e3:73:5a:62:1f:b8:c6: fe:2b:70:8b:a6:07:8d:58:9e:3b:cb:6c:94:67:a6: e1:1c:f8:46:f6:57:64:67:35:d0:fb:3a:75:d8:f5: 34:7e:d8:e5:45:9b:ac:ee:cd:92:4b:c9:1b:b8:d6: 3c:f3:2c:10:85:3d:41:64:08:50:b0:ba:8d:b4:7b: b9:b3:bf:76:0d:18:93:77:fa:83:3e:24:56:ec:93: 4a:7e:76:a4:21:b8:04:a1:91:b8:29:e0:34:7c:db: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:26:F2:A6:99:2A:D3:00:50:25:9F:76:FF:9B:B1:AB:88:5F:2D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:64:71:30:86:85:90:04:21:ad:fc:80:52:76:5f:26:a5: ce:91:55:6b:cc:5b:49:5a:9a:f1:11:48:bf:53:d8:26:de:3c: 7c:f2:8b:66:b5:3e:eb:3e:3e:f5:fa:fc:55:69:e3:37:9c:49: 89:ad:40:03:25:a8:d3:f4:9a:65:27:52:49:f2:53:36:11:a7: 54:31:c0:2f:40:75:46:be:88:db:c3:25:35:4b:0f:5c:d9:77: fb:f3:44:2a:b6:fd:b7:53:88:f7:18:8f:13:85:b1:8d:7f:21: 47:5d:07:5d:6c:64:bc:c6:62:bd:2b:b2:71:3b:22:48:93:ff: 95:fe:8c:12:58:c7:f9:c3:d2:80:ae:19:27:75:a0:58:3f:fd: 9c:9c:8e:f1:03:01:59:b6:6d:d0:af:6e:55:ee:46:33:75:c3: 68:53:9e:68:84:da:46:40:71:0e:51:f7:89:f7:30:27:c8:b9: b2:36:27:1a:b0:61:f5:43:60:0e:8b:cd:f7:29:18:37:16:8c: 01:ff:dd:cb:09:52:8c:b5:d0:65:cc:f7:f8:b6:be:65:85:51: a4:35:48:84:a3:5a:47:a6:34:4c:19:d7:2c:d9:6f:dd:51:f5: 9f:64:0a:0e:2d:52:f3:1f:56:57:1e:25:08:5a:1c:63:b1:51: d0:62:ab:a1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmcWeefySPo/S2XjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YmM1MjQyMjMtZmEzMC00OWNhLWJmYTEtZjEwZjQzNzI5MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidf8UigvXc/u+huQPJMdc8IzcSd4m/xwBkgO 0EEf9FBn0036YgGLBU3kJneR+C2hAaFQhRDRR+QTlJyPjDPJ6Bcll7t8wDFmLwML DLamtGUM8JWxu2Nm+GLchms5XhYhXylSQUFP0SH2ic4obBb079+S4ccCMT6zNdpY h6CqAXwNv45zRmMpAXkngAbyfy+D9lFlUBqSJeQ09mkxPeNzWmIfuMb+K3CLpgeN WJ47y2yUZ6bhHPhG9ldkZzXQ+zp12PU0ftjlRZus7s2SS8kbuNY88ywQhT1BZAhQ sLqNtHu5s792DRiTd/qDPiRW7JNKfnakIbgEoZG4KeA0fNuEbwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIgm8qaZKtMAUCWfdv+bsauIXy3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYThiODlhODEtZWZkNy0z YzAzLTlmN2EtNzdjZThlOTk3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEI+ZHEwhoWQBCGt/IBSdl8mpc6RVWvMW0lamvER SL9T2CbePHzyi2a1Pus+PvX6/FVp4zecSYmtQAMlqNP0mmUnUknyUzYRp1QxwC9A dUa+iNvDJTVLD1zZd/vzRCq2/bdTiPcYjxOFsY1/IUddB11sZLzGYr0rsnE7IkiT /5X+jBJYx/nD0oCuGSd1oFg//ZycjvEDAVm2bdCvblXuRjN1w2hTnmiE2kZAcQ5R 94n3MCfIubI2JxqwYfVDYA6LzfcpGDcWjAH/3csJUoy10GXM9/i2vmWFUaQ1SISj WkemNEwZ1yzZb91R9Z9kCg4tUvMfVlceJQhaHGOxUdBiq6E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:12 2025 by rpki-client