$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa File: b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa (raw, json) Hash identifier: IVq5L4PHU4Zjd+QBtkjGx9bAiTqNwfk3/GXE3585P8M= Subject key identifier: 3B:75:FC:6C:CB:24:6A:89:B3:3B:C7:74:9B:D2:71:09:43:ED:44:9D Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858499C59E354ECB35A0CEAC22140 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 18013 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e3:54:ec:b3:5a:0c:ea:c2:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=06ab321f-17bd-4e40-b4c6-0040ca4bac43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:93:29:77:7d:f4:0e:eb:43:9e:e5:99:59: 39:e4:f7:91:32:a5:19:cd:3b:2b:52:cc:f2:c4:13: 20:b5:3e:7b:6f:d2:71:79:19:3f:ec:82:8a:19:7a: 3f:6b:c0:90:d9:a5:c0:08:02:a1:fb:72:49:11:21: f1:e6:d2:c2:4e:ef:0b:0d:74:32:b2:b7:78:86:fc: 38:96:a1:94:65:91:55:c0:b5:56:a7:0d:a2:e7:7d: b7:02:be:4a:29:dc:b0:b0:ed:b8:a8:78:b9:94:2f: eb:b7:66:da:1a:1d:07:a1:1d:d1:fe:84:36:45:1d: 4c:c2:b1:43:ab:d5:95:fb:74:76:7c:71:ab:a8:d8: c8:89:7f:f0:d6:d9:8b:4a:45:11:68:e5:28:9c:1c: 46:61:c1:66:80:e1:bc:9f:1a:0b:15:a1:8d:ca:8f: e7:ba:a8:5e:76:76:23:cd:1c:60:7d:04:55:b6:98: 35:88:01:3b:7d:a5:4f:8c:91:36:61:0f:62:e2:dc: 0c:c2:bf:cb:f1:99:c3:77:93:f6:d9:98:7b:f9:e2: ce:08:86:5b:da:e0:74:c8:b3:c3:ba:9c:d4:b2:1b: ca:cf:56:ee:29:82:14:5c:da:90:12:67:21:42:89: e2:32:23:ef:43:10:d7:ab:07:37:34:47:3f:c1:ff: e3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:75:FC:6C:CB:24:6A:89:B3:3B:C7:74:9B:D2:71:09:43:ED:44:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:23:b9:b6:b2:45:c8:5d:6b:ba:9c:a5:b1:27:74:e5:1e:2d: 6c:ea:99:77:9e:fb:2d:14:cc:d7:7d:67:80:9f:bd:56:fd:85: a7:ea:a7:ed:14:51:0b:0a:26:4b:05:a7:42:2e:f6:fc:32:96: 86:c1:da:ff:f4:ae:7d:c4:5f:c6:5d:03:05:b4:4a:2a:fd:0e: eb:71:02:17:ff:04:61:6b:69:34:e5:e5:87:b9:41:76:65:ac: 03:c2:c1:22:bf:90:25:74:2d:c2:1a:3b:7f:b6:fd:0b:3c:11: d7:42:02:d3:37:aa:e4:01:37:ca:fc:6d:35:df:22:83:82:18: 23:0b:20:c1:fc:94:3b:c3:de:09:d1:5c:1e:6b:86:bd:e3:c7: f3:36:89:7d:d4:e3:33:df:b1:f5:3f:eb:29:56:e7:a2:7c:d7: ad:ef:e7:ef:66:e9:c5:13:86:7d:57:09:da:6a:e5:f3:62:b4: fa:62:ff:e5:3c:48:54:d4:aa:59:81:29:4b:b4:1a:80:41:b5: 6b:fe:7d:88:7f:a2:96:f8:d8:51:c9:91:d0:66:36:eb:e5:1e: 09:90:66:fb:a0:8c:55:92:18:53:e6:7e:43:3b:de:0b:d2:7f: dc:21:24:0a:fc:58:cf:4c:96:ab:0f:e4:40:72:62:45:5f:a6: 22:31:e5:84 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmcWeNU7LNaDOrCIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MDZhYjMyMWYtMTdiZC00ZTQwLWI0YzYtMDA0MGNhNGJhYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6qTKXd99A7rQ57lmVk55PeRMqUZzTsrUszy xBMgtT57b9JxeRk/7IKKGXo/a8CQ2aXACAKh+3JJESHx5tLCTu8LDXQysrd4hvw4 lqGUZZFVwLVWpw2i5323Ar5KKdywsO24qHi5lC/rt2baGh0HoR3R/oQ2RR1MwrFD q9WV+3R2fHGrqNjIiX/w1tmLSkURaOUonBxGYcFmgOG8nxoLFaGNyo/nuqhednYj zRxgfQRVtpg1iAE7faVPjJE2YQ9i4twMwr/L8ZnDd5P22Zh7+eLOCIZb2uB0yLPD upzUshvKz1buKYIUXNqQEmchQoniMiPvQxDXqwc3NEc/wf/jZwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDt1/GzLJGqJszvHdJvScQlD7USdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjg2MmQ3M2UtZjBkZC0z YzIxLWIxNGMtZWFjMzQ0YTljOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIQjubayRchda7qcpbEndOUeLWzqmXee+y0UzNd9 Z4CfvVb9hafqp+0UUQsKJksFp0Iu9vwylobB2v/0rn3EX8ZdAwW0Sir9DutxAhf/ BGFraTTl5Ye5QXZlrAPCwSK/kCV0LcIaO3+2/Qs8EddCAtM3quQBN8r8bTXfIoOC GCMLIMH8lDvD3gnRXB5rhr3jx/M2iX3U4zPfsfU/6ylW56J8163v5+9m6cUThn1X Cdpq5fNitPpi/+U8SFTUqlmBKUu0GoBBtWv+fYh/opb42FHJkdBmNuvlHgmQZvug jFWSGFPmfkM73gvSf9whJAr8WM9MlqsP5EByYkVfpiIx5YQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:57 2025 by rpki-client