$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa File: c4213251-3b00-393f-bb99-fb92be27e7c1.roa (raw, json) Hash identifier: eyghUQsSyWQBnBa6+xijd1sPC/qQ4HNmt+Gfx5OjFqQ= Subject key identifier: F1:E7:69:6F:DA:C8:CA:EC:08:C9:73:72:40:48:16:99:80:7C:FE:52 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849955F24E79E0571046388EC80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 134365 IP address blocks: 107.151.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:24:e7:9e:05:71:04:63:88:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=ffcb6163-79e7-4879-84f7-ceaf5f4a57f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:83:c5:fc:9c:6b:b2:c2:e7:b1:60:bc:ae: e0:e8:3a:eb:ff:a0:d8:7b:31:14:8b:5d:08:3a:0b: 97:1e:52:ab:84:90:5f:a5:56:19:25:5a:ef:77:57: 9f:1e:f6:b7:1f:c3:31:6f:de:c8:45:7c:dd:50:12: ed:6d:ac:71:da:c8:b3:6b:45:5f:8a:07:5f:a1:bf: 28:88:a3:21:0b:ac:0a:a5:6f:02:ab:f9:74:a7:cd: e8:9e:cb:c8:a3:b1:b3:d0:b3:e5:41:de:3d:63:29: 77:66:d4:24:5b:c5:a0:71:9a:27:f9:c2:6f:5b:22: a4:2e:97:02:75:a5:74:cd:89:6e:23:c7:f7:67:d3: 00:05:6e:36:3b:64:2a:a5:b7:1e:99:33:b5:53:59: 20:f1:f7:8c:59:67:b7:25:1a:8b:5a:26:0e:93:7c: 8a:ce:b6:c7:12:c9:9e:bf:11:7b:9b:d7:24:ba:ab: a8:55:a7:52:eb:8b:a8:a0:95:31:9a:c4:d2:49:fc: aa:ca:4b:45:70:95:98:06:2f:66:bb:69:37:79:fe: 7f:42:08:23:4e:5d:0f:5f:f5:bd:04:04:2a:84:23: b1:83:e3:12:cd:83:ef:10:3c:fe:2b:c5:f2:01:38: 20:13:4c:8a:6e:01:a2:6c:fe:93:94:4b:68:4a:ef: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E7:69:6F:DA:C8:CA:EC:08:C9:73:72:40:48:16:99:80:7C:FE:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c4213251-3b00-393f-bb99-fb92be27e7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:16:d9:8b:19:0a:a0:53:ee:08:3a:47:ce:8f:12:a9:17:21: 56:af:40:95:44:34:55:e8:5b:c5:92:00:c5:79:83:18:23:fa: 9c:fa:d0:7b:3c:50:a6:ca:61:21:e6:83:2f:06:6a:36:f4:07: 69:87:57:d0:74:33:8c:17:87:c5:d5:31:f2:35:09:f2:40:46: d2:ae:a6:2d:57:e9:a7:ce:fd:26:6a:f4:07:45:05:cc:12:d3: 0c:fc:14:6a:1b:01:16:dd:cb:fc:f8:02:17:71:91:08:19:3a: 89:f8:b9:ed:99:31:23:c3:9d:28:48:bf:40:95:88:b7:18:5c: a1:39:a1:64:2a:c7:10:7e:06:e7:f3:c0:e6:91:d0:d4:6f:6c: 79:fd:c0:64:43:a7:27:79:2c:98:09:db:ce:16:63:3a:72:a6: 42:e9:38:07:b1:a3:05:ce:ae:65:e8:57:6c:af:35:56:24:02: 07:c0:64:81:44:6c:b8:2e:aa:dc:60:9c:85:ed:c2:aa:09:98: fe:7c:d3:60:6e:5b:c3:53:f1:da:00:27:44:e3:bd:fa:73:ae: ea:91:93:1c:fa:fb:c2:11:c5:ea:95:a0:b5:51:be:0e:17:a0: 9d:ae:e2:38:ff:ee:d3:47:a9:24:fa:37:76:5a:0d:5b:32:52: 29:35:5b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyTnngVxBGOI7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmZjYjYxNjMtNzllNy00ODc5LTg0ZjctY2VhZjVmNGE1N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQuDxfyca7LC57FgvK7g6Drr/6DYezEUi10I OguXHlKrhJBfpVYZJVrvd1efHva3H8Mxb97IRXzdUBLtbaxx2siza0Vfigdfob8o iKMhC6wKpW8Cq/l0p83onsvIo7Gz0LPlQd49Yyl3ZtQkW8WgcZon+cJvWyKkLpcC daV0zYluI8f3Z9MABW42O2QqpbcemTO1U1kg8feMWWe3JRqLWiYOk3yKzrbHEsme vxF7m9ckuquoVadS64uooJUxmsTSSfyqyktFcJWYBi9mu2k3ef5/QggjTl0PX/W9 BAQqhCOxg+MSzYPvEDz+K8XyATggE0yKbgGibP6TlEtoSu/9NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHnaW/ayMrsCMlzckBIFpmAfP5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzQyMTMyNTEtM2IwMC0z OTNmLWJiOTktZmI5MmJlMjdlN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYW2YsZCqBT7gg6R86PEqkXIVavQJVENFXoW8WSAMV5gxgj+pz60Hs8 UKbKYSHmgy8Gajb0B2mHV9B0M4wXh8XVMfI1CfJARtKupi1X6afO/SZq9AdFBcwS 0wz8FGobARbdy/z4AhdxkQgZOon4ue2ZMSPDnShIv0CViLcYXKE5oWQqxxB+Bufz wOaR0NRvbHn9wGRDpyd5LJgJ284WYzpypkLpOAexowXOrmXoV2yvNVYkAgfAZIFE bLguqtxgnIXtwqoJmP5802BuW8NT8doAJ0TjvfpzruqRkxz6+8IRxeqVoLVRvg4X oJ2u4jj/7tNHqST6N3ZaDVsyUik1WwM= -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:09 2025 by rpki-client