$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa File: c48540e3-a29d-345c-a58f-8579a57be1d2.roa (raw, json) Hash identifier: e53mUQcUEpkJTDaEZSyeXz0KzeCfRt+a7LjxUBu3mQE= Subject key identifier: 00:AF:D3:E2:39:D6:BB:8C:36:C5:48:34:4D:31:08:2B:5E:9A:1A:05 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285848E9CBF1C5C445526C1E4AA880 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 134365 IP address blocks: 107.151.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f1:c5:c4:45:52:6c:1e:4a:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=dab7a753-e3ab-4a62-a10f-38ae1a5ebf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:20:67:e5:df:85:5f:33:e1:63:55:6e:3b: 06:65:cd:bb:47:82:90:34:38:1b:ac:af:e7:58:0c: c3:26:62:13:1c:9d:cc:88:54:e5:c6:f9:90:5a:a2: c9:9f:61:e3:10:9f:5c:a7:11:c2:09:82:8d:7e:12: 4c:41:97:f3:21:4d:e8:49:66:8f:50:81:76:fd:5d: cf:58:1a:d7:85:28:ec:d3:5c:77:cc:6e:ad:f3:e5: bf:ec:63:d7:c7:c8:57:b5:42:23:a4:ab:c5:6d:0f: 15:60:9e:ee:a2:45:a9:d0:5d:c7:b4:b9:58:fa:e0: 70:b3:d5:72:bb:10:13:8a:0b:85:88:ee:b9:15:6e: 19:93:a4:ea:98:fd:aa:6e:28:3e:84:80:79:b2:e6: 15:d8:5c:c7:ed:24:79:81:94:02:ce:67:7f:31:38: 0d:7d:2b:94:35:e9:4c:ba:c7:30:0e:76:41:74:29: 7d:74:e9:5b:3e:37:5c:97:02:97:ed:37:c9:a3:05: f1:0e:52:6a:45:30:a3:f6:dd:b6:e3:33:01:02:58: 4c:28:14:6b:d2:ca:07:49:a7:e5:eb:e9:12:6d:5a: e1:92:9a:8d:43:a2:58:61:bc:a7:dd:92:72:a4:6f: 0c:87:10:49:f5:a3:d9:0f:fb:3f:6a:47:67:7b:31: ef:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:D3:E2:39:D6:BB:8C:36:C5:48:34:4D:31:08:2B:5E:9A:1A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/c48540e3-a29d-345c-a58f-8579a57be1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:3f:e6:72:d4:0f:ea:c6:67:45:b1:39:06:d3:d9:17:5e:3d: 71:19:83:6e:c0:e0:ac:17:e0:2d:cf:c0:6e:24:03:c4:c3:ba: 35:7f:91:68:a6:3c:05:d8:a9:c7:ab:bc:25:11:14:5b:3b:ae: 49:69:b4:63:86:43:43:6c:6b:3b:d3:32:71:84:da:92:7b:77: 72:78:05:76:cf:d6:06:60:10:c5:4b:9a:aa:9e:9b:9e:f9:25: 86:6d:92:9c:ef:8f:10:6b:ea:c6:79:29:36:ed:d0:ed:cc:92: e8:c2:f7:0f:0f:2f:b1:a6:72:34:cb:d6:d6:03:9d:77:03:07: a2:6c:c7:c7:fd:a6:2b:92:b9:26:b3:44:0d:e9:15:d4:b8:8b: 77:b0:fc:f9:9b:3a:89:5a:7a:c7:66:c7:a0:76:31:f2:aa:05: db:b9:c8:78:2c:89:2d:62:ec:b2:45:96:26:21:8b:95:6e:16: 80:99:42:69:f7:61:5e:25:65:79:3e:d0:ac:52:3c:94:2a:ea: 6e:30:5c:b2:b3:bd:0b:ed:d0:c2:ff:06:24:9b:9e:f4:d5:ff: f1:4b:94:68:25:b9:b9:67:c1:37:a5:6f:52:bc:1f:44:97:bd: 7c:0b:62:12:4d:37:0a:e5:d7:50:bc:cc:2a:d3:e4:85:98:76: ec:49:4b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/HFxEVSbB5KqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZGFiN2E3NTMtZTNhYi00YTYyLWExMGYtMzhhZTFhNWViZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwogZ+XfhV8z4WNVbjsGZc27R4KQNDgbrK/n WAzDJmITHJ3MiFTlxvmQWqLJn2HjEJ9cpxHCCYKNfhJMQZfzIU3oSWaPUIF2/V3P WBrXhSjs01x3zG6t8+W/7GPXx8hXtUIjpKvFbQ8VYJ7uokWp0F3HtLlY+uBws9Vy uxATiguFiO65FW4Zk6TqmP2qbig+hIB5suYV2FzH7SR5gZQCzmd/MTgNfSuUNelM uscwDnZBdCl9dOlbPjdclwKX7TfJowXxDlJqRTCj9t224zMBAlhMKBRr0soHSafl 6+kSbVrhkpqNQ6JYYbyn3ZJypG8MhxBJ9aPZD/s/akdnezHvtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACv0+I51ruMNsVINE0xCCtemhoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYzQ4NTQwZTMtYTI5ZC0z NDVjLWE1OGYtODU3OWE1N2JlMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk/5nLUD+rGZ0WxOQbT2RdePXEZg27A4KwX4C3PwG4kA8TDujV/kWim PAXYqcervCURFFs7rklptGOGQ0NsazvTMnGE2pJ7d3J4BXbP1gZgEMVLmqqem575 JYZtkpzvjxBr6sZ5KTbt0O3MkujC9w8PL7GmcjTL1tYDnXcDB6Jsx8f9piuSuSaz RA3pFdS4i3ew/PmbOolaesdmx6B2MfKqBdu5yHgsiS1i7LJFliYhi5VuFoCZQmn3 YV4lZXk+0KxSPJQq6m4wXLKzvQvt0ML/BiSbnvTV//FLlGglublnwTelb1K8H0SX vXwLYhJNNwrl11C8zCrT5IWYduxJSwQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:48:25 2025 by rpki-client