$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa File: d5af8938-fe55-34cf-8a95-3ff9247e6446.roa (raw, json) Hash identifier: ZTD8QNIH2eLkkGJ0c8h1ZgIvXGoNXlTynvoEZoBYU48= Subject key identifier: 59:B1:74:B2:03:E6:D0:F7:51:C6:EC:2D:92:E9:6F:06:FE:34:45:3C Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F432858499C59E373D722F8631D687D80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 152705 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e3:73:d7:22:f8:63:1d:68:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=8fa66926-9507-4481-a0f8-1612df7950d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:1a:93:40:dc:dc:67:65:26:fd:01:4a:fb: d1:7a:b3:a3:de:60:df:fc:3f:0d:e2:a8:d3:ef:19: 09:77:79:5f:de:59:15:12:09:76:89:11:51:0e:cb: b3:2c:97:12:c5:f8:e1:b2:7b:ff:dc:79:80:47:12: 29:d5:0b:c7:3e:16:ff:49:89:fc:e8:97:0a:4f:e8: c3:b7:19:d0:1e:bd:13:11:7a:31:c7:63:01:9f:dd: cb:0b:c1:d1:cc:e5:ae:76:72:5c:04:14:e0:0d:9b: 5f:e7:8d:cb:bd:d7:c8:47:a1:d4:54:3d:68:a8:09: d8:17:ad:5c:91:6f:50:dc:aa:04:6a:6e:0b:99:ce: 90:03:51:77:92:77:a9:b6:b9:fd:64:b0:d9:6e:47: 91:fe:88:38:60:38:c8:b8:c7:d0:bb:81:dd:bd:b3: 37:ad:19:be:80:6f:57:63:d1:bb:1a:12:3b:58:b7: 72:21:40:20:1d:d1:ed:86:53:c1:4b:d7:61:2a:25: 76:00:a4:07:13:14:35:4e:5b:39:58:af:2d:76:13: 25:ad:f2:49:ac:08:c7:cf:99:4a:fd:3f:b8:b4:2a: f2:bc:54:42:1b:eb:3a:e7:86:14:e3:49:b9:a7:e4: 24:4b:be:e4:ea:92:c5:c5:80:c7:cb:66:bb:ec:10: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:74:B2:03:E6:D0:F7:51:C6:EC:2D:92:E9:6F:06:FE:34:45:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:db:1d:81:01:05:33:b2:eb:68:bc:e0:73:52:77:23:3a:07: a8:9b:13:1d:ee:c5:20:ba:3f:1e:d5:7e:4f:0c:66:4d:a6:c9: 64:9f:b6:dc:56:11:b2:47:c7:14:11:1d:03:8a:2a:f2:05:42: e4:0b:1c:11:6a:cf:5d:4c:cf:d4:4e:6f:7c:d7:d8:f7:1d:e6: da:fe:cd:06:0f:f0:df:b5:7e:9f:dc:b2:0d:51:42:65:a9:f3: 0c:08:a8:1d:51:9a:a9:5e:55:d7:42:5c:95:48:db:6c:ff:19: 40:61:df:99:39:3e:0f:cf:07:b0:d1:cb:91:49:0f:73:12:72: 07:02:36:f5:e5:27:81:c9:88:8a:ca:db:0a:0c:2a:90:c6:b4: a5:78:24:cf:f6:d7:08:25:45:3a:c8:3b:38:5f:f1:f6:01:3f: 23:be:0c:3a:9d:ec:62:58:97:32:a5:5f:bb:3d:83:d0:84:cd: c6:9d:86:7c:19:f1:81:b7:be:0e:1b:7a:91:f9:8e:6e:9b:8e: 2a:f9:a7:ff:e4:21:69:91:1f:20:77:48:5a:8a:49:db:5c:81: 63:77:25:be:d9:f2:af:19:61:47:a4:0f:ed:f2:5b:46:0b:73: 23:22:3c:a8:4d:40:2f:9b:35:12:7e:35:39:95:86:ad:1c:c2: fa:02:1c:16 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmcWeNz1yL4Yx1ofYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk OGZhNjY5MjYtOTUwNy00NDgxLWEwZjgtMTYxMmRmNzk1MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1sak0Dc3GdlJv0BSvvRerOj3mDf/D8N4qjT 7xkJd3lf3lkVEgl2iRFRDsuzLJcSxfjhsnv/3HmARxIp1QvHPhb/SYn86JcKT+jD txnQHr0TEXoxx2MBn93LC8HRzOWudnJcBBTgDZtf543LvdfIR6HUVD1oqAnYF61c kW9Q3KoEam4Lmc6QA1F3kneptrn9ZLDZbkeR/og4YDjIuMfQu4HdvbM3rRm+gG9X Y9G7GhI7WLdyIUAgHdHthlPBS9dhKiV2AKQHExQ1Tls5WK8tdhMlrfJJrAjHz5lK /T+4tCryvFRCG+s654YU40m5p+QkS77k6pLFxYDHy2a77BCy4wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFmxdLID5tD3UcbsLZLpbwb+NEU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDVhZjg5MzgtZmU1NS0z NGNmLThhOTUtM2ZmOTI0N2U2NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFvbHYEBBTOy62i84HNSdyM6B6ibEx3uxSC6Px7V fk8MZk2myWSfttxWEbJHxxQRHQOKKvIFQuQLHBFqz11Mz9ROb3zX2Pcd5tr+zQYP 8N+1fp/csg1RQmWp8wwIqB1RmqleVddCXJVI22z/GUBh35k5Pg/PB7DRy5FJD3MS cgcCNvXlJ4HJiIrK2woMKpDGtKV4JM/21wglRTrIOzhf8fYBPyO+DDqd7GJYlzKl X7s9g9CEzcadhnwZ8YG3vg4bepH5jm6bjir5p//kIWmRHyB3SFqKSdtcgWN3Jb7Z 8q8ZYUekD+3yW0YLcyMiPKhNQC+bNRJ+NTmVhq0cwvoCHBY= -----END CERTIFICATE-----Generated at Wed Apr 30 00:51:42 2025 by rpki-client