$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1bdc5168-92a8-3f2b-b629-64a845dc5598.roa File: 1bdc5168-92a8-3f2b-b629-64a845dc5598.roa (raw, json) Hash identifier: yMXiQseuU3I+RPIsfqJ6CU/wh14FIxUgXStDjuUSMw4= Subject key identifier: 38:E8:E0:A5:1A:A3:37:95:71:DA:D8:9C:31:E1:ED:28:9B:6C:EE:A1 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F432858496CE44F8F9AF97074CAFEC660 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1bdc5168-92a8-3f2b-b629-64a845dc5598.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 398478 IP address blocks: 107.148.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4f:8f:9a:f9:70:74:ca:fe:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=2c43a2cf-3ef4-42bb-848d-8ba060a0be5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:41:75:30:05:5d:60:f3:a7:6c:02:8a:cd: 99:25:42:20:38:50:d9:f9:fb:b5:20:3d:4c:2a:e1: 3a:72:2d:19:93:55:c8:84:c3:1e:d5:e1:60:45:04: bd:71:f6:3e:3d:a5:23:2a:52:39:8e:7d:7a:9c:39: 21:08:48:04:97:d0:d7:af:9d:22:21:d5:ac:80:ef: 93:30:9f:13:b3:d7:01:64:16:b8:67:25:4d:0d:16: 40:8c:09:7b:99:dc:ac:ce:ec:3f:59:74:76:89:99: 0f:f8:fe:26:65:fb:3a:ac:1e:e4:c1:51:c5:7b:e2: ad:d9:38:6a:28:8e:82:25:14:7c:da:5d:25:71:12: bd:a1:a5:1b:19:3f:40:45:16:70:90:6f:09:4e:a5: 8e:cc:ec:42:6a:fd:c5:86:66:86:d7:10:b6:fd:62: c3:43:69:da:02:f8:cd:4e:f9:07:42:46:bd:47:79: 16:2f:41:8a:14:e5:24:76:35:18:ec:6d:7c:11:85: fc:6d:51:00:b4:2e:99:b4:69:b0:c1:be:5a:4e:a3: 01:e1:96:14:22:a2:cd:38:7b:0d:06:c3:05:56:9f: 32:fc:0e:6a:bf:59:3e:a7:0d:df:69:3c:86:e0:db: 88:02:87:d4:29:b6:31:84:ae:f5:9f:0e:b1:14:e0: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:E0:A5:1A:A3:37:95:71:DA:D8:9C:31:E1:ED:28:9B:6C:EE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1bdc5168-92a8-3f2b-b629-64a845dc5598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:85:f6:af:27:ba:80:a3:6b:18:87:3f:02:07:52:2a:d3:39: c3:30:0a:e5:f7:72:e4:10:14:39:22:aa:f4:8b:2e:80:43:ad: 32:6a:4d:e8:ca:92:83:17:3c:49:23:ea:6d:4a:cf:bb:c4:b0: 7c:07:85:ce:7e:3a:b3:91:03:68:d1:25:80:91:3d:6c:c1:2b: 0b:7c:9f:e3:ed:61:69:07:26:1d:95:c1:6c:0f:3c:2e:3d:d5: 58:48:33:00:13:99:f6:55:60:b6:5f:51:7d:fa:1e:c8:62:28: 54:54:d4:8e:c1:c9:bf:4c:15:f2:60:57:9c:1a:a4:8f:5d:3f: 46:30:75:31:73:d5:20:eb:a5:5e:05:d4:f2:e3:ce:68:03:1a: 0b:94:d6:48:2d:3f:96:80:61:42:d2:70:ba:4d:4f:eb:9b:a8: 9e:6a:d4:84:cd:9f:6c:9f:40:40:95:5a:2d:72:bc:5d:e1:56: 30:a7:c7:6f:eb:df:d1:18:d3:0a:40:3f:25:40:02:84:a1:cd: 6d:95:14:9a:4b:3d:b2:1e:94:9c:b6:7e:99:dc:71:c7:49:c1: 55:37:6d:95:74:0e:3a:47:6f:15:b1:2a:07:4d:cf:68:3d:b6: e7:d9:59:f7:be:e7:0c:19:ef:74:a0:8e:ed:5c:59:72:72:4c: 1c:e4:1a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5E+PmvlwdMr+xmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MmM0M2EyY2YtM2VmNC00MmJiLTg0OGQtOGJhMDYwYTBiZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBFBdTAFXWDzp2wCis2ZJUIgOFDZ+fu1ID1M KuE6ci0Zk1XIhMMe1eFgRQS9cfY+PaUjKlI5jn16nDkhCEgEl9DXr50iIdWsgO+T MJ8Ts9cBZBa4ZyVNDRZAjAl7mdyszuw/WXR2iZkP+P4mZfs6rB7kwVHFe+Kt2Thq KI6CJRR82l0lcRK9oaUbGT9ARRZwkG8JTqWOzOxCav3FhmaG1xC2/WLDQ2naAvjN TvkHQka9R3kWL0GKFOUkdjUY7G18EYX8bVEAtC6ZtGmwwb5aTqMB4ZYUIqLNOHsN BsMFVp8y/A5qv1k+pw3faTyG4NuIAofUKbYxhK71nw6xFOBeEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjo4KUaozeVcdrYnDHh7SibbO6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMWJkYzUxNjgtOTJhOC0z ZjJiLWI2MjktNjRhODQ1ZGM1NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuF9q8nuoCjaxiHPwIHUirTOcMwCuX3cuQQFDkiqvSLLoBDrTJqTejK koMXPEkj6m1Kz7vEsHwHhc5+OrORA2jRJYCRPWzBKwt8n+PtYWkHJh2VwWwPPC49 1VhIMwATmfZVYLZfUX36HshiKFRU1I7Byb9MFfJgV5wapI9dP0YwdTFz1SDrpV4F 1PLjzmgDGguU1kgtP5aAYULScLpNT+ubqJ5q1ITNn2yfQECVWi1yvF3hVjCnx2/r 39EY0wpAPyVAAoShzW2VFJpLPbIelJy2fpncccdJwVU3bZV0DjpHbxWxKgdNz2g9 tufZWfe+5wwZ73Sgju1cWXJyTBzkGpQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:46 2025 by rpki-client