$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9e77a642-12a8-3747-9e78-3d391c40069d.roa File: 9e77a642-12a8-3747-9e78-3d391c40069d.roa (raw, json) Hash identifier: N3TZVyMx1GQyGSDs+FwMXsM+hYqO6ER16BZNszPUqj0= Subject key identifier: 7E:E1:8C:92:D7:4E:FF:42:60:FB:26:71:83:71:51:74:E1:14:95:05 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285849A61F40E5F387F974BD2E0280 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9e77a642-12a8-3747-9e78-3d391c40069d.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 398993 IP address blocks: 104.233.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:40:e5:f3:87:f9:74:bd:2e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=3d00ad98-7a3e-4c59-98cf-6d67bf3cce05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:04:c8:e4:ed:c3:6f:c8:d5:75:1d:78:84: 13:06:3f:a3:ac:05:5e:bf:8b:6e:ca:ff:02:1f:86: a7:ff:2b:cf:67:6b:39:1a:50:16:ed:bc:67:0e:81: 0c:97:63:5e:c5:78:79:0d:49:df:20:4e:b6:1f:86: 0b:45:6a:62:13:62:75:f1:0d:95:be:2a:9f:bb:95: 52:54:25:c5:0a:de:32:aa:53:4f:b5:3a:7a:d0:e7: ce:95:1d:a3:3b:49:8a:54:a4:86:9e:da:39:31:ec: 10:15:22:80:99:b7:41:95:ef:b2:5f:8e:30:83:89: 3c:ee:b1:7e:e0:43:fa:b2:0d:91:12:8d:02:37:a2: 5b:72:78:f0:64:03:89:51:76:c3:b8:d4:e2:63:96: f2:91:44:48:b2:8a:21:c4:ec:36:7f:5c:2e:c2:9e: 98:8c:d8:e0:b6:27:39:83:72:82:5c:9a:c8:55:ef: 2c:93:42:2a:18:65:d5:5c:6b:be:66:ca:92:15:50: 58:ae:6f:6c:17:db:a4:86:53:ed:44:f8:77:89:62: ea:fe:e0:46:34:f9:24:a0:ee:29:aa:3f:29:2b:1a: 2d:7e:b5:99:1f:92:c9:c5:fa:cb:31:fc:ba:2d:80: c5:6e:b9:fd:92:50:73:86:e8:e0:1a:20:17:49:0f: 1d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:8C:92:D7:4E:FF:42:60:FB:26:71:83:71:51:74:E1:14:95:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/9e77a642-12a8-3747-9e78-3d391c40069d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a7:36:d2:2a:8c:1a:1f:44:3b:4c:82:0f:41:1b:10:cd:cd: 19:b9:34:83:58:c5:80:3e:9a:39:3a:92:f6:2a:68:fc:42:ed: b9:79:59:c6:37:d1:1e:21:29:d3:2c:72:7a:8b:da:3c:a6:62: 97:2b:aa:08:5b:68:00:fe:5a:39:46:5a:22:50:1b:9e:81:be: ec:3b:17:97:cd:dc:49:b7:a1:76:c3:c5:96:51:34:8c:d3:5e: f2:77:ca:ff:62:0f:d5:bf:99:cc:52:62:fc:1f:5e:1e:32:a9: 21:d3:c5:07:64:f1:a6:a2:cc:5f:b4:f1:02:92:2a:a4:a6:a6: 63:c0:22:a5:eb:24:f1:e9:b4:ea:c0:b3:85:fb:35:27:91:d7: 88:70:20:46:73:fc:85:7f:73:47:b3:89:e0:84:ae:56:11:eb: 4b:91:ef:26:ea:c0:80:25:b7:f5:09:6c:d6:38:fc:2e:7f:52: f2:3d:66:16:cf:e5:d0:87:48:56:08:11:28:fa:e6:c2:69:2a: d8:78:16:b7:e7:63:90:24:12:a2:f1:99:8c:ab:3a:ab:0a:f6: a5:f8:07:38:e9:d6:1f:55:dc:3e:68:0e:42:b4:48:dd:ff:23: e7:a9:87:44:93:6c:cd:52:d8:90:4c:25:4c:c9:1f:28:e7:70: 4d:ac:a1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0Dl84f5dL0uAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk M2QwMGFkOTgtN2EzZS00YzU5LTk4Y2YtNmQ2N2JmM2NjZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlToEyOTtw2/I1XUdeIQTBj+jrAVev4tuyv8C H4an/yvPZ2s5GlAW7bxnDoEMl2NexXh5DUnfIE62H4YLRWpiE2J18Q2Vviqfu5VS VCXFCt4yqlNPtTp60OfOlR2jO0mKVKSGnto5MewQFSKAmbdBle+yX44wg4k87rF+ 4EP6sg2REo0CN6JbcnjwZAOJUXbDuNTiY5bykURIsoohxOw2f1wuwp6YjNjgtic5 g3KCXJrIVe8sk0IqGGXVXGu+ZsqSFVBYrm9sF9ukhlPtRPh3iWLq/uBGNPkkoO4p qj8pKxotfrWZH5LJxfrLMfy6LYDFbrn9klBzhujgGiAXSQ8dWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7hjJLXTv9CYPsmcYNxUXThFJUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvOWU3N2E2NDItMTJhOC0z NzQ3LTllNzgtM2QzOTFjNDAwNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOmmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFenNtIqjBofRDtMgg9BGxDNzRm5NINYxYA+mjk6kvYqaPxC7bl5WcY3 0R4hKdMscnqL2jymYpcrqghbaAD+WjlGWiJQG56Bvuw7F5fN3Em3oXbDxZZRNIzT XvJ3yv9iD9W/mcxSYvwfXh4yqSHTxQdk8aaizF+08QKSKqSmpmPAIqXrJPHptOrA s4X7NSeR14hwIEZz/IV/c0ezieCErlYR60uR7ybqwIAlt/UJbNY4/C5/UvI9ZhbP 5dCHSFYIESj65sJpKth4FrfnY5AkEqLxmYyrOqsK9qX4Bzjp1h9V3D5oDkK0SN3/ I+eph0STbM1S2JBMJUzJHyjncE2soYA= -----END CERTIFICATE-----Generated at Mon Apr 28 00:44:40 2025 by rpki-client