$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa File: a6447836-c53d-3cdf-ab2a-c3db72297447.roa (raw, json) Hash identifier: 2DejWYsS28abczL0k3/92l98I18UGxiNfMhfg9MIsOw= Subject key identifier: B2:B2:A4:E9:02:DC:DF:32:34:27:FB:0D:01:57:B2:4A:95:4A:A7:35 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285849350EA5CB5B7FB0DE9435BA00 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 398993 IP address blocks: 107.148.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a5:cb:5b:7f:b0:de:94:35:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=0040263d-2b26-4e88-8fc2-9fe09773c6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:95:41:45:41:35:03:3e:84:ae:5a:0a:8b: ac:f9:db:7f:1a:8d:91:b5:06:87:3d:ce:59:be:5c: d6:14:cf:78:c3:46:60:6e:ab:3d:4a:dc:d5:75:74: d7:76:dc:11:fb:0f:3a:28:1c:ec:66:d9:52:4e:04: 5f:bf:25:ac:4e:70:b4:44:01:bc:cf:db:ce:73:83: 33:fa:01:f5:d5:b5:10:46:8c:3d:a2:50:b7:1f:64: 75:e8:79:46:8a:de:59:4f:5e:48:04:7a:fe:81:17: bb:5b:67:c1:e7:1e:2c:dd:86:36:f4:dd:a0:b3:3d: ad:fe:ef:a7:83:fc:e5:33:ff:d3:56:b2:2a:e9:e1: d3:00:27:6d:a5:7f:c8:b4:52:27:82:63:d6:9f:b7: 34:58:0c:ba:22:64:20:1d:2d:26:ef:b7:dd:f2:6f: 11:ca:45:63:5f:a8:51:ed:3c:ba:a3:85:d5:50:29: 50:93:40:d2:d3:b9:fa:40:8c:03:f9:9b:7e:69:0a: 85:ed:54:1c:b5:95:43:d5:43:bf:3b:05:57:37:37: 7a:ed:89:b8:3b:a8:44:f2:0b:8b:21:9e:a9:7f:77: 12:a2:3f:e7:97:e2:66:8f:c3:6a:38:b9:47:86:a0: df:ce:0c:ad:60:a5:2f:ab:f8:db:be:2c:62:49:91: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B2:A4:E9:02:DC:DF:32:34:27:FB:0D:01:57:B2:4A:95:4A:A7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:de:97:ca:ef:72:0f:aa:99:e0:96:c6:78:0d:c7:9e:1f:4d: 6f:28:13:2d:6d:15:84:3b:89:3d:98:6f:14:19:66:d3:14:b2: 3e:d7:fe:fd:54:0d:38:70:8f:fa:1e:43:6a:32:5c:29:1d:ed: e6:dc:89:e7:35:1c:82:a2:33:11:e2:d9:a0:33:79:05:08:1a: c3:e6:96:9a:86:1c:b5:3f:ed:6c:18:85:96:06:ba:ff:81:7a: 55:23:71:36:0b:ed:c0:7c:5d:c3:a1:c7:89:53:13:2e:95:db: 07:8d:36:aa:69:57:7e:f9:95:17:4e:36:01:13:e9:16:d2:e2: 4e:a3:4f:5c:2c:f9:0b:4d:db:38:29:64:d5:43:fa:60:78:78: 36:ca:45:18:80:b4:ba:ae:1c:a8:89:1f:c7:0f:de:8b:e0:27: 67:69:cd:9c:3e:40:f4:b9:ac:4b:77:69:13:99:80:fa:ee:71: 69:c0:1d:30:96:cc:5e:6d:5e:22:01:72:08:24:dd:01:f8:c9: 5d:73:27:42:2a:4d:d9:ad:02:39:1e:a8:de:24:f8:d6:36:a2: a0:16:be:ee:aa:48:16:28:18:65:86:3d:f2:13:32:80:aa:2d: 94:fc:57:de:0c:69:09:57:19:7f:96:e3:d5:a6:e0:8f:f7:dd: 75:c9:96:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqXLW3+w3pQ1ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDA0MDI2M2QtMmIyNi00ZTg4LThmYzItOWZlMDk3NzNjNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16GVQUVBNQM+hK5aCous+dt/Go2RtQaHPc5Z vlzWFM94w0Zgbqs9StzVdXTXdtwR+w86KBzsZtlSTgRfvyWsTnC0RAG8z9vOc4Mz +gH11bUQRow9olC3H2R16HlGit5ZT15IBHr+gRe7W2fB5x4s3YY29N2gsz2t/u+n g/zlM//TVrIq6eHTACdtpX/ItFIngmPWn7c0WAy6ImQgHS0m77fd8m8RykVjX6hR 7Ty6o4XVUClQk0DS07n6QIwD+Zt+aQqF7VQctZVD1UO/OwVXNzd67Ym4O6hE8guL IZ6pf3cSoj/nl+Jmj8NqOLlHhqDfzgytYKUvq/jbvixiSZFT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKypOkC3N8yNCf7DQFXskqVSqc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTY0NDc4MzYtYzUzZC0z Y2RmLWFiMmEtYzNkYjcyMjk3NDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDel8rvcg+qmeCWxngNx54fTW8oEy1tFYQ7iT2YbxQZZtMUsj7X/v1U DThwj/oeQ2oyXCkd7ebciec1HIKiMxHi2aAzeQUIGsPmlpqGHLU/7WwYhZYGuv+B elUjcTYL7cB8XcOhx4lTEy6V2weNNqppV375lRdONgET6RbS4k6jT1ws+QtN2zgp ZNVD+mB4eDbKRRiAtLquHKiJH8cP3ovgJ2dpzZw+QPS5rEt3aROZgPrucWnAHTCW zF5tXiIBcggk3QH4yV1zJ0IqTdmtAjkeqN4k+NY2oqAWvu6qSBYoGGWGPfITMoCq LZT8V94MaQlXGX+W49Wm4I/33XXJlhE= -----END CERTIFICATE-----Generated at Mon Apr 28 02:09:02 2025 by rpki-client