$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa File: bc5293f9-eec2-3e58-9702-949d7af46509.roa (raw, json) Hash identifier: qmpyfDWkT1qUuG8kvdTNblXsaqaJs2dDvn5CYD0OfvQ= Subject key identifier: 0E:F3:73:A8:81:DD:FF:29:19:09:FD:E4:7A:BC:23:23:1D:CC:37:15 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F432858498B99D1E7ACE846E566706180 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 398823 IP address blocks: 107.149.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:d1:e7:ac:e8:46:e5:66:70:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=7fb3ce71-a028-49cc-805a-9c301dec4d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:cc:d9:7e:8e:e1:9c:1b:e7:2c:9f:8b:9c: 94:ec:47:ef:bc:0e:54:f2:46:90:23:29:c4:f5:ca: dd:4b:2b:39:50:3d:4c:2d:7e:7e:1c:75:f2:50:d3: 07:ca:dc:48:a6:3f:0b:e3:65:e4:dc:40:14:63:6d: d4:1d:e3:51:61:e6:14:40:37:aa:40:fa:d9:3a:2f: 64:cd:b6:39:3c:4d:e8:6e:14:70:43:8b:6d:0c:db: 81:a1:91:99:a1:4d:77:85:ec:ec:4a:06:51:fc:e0: 07:f5:b2:ef:d6:63:31:ac:30:38:8c:79:88:0e:de: b7:ce:86:8d:ea:0e:ab:31:b7:ac:19:7e:27:08:b6: 3d:99:34:bc:83:5c:ec:1f:bc:1f:25:90:0f:0f:af: 8e:67:7b:6b:f0:b7:30:8a:6a:40:93:77:53:ae:f6: e3:9f:b4:43:35:26:76:cf:46:1e:e8:da:da:f6:25: 39:20:b6:89:c2:89:a1:52:00:38:57:b9:63:76:d4: 14:fe:0d:a3:c7:09:a6:2b:22:d8:81:bc:9d:c3:05: 6a:91:e0:91:28:92:f3:67:13:a9:9f:fb:a7:cb:f8: 05:51:13:f8:30:9d:80:6b:ee:e2:44:84:97:df:12: 8b:c3:2e:0e:02:d8:d7:ff:3c:2f:20:bf:7f:59:d3: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F3:73:A8:81:DD:FF:29:19:09:FD:E4:7A:BC:23:23:1D:CC:37:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0b:6f:f6:46:7c:a8:22:70:d5:a5:e7:57:2d:70:d6:80:a4: 18:02:2e:7d:81:27:5f:d1:5e:36:f4:df:67:81:b0:66:e6:ea: f3:33:cb:7f:48:55:51:35:63:63:40:3f:5e:0f:ec:1f:8a:39: 41:39:e3:30:39:0b:87:42:5a:c7:52:ce:39:f5:8e:99:5d:68: bc:b0:6b:a8:f1:da:15:3d:30:5e:99:1c:47:9f:c8:72:95:62: ef:69:e1:49:7e:71:0a:55:c8:8c:75:43:78:e0:a2:2c:dd:4b: 33:33:9e:f4:dc:fa:e6:99:53:93:d3:9d:2a:b2:ff:cc:ab:98: b6:0f:e7:7f:3d:83:ab:f7:c0:fe:24:d3:00:e0:37:9e:71:5e: 50:9b:6e:e7:51:71:de:90:d6:d7:e4:7c:3d:b6:f9:1e:94:22: 26:21:65:ce:fc:2d:35:9d:da:af:e6:ce:c5:df:a7:df:43:f1: 4d:ca:46:86:9e:15:16:f8:b3:8c:41:56:f4:49:90:b6:7c:54: d9:76:6c:44:ee:77:b3:4f:24:c1:1a:74:16:74:0d:7b:df:04: 6c:ec:8e:d5:55:43:80:67:2c:a3:8e:c2:0b:22:5a:b6:a8:04: 2a:44:d8:ee:38:b3:ef:0f:90:78:da:a0:61:e4:ed:2a:d1:8f: 64:c8:29:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLmdHnrOhG5WZwYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk N2ZiM2NlNzEtYTAyOC00OWNjLTgwNWEtOWMzMDFkZWM0ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFvM2X6O4Zwb5yyfi5yU7EfvvA5U8kaQIynE 9crdSys5UD1MLX5+HHXyUNMHytxIpj8L42Xk3EAUY23UHeNRYeYUQDeqQPrZOi9k zbY5PE3obhRwQ4ttDNuBoZGZoU13hezsSgZR/OAH9bLv1mMxrDA4jHmIDt63zoaN 6g6rMbesGX4nCLY9mTS8g1zsH7wfJZAPD6+OZ3tr8LcwimpAk3dTrvbjn7RDNSZ2 z0Ye6Nra9iU5ILaJwomhUgA4V7ljdtQU/g2jxwmmKyLYgbydwwVqkeCRKJLzZxOp n/uny/gFURP4MJ2Aa+7iRISX3xKLwy4OAtjX/zwvIL9/WdPYpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7zc6iB3f8pGQn95Hq8IyMdzDcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYmM1MjkzZjktZWVjMi0z ZTU4LTk3MDItOTQ5ZDdhZjQ2NTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAULb/ZGfKgicNWl51ctcNaApBgCLn2BJ1/RXjb032eBsGbm6vMzy39I VVE1Y2NAP14P7B+KOUE54zA5C4dCWsdSzjn1jpldaLywa6jx2hU9MF6ZHEefyHKV Yu9p4Ul+cQpVyIx1Q3jgoizdSzMznvTc+uaZU5PTnSqy/8yrmLYP5389g6v3wP4k 0wDgN55xXlCbbudRcd6Q1tfkfD22+R6UIiYhZc78LTWd2q/mzsXfp99D8U3KRoae FRb4s4xBVvRJkLZ8VNl2bETud7NPJMEadBZ0DXvfBGzsjtVVQ4BnLKOOwgsiWrao BCpE2O44s+8PkHjaoGHk7SrRj2TIKQg= -----END CERTIFICATE-----Generated at Mon Apr 28 08:30:12 2025 by rpki-client