$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa File: f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa (raw, json) Hash identifier: 2bWdyRUEOJ501eR9K385ofblQNjyfOcMznErelhomr0= Subject key identifier: 76:2E:B0:58:DD:01:77:79:15:2D:95:93:8E:75:87:F8:28:F8:EF:B1 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F432858499DBF292B8B158984E1C691C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 398993 IP address blocks: 104.233.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:29:2b:8b:15:89:84:e1:c6:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=8d05a6b3-03c9-4ab8-a5ab-d03efda9bda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:fe:b6:3f:fb:5a:e2:56:48:91:7a:9f:4e: bf:37:34:55:04:7f:0c:8f:cb:81:c5:37:01:79:59: ec:5b:af:2b:10:93:fc:34:b0:5d:40:f8:72:33:47: d4:f9:b3:1c:98:89:80:2c:35:fd:fb:d2:eb:cb:fc: 2e:0f:41:61:ad:9b:3b:80:0b:28:ec:f3:34:1e:c2: 9e:3f:10:39:16:74:86:7f:39:35:66:f8:1e:4f:ae: 80:e5:c1:db:0f:58:c1:f2:0d:d8:3f:14:83:f1:1f: 21:23:a1:3c:d9:29:04:64:73:4e:3c:ed:24:c4:71: 11:ce:46:f6:65:78:40:0e:e4:e3:f2:43:87:70:aa: 67:bf:8c:a7:bc:32:19:30:51:60:ad:40:e0:f5:3d: d4:1a:db:b4:3f:0c:f7:ef:20:5e:18:b9:04:a2:b6: ec:66:0f:e0:fa:61:bb:c2:3d:c7:b4:aa:39:b8:b1: af:76:a8:16:91:af:34:d4:c3:48:36:09:da:83:61: 88:c3:04:a2:92:55:0b:46:38:c5:79:04:01:4e:40: 2c:ac:c0:e2:59:88:f3:84:fa:9e:2c:bf:d7:eb:1c: c4:87:06:52:90:07:c0:ef:bf:f2:d8:07:ae:30:d5: 6c:5d:7d:11:49:31:b4:1c:d2:d3:91:9e:a8:d6:6d: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:B0:58:DD:01:77:79:15:2D:95:93:8E:75:87:F8:28:F8:EF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:a7:ff:a5:fc:3b:6d:3f:41:9b:43:8b:9d:1a:29:a1:f4: 1a:a7:a0:da:46:1e:d7:64:d3:1e:7a:c6:f5:88:cd:bd:b6:2b: ec:78:43:06:a4:88:ba:74:fc:a2:4a:bc:81:d9:83:ca:ed:db: 8e:46:7b:68:7c:d0:a6:de:4e:9b:25:46:b2:08:e5:b4:05:f2: 67:80:f6:60:39:c1:aa:1f:fc:1b:2a:35:2a:b4:b9:2f:ef:f6: e6:91:02:1a:63:d4:b8:01:5e:bd:2f:76:e1:23:a5:39:6b:fe: 94:c5:49:c0:a1:b8:dc:b2:07:a5:48:8b:b4:b3:8c:e3:e3:87: d0:d9:fe:cc:80:be:45:92:70:50:fc:7f:c3:ff:f6:f9:8f:6d: c4:e1:b9:0b:0a:e4:43:bf:45:43:46:40:7e:be:a7:96:94:22: cc:b7:0a:4b:9a:4c:0c:73:69:3c:1b:79:37:01:ac:16:c9:2e: 9e:58:d9:14:c8:45:32:af:c2:22:40:28:0f:56:0b:80:54:ae: 29:41:2b:ef:e5:bf:43:32:9d:7e:11:57:4c:e4:69:35:a6:01: 0d:94:79:19:61:14:b4:26:1a:03:e7:56:6f:93:c6:e0:b9:8a: a5:ac:29:a0:c2:26:38:79:41:ac:bc:f2:4f:e2:f9:fb:fc:35: 59:0c:62:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvykrixWJhOHGkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OGQwNWE2YjMtMDNjOS00YWI4LWE1YWItZDAzZWZkYTliZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgj+tj/7WuJWSJF6n06/NzRVBH8Mj8uBxTcB eVnsW68rEJP8NLBdQPhyM0fU+bMcmImALDX9+9Lry/wuD0FhrZs7gAso7PM0HsKe PxA5FnSGfzk1ZvgeT66A5cHbD1jB8g3YPxSD8R8hI6E82SkEZHNOPO0kxHERzkb2 ZXhADuTj8kOHcKpnv4ynvDIZMFFgrUDg9T3UGtu0Pwz37yBeGLkEorbsZg/g+mG7 wj3HtKo5uLGvdqgWka801MNINgnag2GIwwSiklULRjjFeQQBTkAsrMDiWYjzhPqe LL/X6xzEhwZSkAfA77/y2AeuMNVsXX0RSTG0HNLTkZ6o1m0TTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYusFjdAXd5FS2Vk451h/go+O+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZjEzM2Q2MTktMGFlNS0z MTJhLThkMmYtZjBjMWJlZjE1ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZLp/+l/DttP0GbQ4udGimh9BqnoNpGHtdk0x56xvWIzb22K+x4Qwak iLp0/KJKvIHZg8rt245Ge2h80KbeTpslRrII5bQF8meA9mA5waof/BsqNSq0uS/v 9uaRAhpj1LgBXr0vduEjpTlr/pTFScChuNyyB6VIi7SzjOPjh9DZ/syAvkWScFD8 f8P/9vmPbcThuQsK5EO/RUNGQH6+p5aUIsy3CkuaTAxzaTwbeTcBrBbJLp5Y2RTI RTKvwiJAKA9WC4BUrilBK+/lv0MynX4RV0zkaTWmAQ2UeRlhFLQmGgPnVm+TxuC5 iqWsKaDCJjh5Qay88k/i+fv8NVkMYnk= -----END CERTIFICATE-----Generated at Mon Apr 28 00:52:24 2025 by rpki-client