$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa File: f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa (raw, json) Hash identifier: Esr2WfV78a+Cku05PO9GSe9cLqc6kvf6MsYGMSGAHKQ= Subject key identifier: D6:E8:4F:7C:EA:DB:3B:B7:AD:3F:4D:C0:17:A0:89:73:04:D0:65:7E Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858499AF480BC07BAEDD95E5AD580 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 266820 IP address blocks: 107.166.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:80:bc:07:ba:ed:d9:5e:5a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=9a39e40e-82ee-42bb-9899-ff274964f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:92:a0:03:92:02:6d:b2:84:7d:1d:52:b2: 30:ea:a8:87:08:7f:c6:49:89:db:bb:83:6d:16:aa: 7a:c0:db:9f:c6:66:2c:9d:2b:70:7e:24:63:26:cf: ba:73:e6:99:89:30:de:39:29:39:89:64:b9:bb:23: 97:6f:d2:2c:7b:68:06:67:c6:02:e2:af:2a:6d:76: 29:65:93:eb:0b:ed:34:27:ad:59:e9:10:b1:a7:0e: 35:c5:d7:8f:b1:9b:85:23:cb:f1:b6:9c:4c:21:dc: 52:0d:ae:fc:13:31:74:ba:e5:60:3d:d5:9c:e1:4e: f6:9f:46:0d:77:01:15:5e:df:3e:b0:d1:89:50:c1: d6:06:3c:d2:20:00:cd:0b:0f:e8:0f:66:5a:b7:96: 42:9e:4d:3f:6c:65:bc:ad:57:27:9e:79:bd:10:92: 1d:aa:03:40:1d:9a:49:6f:ee:2c:82:5b:80:8a:1c: f9:08:0a:44:6d:80:99:10:62:6c:07:ed:c6:25:9a: dc:b0:4b:97:ed:50:64:cd:36:c7:68:07:2a:10:a9: b0:02:db:d5:e4:97:88:c0:d0:19:58:c0:58:51:d2: 02:c9:b9:23:10:5b:63:67:05:f5:85:3b:34:47:2d: 23:60:0b:af:f7:16:4a:f9:69:ab:b0:0c:7c:96:2e: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:4F:7C:EA:DB:3B:B7:AD:3F:4D:C0:17:A0:89:73:04:D0:65:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f2c43a6f-3a97-3978-b7ce-83d35f1e0ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 107.166.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:10:a3:02:5f:32:78:da:bd:6d:7e:c0:e0:c2:fe:15:15: 97:7b:24:bb:ad:89:2e:1f:0b:8c:f2:3c:e3:5d:a5:e5:49:14: 0e:49:50:45:ce:ac:e4:a7:80:5e:df:ac:f6:e3:ef:b2:9f:75: 07:42:1c:4e:2a:7d:69:d5:30:dd:9a:db:f3:b4:01:08:29:1c: 49:b3:c1:d1:79:32:85:12:f9:af:bb:a3:d8:b9:c6:a2:28:24: 22:ad:f0:c9:1c:4f:00:9b:91:14:d0:99:67:b6:72:7f:cb:e1: b2:13:41:1c:cf:5f:10:ad:df:d0:44:e3:22:e1:dc:65:7d:49: 21:8d:3d:08:f7:ae:07:34:10:ac:13:ac:ac:ab:0e:cd:89:ac: 3a:4e:3a:3c:b3:05:11:09:61:1f:18:6c:fe:5b:5d:3f:06:ef: a8:1c:a8:de:1a:bb:d0:b6:61:38:e7:4e:b4:1f:dc:ec:7f:54: 7c:9f:9e:2f:ac:b1:a2:55:5c:71:63:61:83:0d:dc:36:92:84: e1:1d:55:75:21:bd:57:2c:c6:a6:76:97:8c:a3:bb:a7:5d:77: 2d:35:0f:a1:d3:a4:a3:4a:01:57:c7:48:e9:ee:81:73:ba:cc: 8f:bc:f0:4a:48:41:bf:1c:9f:7c:2c:34:0b:62:bc:b7:ba:44: 4e:97:e5:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IC8B7rt2V5a1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OWEzOWU0MGUtODJlZS00MmJiLTk4OTktZmYyNzQ5NjRmNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwGSoAOSAm2yhH0dUrIw6qiHCH/GSYnbu4Nt Fqp6wNufxmYsnStwfiRjJs+6c+aZiTDeOSk5iWS5uyOXb9Ise2gGZ8YC4q8qbXYp ZZPrC+00J61Z6RCxpw41xdePsZuFI8vxtpxMIdxSDa78EzF0uuVgPdWc4U72n0YN dwEVXt8+sNGJUMHWBjzSIADNCw/oD2Zat5ZCnk0/bGW8rVcnnnm9EJIdqgNAHZpJ b+4sgluAihz5CApEbYCZEGJsB+3GJZrcsEuX7VBkzTbHaAcqEKmwAtvV5JeIwNAZ WMBYUdICybkjEFtjZwX1hTs0Ry0jYAuv9xZK+WmrsAx8li44CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNboT3zq2zu3rT9NwBegiXME0GV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZjJjNDNhNmYtM2E5Ny0z OTc4LWI3Y2UtODNkMzVmMWUwZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6YEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZmEKMCXzJ42r1tfsDgwv4VFZd7JLutiS4fC4zyPONdpeVJFA5JUEXO rOSngF7frPbj77KfdQdCHE4qfWnVMN2a2/O0AQgpHEmzwdF5MoUS+a+7o9i5xqIo JCKt8MkcTwCbkRTQmWe2cn/L4bITQRzPXxCt39BE4yLh3GV9SSGNPQj3rgc0EKwT rKyrDs2JrDpOOjyzBREJYR8YbP5bXT8G76gcqN4au9C2YTjnTrQf3Ox/VHyfni+s saJVXHFjYYMN3DaShOEdVXUhvVcsxqZ2l4yju6dddy01D6HTpKNKAVfHSOnugXO6 zI+88EpIQb8cn3wsNAtivLe6RE6X5Yg= -----END CERTIFICATE-----Generated at Wed Apr 30 21:24:46 2025 by rpki-client