$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa File: 21d91634-ee8c-3230-ab5c-baf16e713980.roa (raw, json) Hash identifier: 8zzoy8EfY7COtcib9RPFSVxuFY4B6I+ycFV/0pq1Uvs= Subject key identifier: 89:3E:76:93:C7:AE:40:FA:75:E9:A0:D1:F7:E6:F6:4C:82:E4:79:3C Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849071BE702396387E0AA1C6780 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 12076 IP address blocks: 151.207.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e7:02:39:63:87:e0:aa:1c:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=65a797d2-36a7-49ea-a125-759e5b3b36ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:92:5a:7a:90:ce:3f:40:bd:be:c0:fd:5f: f5:d9:0d:b1:a1:49:c3:0f:61:3b:69:2a:43:47:93: a6:8b:95:31:a1:d2:a2:f3:06:d3:3d:47:32:d4:8f: 39:2b:cf:25:06:3d:1e:1b:bd:c9:b4:07:5f:89:7f: d7:a6:d5:7c:31:bf:07:f3:fa:8c:9e:cd:d5:c7:53: fd:c2:78:db:11:49:80:ef:1e:c0:66:94:cc:9c:19: 7b:f7:a6:9f:e7:dc:c8:9d:eb:15:88:40:3a:28:b0: f4:b7:b8:99:a7:06:9e:60:ad:1c:25:da:92:3b:a9: 10:fd:90:34:14:29:68:39:8b:43:ea:97:1a:d1:77: f4:34:52:d3:7a:d0:ae:31:8f:e4:cc:ee:4e:35:9b: 1e:a3:04:cf:21:f9:26:a8:5f:79:9f:7a:0c:7a:d2: 94:8a:10:94:40:58:17:e2:4b:a7:75:74:fc:11:0e: 59:33:ea:de:00:66:1b:5d:21:14:83:8a:a2:88:0c: 7d:68:8d:a9:f2:a9:b1:2b:15:6f:6b:b8:4b:11:4c: 3c:f0:4d:87:8b:4c:3c:3c:30:92:b2:5d:34:46:a3: cf:91:c2:85:84:d3:33:1f:27:c6:f3:f3:19:ed:97: e0:43:a2:63:e0:c9:94:d3:18:29:a1:95:84:59:1f: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3E:76:93:C7:AE:40:FA:75:E9:A0:D1:F7:E6:F6:4C:82:E4:79:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/21d91634-ee8c-3230-ab5c-baf16e713980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:39:a4:8f:6a:28:23:d6:8c:b1:a0:e5:56:8f:92:57:aa:31: 8c:3c:38:b8:f9:01:42:f1:04:8c:2c:0d:4a:8d:9a:2e:0b:b7: ff:6d:af:c2:ac:66:cb:55:4f:0b:05:db:13:63:25:48:5a:3f: f8:e8:1a:48:c5:10:21:57:b0:f5:ed:71:0e:5c:7c:a2:2c:aa: 59:80:eb:3e:f2:9d:3d:0e:fb:48:07:ac:1b:55:ac:27:9d:87: 98:f4:05:80:93:44:0e:d7:8d:84:ab:e0:2c:5f:5d:ad:0a:79: 92:de:b0:c5:d5:5e:22:3c:4d:e2:47:df:71:f8:99:63:e5:17: ae:59:a6:5f:e0:ad:f3:29:bd:e9:a8:bc:18:d4:a7:67:db:af: fb:c8:86:41:62:66:b8:ee:47:9e:a4:25:bb:de:1e:17:71:e0: eb:80:e0:84:92:93:05:97:71:3a:37:e9:b4:34:c8:a6:b5:01: bd:f1:12:c0:b0:ac:77:81:c6:c4:60:24:62:38:d7:75:33:d2: 91:65:a9:b9:4c:6b:d3:29:c6:03:83:c6:08:e7:d8:9d:f8:2c: b0:32:47:86:ca:39:24:83:4e:e2:e2:cd:d5:53:b0:89:32:31: 62:81:5c:2f:fe:df:68:f9:c4:32:a2:67:ce:68:8e:84:4c:52: 01:d3:3c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+cCOWOH4KocZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk NjVhNzk3ZDItMzZhNy00OWVhLWExMjUtNzU5ZTViM2IzNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwWSWnqQzj9Avb7A/V/12Q2xoUnDD2E7aSpD R5Omi5UxodKi8wbTPUcy1I85K88lBj0eG73JtAdfiX/XptV8Mb8H8/qMns3Vx1P9 wnjbEUmA7x7AZpTMnBl796af59zInesViEA6KLD0t7iZpwaeYK0cJdqSO6kQ/ZA0 FCloOYtD6pca0Xf0NFLTetCuMY/kzO5ONZseowTPIfkmqF95n3oMetKUihCUQFgX 4kundXT8EQ5ZM+reAGYbXSEUg4qiiAx9aI2p8qmxKxVva7hLEUw88E2Hi0w8PDCS sl00RqPPkcKFhNMzHyfG8/MZ7ZfgQ6Jj4MmU0xgpoZWEWR++NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk+dpPHrkD6demg0ffm9kyC5Hk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvMjFkOTE2MzQtZWU4Yy0z MjMwLWFiNWMtYmFmMTZlNzEzOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl88sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo5pI9qKCPWjLGg5VaPkleqMYw8OLj5AULxBIwsDUqNmi4Lt/9tr8Ks ZstVTwsF2xNjJUhaP/joGkjFECFXsPXtcQ5cfKIsqlmA6z7ynT0O+0gHrBtVrCed h5j0BYCTRA7XjYSr4CxfXa0KeZLesMXVXiI8TeJH33H4mWPlF65Zpl/grfMpvemo vBjUp2fbr/vIhkFiZrjuR56kJbveHhdx4OuA4ISSkwWXcTo36bQ0yKa1Ab3xEsCw rHeBxsRgJGI413Uz0pFlqblMa9MpxgODxgjn2J34LLAyR4bKOSSDTuLizdVTsIky MWKBXC/+32j5xDKiZ85ojoRMUgHTPOM= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:58 2025 by rpki-client