$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa File: cd2283ac-61d4-35e2-a161-6260ba6bd153.roa (raw, json) Hash identifier: yj9aaHbkhAzCiW8qzVXeOCY8x8f82NU/MF6fkcSZl8Q= Subject key identifier: 0C:47:04:57:B2:5F:9F:DA:8B:73:42:D5:9F:B6:67:6A:5B:F9:1A:83 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F43285849071BEAC9DEF1ECFE37648940 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 3477 IP address blocks: 151.207.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:ea:c9:de:f1:ec:fe:37:64:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=e727d84e-d8d3-429e-9162-22a8be50e8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:1a:2a:6e:2e:fa:53:d6:65:e0:04:0c:ba: 89:9d:52:6c:71:7a:2f:10:64:25:2c:50:ba:29:1a: 0e:15:74:90:d2:51:9b:0d:89:db:bb:d0:a8:a0:92: 22:21:ce:a5:dd:b9:10:de:d2:49:e2:bf:39:aa:2e: 86:19:58:70:ed:32:82:66:2b:98:d3:c4:30:e5:b0: e0:49:37:44:51:d2:68:80:b7:cb:d6:bd:32:8b:24: b6:59:67:5a:41:0a:b6:d1:77:0c:f9:2f:cf:72:95: 07:c6:c0:78:97:8b:b0:d0:ec:a6:61:d6:3f:7d:af: 01:86:fb:21:07:78:cd:2f:c2:c9:dd:5f:7f:8b:3a: 2c:08:99:71:8c:14:8e:c6:0e:8b:5b:17:7b:a4:77: 92:58:86:31:25:b6:df:91:e6:d8:b0:70:bc:c3:86: 89:96:9c:a8:d2:9d:94:72:6e:ec:d3:a8:54:24:26: 9c:21:c4:1a:8b:f8:17:87:f4:1c:03:30:2d:61:de: 5d:15:3b:ac:44:17:97:ae:1a:c2:cd:71:cb:62:bd: c7:c4:b7:72:96:c7:bd:0e:d3:cb:1b:50:bc:3d:aa: ff:5f:77:71:9d:35:c3:5a:7a:a7:24:92:00:e9:8a: a7:3e:1f:dd:c8:ef:5e:82:79:f9:43:42:b8:e2:34: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:47:04:57:B2:5F:9F:DA:8B:73:42:D5:9F:B6:67:6A:5B:F9:1A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/cd2283ac-61d4-35e2-a161-6260ba6bd153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:50:d7:f5:7e:0c:e0:91:ef:16:d3:43:84:b8:89:fa:55:07: f1:fa:d5:6c:b8:66:a8:9f:3e:ef:55:ef:74:83:fb:45:f1:3f: ad:47:1e:09:7b:cf:10:cf:c2:d2:68:7e:34:6b:c7:c6:f2:ed: 5d:30:19:eb:86:57:9c:1e:4b:e4:79:51:d0:cc:8d:62:7f:8d: f2:92:71:73:79:a9:ae:87:01:75:18:5b:1f:b7:4b:94:e3:72: 4e:22:95:4e:4f:1f:d2:ed:7b:3f:7b:8c:8e:7a:1c:fa:09:c8: 79:66:fb:49:9b:ea:79:bb:2d:fb:58:83:42:b1:7f:25:ce:95: dc:f1:1d:16:7a:51:bd:a2:94:52:90:42:85:6b:17:a4:be:77: 5f:b5:1b:ba:fc:9d:8d:9d:8d:23:9b:60:2e:ac:c8:0a:f1:c3: 3f:d9:4f:67:b3:9c:eb:94:03:1c:c3:23:4e:96:ad:43:91:2a: 36:06:48:73:8f:27:4c:db:04:ca:38:d3:c4:a8:c5:28:53:ae: 55:85:6a:9d:4b:05:b0:0b:e3:25:70:46:ba:aa:aa:d7:c1:44: 2a:3e:09:a2:48:a7:2c:d9:01:a5:e7:63:0f:2c:5a:9b:3b:77: 8d:f0:82:84:a1:46:3c:51:a0:d8:45:16:e4:15:04:3e:58:c6: 76:ac:db:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+rJ3vHs/jdkiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZTcyN2Q4NGUtZDhkMy00MjllLTkxNjItMjJhOGJlNTBlOGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlwaKm4u+lPWZeAEDLqJnVJscXovEGQlLFC6 KRoOFXSQ0lGbDYnbu9CooJIiIc6l3bkQ3tJJ4r85qi6GGVhw7TKCZiuY08Qw5bDg STdEUdJogLfL1r0yiyS2WWdaQQq20XcM+S/PcpUHxsB4l4uw0OymYdY/fa8Bhvsh B3jNL8LJ3V9/izosCJlxjBSOxg6LWxd7pHeSWIYxJbbfkebYsHC8w4aJlpyo0p2U cm7s06hUJCacIcQai/gXh/QcAzAtYd5dFTusRBeXrhrCzXHLYr3HxLdylse9DtPL G1C8Par/X3dxnTXDWnqnJJIA6YqnPh/dyO9egnn5Q0K44jS57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxHBFeyX5/ai3NC1Z+2Z2pb+RqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvY2QyMjgzYWMtNjFkNC0z NWUyLWExNjEtNjI2MGJhNmJkMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl88MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBQ1/V+DOCR7xbTQ4S4ifpVB/H61Wy4ZqifPu9V73SD+0XxP61HHgl7 zxDPwtJofjRrx8by7V0wGeuGV5weS+R5UdDMjWJ/jfKScXN5qa6HAXUYWx+3S5Tj ck4ilU5PH9Ltez97jI56HPoJyHlm+0mb6nm7LftYg0KxfyXOldzxHRZ6Ub2ilFKQ QoVrF6S+d1+1G7r8nY2djSObYC6syArxwz/ZT2eznOuUAxzDI06WrUORKjYGSHOP J0zbBMo408SoxShTrlWFap1LBbAL4yVwRrqqqtfBRCo+CaJIpyzZAaXnYw8sWps7 d43wgoShRjxRoNhFFuQVBD5Yxnas2w0= -----END CERTIFICATE-----Generated at Mon Apr 28 14:29:11 2025 by rpki-client