$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/947d5dd2-fc61-3e72-8d06-aacbcc168ca1.roa File: 947d5dd2-fc61-3e72-8d06-aacbcc168ca1.roa (raw, json) Hash identifier: 5mES9SF9hUW8w4WpOZ0aeYk4BRq15d07X4q4LlYKKm0= Subject key identifier: A2:D1:B4:42:8E:24:40:DF:73:A1:8B:D6:FB:12:74:F0:32:8E:45:E5 Certificate issuer: /CN=b93a0e00-9040-44f1-b95b-7f094433ae50 Certificate serial: 010D0C9F432858499AF47A623D906D8E52684630 Authority key identifier: 82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/947d5dd2-fc61-3e72-8d06-aacbcc168ca1.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 13820 IP address blocks: 107.161.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:7a:62:3d:90:6d:8e:52:68:46:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b93a0e00-9040-44f1-b95b-7f094433ae50 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=1642eb65-3fa8-45d8-8b73-04ee4c8077c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:ef:73:9a:33:24:de:e6:e1:8e:5d:47:5b: 1a:35:93:fa:bc:9c:df:af:83:98:c0:7e:89:3a:2c: c9:8c:33:75:11:f4:05:24:07:fe:4a:80:5e:15:e5: be:0e:78:ac:d7:9e:80:40:7a:ec:12:5c:77:80:ed: 9a:84:fa:cd:fd:06:59:9a:64:d9:57:da:4d:9b:9d: 97:15:2b:f2:8c:95:44:29:1a:67:63:da:cc:c4:20: 45:62:5e:9f:2e:dd:15:3f:8d:fb:9d:ab:41:95:1d: 12:05:d9:25:00:62:f0:06:51:cb:b8:b1:16:33:95: 2b:f1:91:13:15:4d:4b:71:cc:74:1f:fd:de:31:7c: 2e:8f:10:cc:04:c3:b0:74:f2:e7:a3:c4:41:d6:4a: 75:af:32:06:be:92:d5:c1:60:71:fb:66:5d:cd:8f: c3:d0:a3:4e:c5:e5:91:1f:20:c5:a3:2d:e1:93:b9: d0:a3:ed:e5:51:2d:be:8b:9d:61:30:fc:0e:02:fe: 0f:13:46:a5:72:3c:dc:c7:a2:7d:d5:8b:d4:50:e3: c1:7a:12:25:4a:54:d8:8f:25:6d:68:92:d6:b3:5b: a7:28:c1:9f:83:33:bd:ec:f4:75:47:f2:4e:0a:5a: 4a:9c:5b:01:93:86:42:77:10:b5:54:5c:33:1a:ea: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:B4:42:8E:24:40:DF:73:A1:8B:D6:FB:12:74:F0:32:8E:45:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/947d5dd2-fc61-3e72-8d06-aacbcc168ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.crl X509v3 Authority Key Identifier: keyid:82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer sbgp-ipAddrBlock: critical IPv4: 107.161.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8a:13:4e:64:74:10:40:48:91:63:0d:bd:b3:b9:42:8d:22: fb:d2:ee:4f:c6:c4:54:d3:5d:19:28:0e:fe:80:a4:90:bb:3d: f5:38:5e:8b:0a:93:85:2d:e8:11:e0:80:48:d6:82:c6:02:06: 6d:d6:6f:f3:e3:9b:e5:7f:91:70:43:7a:ce:f5:42:3f:c5:56: 71:91:6a:6f:08:de:9b:26:0e:4c:14:cb:df:8a:29:4b:4b:d9: 0b:17:f7:14:20:69:13:19:44:2c:77:b5:f9:5f:2e:06:6e:74: 3a:4b:cb:33:a4:a4:b8:2c:d8:c9:6c:ac:b1:2d:9a:e8:d6:2d: a7:0d:e9:4f:9f:4d:e7:38:bf:6a:66:ef:e6:46:10:09:87:af: 12:66:a6:3c:49:85:4f:28:7b:aa:b6:a6:f0:47:70:cd:ca:26: 8f:d7:c8:cc:df:09:01:6f:1f:ff:d6:09:6f:ae:77:61:d1:4b: ab:53:5b:96:a6:e4:65:79:32:e3:87:47:c9:77:62:c3:ae:92: 4a:16:38:e2:6b:60:e2:80:71:9d:ec:a2:9d:f2:09:dd:dd:5d: dc:56:c7:a9:23:b4:47:e7:28:5f:54:e9:93:d8:b8:77:80:f0: f9:51:9e:fa:54:22:51:3f:ad:ac:75:29:f2:d2:67:cd:c2:fe: 37:6f:d6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HpiPZBtjlJoRjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkzYTBlMDAtOTA0MC00NGYxLWI5NWItN2YwOTQ0MzNh ZTUwMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk MTY0MmViNjUtM2ZhOC00NWQ4LThiNzMtMDRlZTRjODA3N2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwofvc5ozJN7m4Y5dR1saNZP6vJzfr4OYwH6J OizJjDN1EfQFJAf+SoBeFeW+Dnis156AQHrsElx3gO2ahPrN/QZZmmTZV9pNm52X FSvyjJVEKRpnY9rMxCBFYl6fLt0VP437natBlR0SBdklAGLwBlHLuLEWM5Ur8ZET FU1Lccx0H/3eMXwujxDMBMOwdPLno8RB1kp1rzIGvpLVwWBx+2ZdzY/D0KNOxeWR HyDFoy3hk7nQo+3lUS2+i51hMPwOAv4PE0alcjzcx6J91YvUUOPBehIlSlTYjyVt aJLWs1unKMGfgzO97PR1R/JOClpKnFsBk4ZCdxC1VFwzGupQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLRtEKOJEDfc6GL1vsSdPAyjkXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTNh MGUwMC05MDQwLTQ0ZjEtYjk1Yi03ZjA5NDQzM2FlNTAvOTQ3ZDVkZDItZmM2MS0z ZTcyLThkMDYtYWFjYmNjMTY4Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkzYTBlMDAtOTA0MC00NGYxLWI5 NWItN2YwOTQ0MzNhZTUwL2I5M2EwZTAwLTkwNDAtNDRmMS1iOTViLTdmMDk0NDMz YWU1MC5jcmwwHwYDVR0jBBgwFoAUgrHhVQpCctN4ycyCclMo031tGaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTNhMGUwMC05MDQwLTQ0ZjEtYjk1Yi03ZjA5 NDQzM2FlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6GbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2KE05kdBBASJFjDb2zuUKNIvvS7k/GxFTTXRkoDv6ApJC7PfU4XosK k4Ut6BHggEjWgsYCBm3Wb/Pjm+V/kXBDes71Qj/FVnGRam8I3psmDkwUy9+KKUtL 2QsX9xQgaRMZRCx3tflfLgZudDpLyzOkpLgs2MlsrLEtmujWLacN6U+fTec4v2pm 7+ZGEAmHrxJmpjxJhU8oe6q2pvBHcM3KJo/XyMzfCQFvH//WCW+ud2HRS6tTW5am 5GV5MuOHR8l3YsOukkoWOOJrYOKAcZ3sop3yCd3dXdxWx6kjtEfnKF9U6ZPYuHeA 8PlRnvpUIlE/rax1KfLSZ83C/jdv1is= -----END CERTIFICATE-----Generated at Sun Apr 27 23:58:10 2025 by rpki-client