$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa File: 0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa (raw, json) Hash identifier: NTKwNAA8AJo908xyj+7miO1/m+mK3AsIoWXsMtmkvNc= Subject key identifier: C3:9D:6A:D1:87:AE:20:A2:E5:6D:5A:AE:22:E9:F3:E0:A8:6F:6B:46 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499BF31A1D91669D438CEDF620 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa Signing time: Tue 22 Apr 2025 09:33:56 +0000 ROA not before: Tue 22 Apr 2025 09:33:56 +0000 ROA not after: Mon 21 Jul 2025 09:33:56 +0000 asID: 32043 IP address blocks: 107.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f3:1a:1d:91:66:9d:43:8c:ed:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 09:33:56 2025 GMT Not After : Jul 21 09:33:56 2025 GMT Subject: CN=663811f7-64a0-4565-ae3a-7da97fd359bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:98:8e:29:9f:a9:20:44:c7:27:a6:a4:f2: 07:67:4c:a6:f1:d5:fd:f3:b8:a9:ee:8f:b2:01:d4: 42:b8:c9:90:2b:f8:63:72:68:43:90:bd:7d:62:62: b1:dd:ad:00:af:06:c9:21:27:38:5f:4b:91:d5:b8: e8:67:22:e8:d5:0c:c6:e5:10:7b:a4:2c:10:1a:71: 0a:09:51:31:cd:d1:9b:ba:8b:11:9a:94:04:1d:de: 0d:27:23:3c:23:60:9a:85:f8:3e:2a:4a:78:69:a4: 41:60:2d:7a:3d:1b:8f:13:e4:f6:49:d9:a0:09:91: 82:19:50:fd:6c:da:c1:0c:8c:64:ab:29:77:4a:ef: 4e:57:28:d9:02:5f:39:94:98:2e:e1:6b:4d:7b:fb: 65:29:f9:b6:c7:26:6c:a9:57:52:88:02:b2:26:a0: 9e:5b:2c:e1:9f:ad:d5:e1:46:44:2d:03:5d:73:b4: 5b:cf:52:de:97:cc:f3:00:3c:81:92:28:65:ac:f5: 78:f0:e7:72:eb:cf:c7:6f:cd:4e:4c:33:b8:b7:bc: 52:82:23:b1:4a:46:a2:ca:3b:f0:f5:79:40:cd:b0: 81:e1:55:14:7b:56:46:be:72:fb:ca:fe:60:7c:88: 4e:63:73:c1:00:ff:dc:5f:c2:f9:f3:91:b2:ce:79: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:6A:D1:87:AE:20:A2:E5:6D:5A:AE:22:E9:F3:E0:A8:6F:6B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/0afb6b72-c328-3fc4-aa87-7550d5bf9520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c4:15:35:42:e8:ea:0a:e0:e0:d9:bc:1e:21:f6:37:86:13: c6:6d:3c:9a:bc:2c:90:ee:2b:bd:28:97:fc:97:1a:ab:57:ef: 8b:69:b5:e0:cb:61:76:7a:bf:4e:94:06:0d:63:d7:92:bd:4a: 1e:50:ac:dc:6a:73:b6:c3:45:1c:2e:de:5e:05:39:6f:d8:5d: 88:6e:10:4a:52:65:1c:2d:19:78:94:46:b1:52:c5:6a:49:44: 64:cc:47:6a:a4:b6:4a:4f:40:38:47:e7:59:a4:32:dd:35:10: 2c:dd:93:66:32:15:77:de:4b:bb:75:46:ac:d2:c2:8b:1b:92: e3:41:55:d5:e7:b5:f5:9b:9f:26:e1:96:b3:e3:a9:93:51:c3: 0b:25:c6:53:60:0b:c9:65:63:7c:fa:04:01:c8:b7:4f:29:af: ec:50:bf:a2:7d:dd:9c:39:fe:d4:61:3a:1e:21:07:4d:a0:1b: 6a:9b:a5:9f:5f:5b:1c:b7:27:a5:73:34:f9:5b:08:1e:34:4a: 05:3a:1c:6f:67:bb:69:0e:4c:0e:6e:79:36:5f:8e:f4:dd:0f: 61:83:69:47:74:bf:e5:fc:84:d3:86:41:5d:06:e5:a2:c3:6b: b6:80:ea:3a:d6:84:bf:33:e2:5d:70:81:75:9d:19:6a:58:cb: a1:48:87:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb8xodkWadQ4zt9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjA5MzM1NloXDTI1MDcyMTA5MzM1NlowLzEtMCsGA1UEAxMk NjYzODExZjctNjRhMC00NTY1LWFlM2EtN2RhOTdmZDM1OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL2YjimfqSBExyempPIHZ0ym8dX987ip7o+y AdRCuMmQK/hjcmhDkL19YmKx3a0ArwbJISc4X0uR1bjoZyLo1QzG5RB7pCwQGnEK CVExzdGbuosRmpQEHd4NJyM8I2Cahfg+Kkp4aaRBYC16PRuPE+T2SdmgCZGCGVD9 bNrBDIxkqyl3Su9OVyjZAl85lJgu4WtNe/tlKfm2xyZsqVdSiAKyJqCeWyzhn63V 4UZELQNdc7Rbz1Lel8zzADyBkihlrPV48Ody68/Hb81OTDO4t7xSgiOxSkaiyjvw 9XlAzbCB4VUUe1ZGvnL7yv5gfIhOY3PBAP/cX8L585GyznmlVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOdatGHriCi5W1ariLp8+Cob2tGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMGFmYjZiNzItYzMyOC0z ZmM0LWFhODctNzU1MGQ1YmY5NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbEFTVC6OoK4ODZvB4h9jeGE8ZtPJq8LJDuK70ol/yXGqtX74tpteDL YXZ6v06UBg1j15K9Sh5QrNxqc7bDRRwu3l4FOW/YXYhuEEpSZRwtGXiURrFSxWpJ RGTMR2qktkpPQDhH51mkMt01ECzdk2YyFXfeS7t1RqzSwosbkuNBVdXntfWbnybh lrPjqZNRwwslxlNgC8llY3z6BAHIt08pr+xQv6J93Zw5/tRhOh4hB02gG2qbpZ9f Wxy3J6VzNPlbCB40SgU6HG9nu2kOTA5ueTZfjvTdD2GDaUd0v+X8hNOGQV0G5aLD a7aA6jrWhL8z4l1wgXWdGWpYy6FIhxE= -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:06 2025 by rpki-client