$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa File: 32681ab5-267b-30a2-9748-402a55e3c247.roa (raw, json) Hash identifier: rl81n2T4do3itpl2x+uftEk6IxmnuRKtnCggrY1DeME= Subject key identifier: C7:3B:43:E7:5B:56:39:CD:87:3D:08:B2:10:C0:44:52:49:05:AA:48 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849AFB69DE2CFCD4DDA424B0888 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa Signing time: Tue 29 Apr 2025 11:28:14 +0000 ROA not before: Tue 29 Apr 2025 11:28:14 +0000 ROA not after: Mon 28 Jul 2025 11:28:14 +0000 asID: 174 IP address blocks: 107.158.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:b6:9d:e2:cf:cd:4d:da:42:4b:08:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 29 11:28:14 2025 GMT Not After : Jul 28 11:28:14 2025 GMT Subject: CN=6706a086-09c2-4b79-8c29-465a645d3160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:3e:0f:15:15:1d:e4:30:53:47:3f:d2:42: 09:d4:75:05:c5:b3:89:1e:7c:36:8d:d5:8b:45:76: 82:cd:cf:db:1a:59:10:c4:58:8d:8b:9c:7b:d0:6b: 0b:20:4e:1f:1d:d1:7a:67:cb:45:2e:d6:7e:f9:07: 45:3a:f5:63:3a:d1:68:d5:3b:a5:4f:f0:98:5d:d1: b4:9e:ec:6a:12:c1:b7:31:49:68:7f:c4:75:88:0a: 80:a0:14:1b:be:5e:fa:8e:da:42:cf:cf:ba:9f:ea: 27:48:a4:89:85:8e:67:07:9c:bd:77:0b:fb:7c:a6: c6:4d:5c:81:e7:26:1c:ec:04:57:8a:30:b6:2b:22: 7f:6a:dc:e2:37:26:3c:8f:b1:b1:c1:ce:c8:7c:b8: 39:f0:64:55:2f:b1:fc:ad:62:d5:7c:eb:60:4f:01: 2d:8a:24:5c:6f:d2:03:f7:7f:7c:9a:9d:aa:72:08: c1:3c:b3:9f:37:ef:a1:a2:0e:e3:cc:87:e9:35:71: e8:56:8f:78:b1:10:9f:5a:10:12:59:6e:b6:da:85: d7:59:60:24:da:a4:4c:77:c3:f1:f3:eb:7e:c0:4d: cf:9c:f3:5f:06:57:23:84:f7:28:c0:d2:01:65:a9: 53:3d:7e:b6:ab:ee:10:60:34:34:d4:6a:ca:5a:e7: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3B:43:E7:5B:56:39:CD:87:3D:08:B2:10:C0:44:52:49:05:AA:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/32681ab5-267b-30a2-9748-402a55e3c247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:cc:7b:c3:2d:5d:25:2f:e2:42:0f:d0:9c:c3:c9:e5:b9:ca: 7c:f1:4c:81:ef:b1:90:32:04:8a:b7:73:29:09:7e:f5:91:09: 4f:4f:88:52:d4:1f:57:04:30:39:30:ef:e0:f2:6e:42:e0:f4: 65:42:99:e3:2b:01:c8:d2:13:dd:3e:95:2e:9d:e0:da:59:8e: ca:90:eb:aa:ec:75:12:d0:b2:be:ff:54:28:8b:08:eb:91:71: 4d:04:91:04:41:23:fc:13:f7:68:4e:85:90:42:69:c4:5a:b0: 48:87:da:69:3d:2a:b8:64:45:87:cc:78:bc:16:2a:25:e3:f7: ca:8f:1b:ea:2c:ee:d7:80:3f:07:03:49:7c:fd:91:68:bd:93: e1:0a:56:d5:eb:6d:c6:c3:2f:03:18:f1:9d:96:de:e7:4d:62: cb:78:25:4f:41:8f:21:78:7e:08:eb:bb:fa:25:b5:5f:f4:57: 59:fd:74:c5:8b:2e:8b:47:6a:ae:14:27:44:26:45:c1:00:a9: 22:e0:21:aa:16:ca:f7:2b:19:8d:cc:c7:92:a1:65:00:ae:1b: 7f:8e:56:d8:3d:fa:52:97:0d:f6:a7:48:b2:47:f1:c0:fc:31: 0b:4f:4c:17:34:3a:ec:5c:eb:f1:22:10:40:8d:0b:e0:22:6d: 3e:8a:f4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvtp3iz81N2kJLCIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyOTExMjgxNFoXDTI1MDcyODExMjgxNFowLzEtMCsGA1UEAxMk NjcwNmEwODYtMDljMi00Yjc5LThjMjktNDY1YTY0NWQzMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO8+DxUVHeQwU0c/0kIJ1HUFxbOJHnw2jdWL RXaCzc/bGlkQxFiNi5x70GsLIE4fHdF6Z8tFLtZ++QdFOvVjOtFo1TulT/CYXdG0 nuxqEsG3MUlof8R1iAqAoBQbvl76jtpCz8+6n+onSKSJhY5nB5y9dwv7fKbGTVyB 5yYc7ARXijC2KyJ/atziNyY8j7Gxwc7IfLg58GRVL7H8rWLVfOtgTwEtiiRcb9ID 9398mp2qcgjBPLOfN++hog7jzIfpNXHoVo94sRCfWhASWW622oXXWWAk2qRMd8Px 8+t+wE3PnPNfBlcjhPcowNIBZalTPX62q+4QYDQ01GrKWudpywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc7Q+dbVjnNhz0IshDARFJJBapIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzI2ODFhYjUtMjY3Yi0z MGEyLTk3NDgtNDAyYTU1ZTNjMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHMe8MtXSUv4kIP0JzDyeW5ynzxTIHvsZAyBIq3cykJfvWRCU9PiFLU H1cEMDkw7+DybkLg9GVCmeMrAcjSE90+lS6d4NpZjsqQ66rsdRLQsr7/VCiLCOuR cU0EkQRBI/wT92hOhZBCacRasEiH2mk9KrhkRYfMeLwWKiXj98qPG+os7teAPwcD SXz9kWi9k+EKVtXrbcbDLwMY8Z2W3udNYst4JU9BjyF4fgjru/oltV/0V1n9dMWL LotHaq4UJ0QmRcEAqSLgIaoWyvcrGY3Mx5KhZQCuG3+OVtg9+lKXDfanSLJH8cD8 MQtPTBc0Ouxc6/EiEECNC+AibT6K9Go= -----END CERTIFICATE-----Generated at Wed Apr 30 23:05:47 2025 by rpki-client