$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa File: 9637676f-8811-3a4f-93c6-1c237745e195.roa (raw, json) Hash identifier: 0+zrK16MqNbRpKohHRjr7WJyMap+TZJz+F8fgjkvDMg= Subject key identifier: A4:01:6C:BC:56:9D:CA:EF:C5:2B:76:05:4B:D2:69:5D:BB:D8:1D:73 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849AFB6114F6DF0A56B48B33B68 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa Signing time: Tue 29 Apr 2025 11:27:08 +0000 ROA not before: Tue 29 Apr 2025 11:27:08 +0000 ROA not after: Mon 28 Jul 2025 11:27:08 +0000 asID: 174 IP address blocks: 107.158.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:b6:11:4f:6d:f0:a5:6b:48:b3:3b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 29 11:27:08 2025 GMT Not After : Jul 28 11:27:08 2025 GMT Subject: CN=43201dcb-66ad-45ab-a7f1-5bde27bd6fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:b0:a2:8a:c7:3d:e6:ca:4b:5a:fd:29:19: 4e:39:f6:45:1e:75:34:cb:f2:fe:49:5b:73:48:c5: 33:9a:3f:7e:16:a4:5f:c1:9e:3c:2d:68:cb:45:3a: 6b:ac:f5:dc:fa:7a:26:69:20:1d:eb:48:14:78:50: ff:8d:72:c1:d8:37:f3:f8:05:ea:df:a5:ce:9f:70: ed:55:43:4a:b3:f9:ce:ef:dc:cb:b4:53:ec:e3:75: 2e:ac:9e:08:df:e5:9a:3d:33:10:ab:4c:81:5c:0a: 66:c4:ce:7e:df:3d:2e:b8:fe:70:a5:c8:71:6a:61: 5d:f9:37:84:07:cd:b6:9c:a2:61:4a:e7:cb:5f:a3: d4:7d:4a:d4:1f:c6:7d:1a:2e:36:40:d9:8b:de:0e: 6a:4b:15:db:af:8a:b6:04:ea:4b:bd:80:7d:3d:be: 95:1a:62:97:db:b0:ba:8e:d0:41:d4:cb:be:a6:a8: f2:11:30:16:89:c9:91:4a:0f:ab:e0:ad:b6:01:de: 91:9b:08:ee:7e:3f:aa:e3:ba:f4:13:8f:f2:c9:ff: 39:c9:16:a2:c7:93:dc:eb:f5:31:63:5c:d8:82:b3: 35:ad:9b:0d:64:9a:65:50:2c:ca:47:0c:49:28:e4: ea:5d:0a:9f:af:f1:fe:78:a5:df:de:9b:86:02:7b: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:01:6C:BC:56:9D:CA:EF:C5:2B:76:05:4B:D2:69:5D:BB:D8:1D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9637676f-8811-3a4f-93c6-1c237745e195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:11:46:13:77:48:81:d2:88:0b:d4:aa:d1:52:0e:e0:57:30: 31:1f:ce:43:69:0e:0e:3d:09:cc:c1:97:db:b5:7b:be:a2:72: 86:a5:e2:07:f0:79:95:43:46:c9:8f:15:ed:50:4b:03:80:b7: 1a:39:ff:d4:1d:7d:ad:ed:a8:d8:5a:cc:6a:79:23:c2:81:e2: 9f:d4:f1:9b:d1:40:12:5c:71:58:f1:5e:e3:b9:b4:c0:e4:7e: 68:f9:91:43:7c:a8:e8:7d:35:06:0a:b9:9f:17:ca:6f:5d:9f: 0a:b5:86:a9:64:07:2d:42:a1:7a:f5:c6:a5:54:c8:8d:8d:4d: 0a:86:21:fd:b2:a1:12:67:7c:72:d7:cd:68:20:d4:5a:d7:6a: 21:88:57:08:72:10:61:08:17:2a:47:c4:40:07:5b:1f:9a:84: 35:e8:0d:ff:5a:74:a4:5c:62:2e:61:7d:58:c2:f8:57:12:bc: 4e:ce:5a:40:f8:1c:60:0c:90:3a:87:55:82:3c:66:ba:66:60: 12:49:b2:fe:33:2d:4e:ce:de:df:a2:18:ec:2f:8a:3b:c7:21: 74:42:88:2c:26:22:c8:17:5e:31:8c:c0:0b:0d:a6:76:9b:15: 97:cd:ff:43:13:5b:8a:5f:c7:11:bc:9b:95:17:8a:9f:c6:98: 47:18:1b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvthFPbfCla0izO2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyOTExMjcwOFoXDTI1MDcyODExMjcwOFowLzEtMCsGA1UEAxMk NDMyMDFkY2ItNjZhZC00NWFiLWE3ZjEtNWJkZTI3YmQ2ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3OwoorHPebKS1r9KRlOOfZFHnU0y/L+SVtz SMUzmj9+FqRfwZ48LWjLRTprrPXc+nomaSAd60gUeFD/jXLB2Dfz+AXq36XOn3Dt VUNKs/nO79zLtFPs43UurJ4I3+WaPTMQq0yBXApmxM5+3z0uuP5wpchxamFd+TeE B822nKJhSufLX6PUfUrUH8Z9Gi42QNmL3g5qSxXbr4q2BOpLvYB9Pb6VGmKX27C6 jtBB1Mu+pqjyETAWicmRSg+r4K22Ad6Rmwjufj+q47r0E4/yyf85yRaix5Pc6/Ux Y1zYgrM1rZsNZJplUCzKRwxJKOTqXQqfr/H+eKXf3puGAns5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQBbLxWncrvxSt2BUvSaV272B1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTYzNzY3NmYtODgxMS0z YTRmLTkzYzYtMWMyMzc3NDVlMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsRRhN3SIHSiAvUqtFSDuBXMDEfzkNpDg49CczBl9u1e76icoal4gfw eZVDRsmPFe1QSwOAtxo5/9Qdfa3tqNhazGp5I8KB4p/U8ZvRQBJccVjxXuO5tMDk fmj5kUN8qOh9NQYKuZ8Xym9dnwq1hqlkBy1CoXr1xqVUyI2NTQqGIf2yoRJnfHLX zWgg1FrXaiGIVwhyEGEIFypHxEAHWx+ahDXoDf9adKRcYi5hfVjC+FcSvE7OWkD4 HGAMkDqHVYI8ZrpmYBJJsv4zLU7O3t+iGOwvijvHIXRCiCwmIsgXXjGMwAsNpnab FZfN/0MTW4pfxxG8m5UXip/GmEcYG9E= -----END CERTIFICATE-----Generated at Thu May 1 15:27:59 2025 by rpki-client