$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa File: d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa (raw, json) Hash identifier: jlMC+vKLleFiKxxJUiVeQstrhfAS4zcoswzcluK3qq0= Subject key identifier: 1B:68:15:DF:52:2D:77:24:6D:10:20:E0:C2:05:3F:79:99:B8:B5:FA Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499BF4D285094C299121D8EEEC Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa Signing time: Tue 22 Apr 2025 09:37:24 +0000 ROA not before: Tue 22 Apr 2025 09:37:24 +0000 ROA not after: Mon 21 Jul 2025 09:37:24 +0000 asID: 32043 IP address blocks: 107.158.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:d2:85:09:4c:29:91:21:d8:ee:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 09:37:24 2025 GMT Not After : Jul 21 09:37:24 2025 GMT Subject: CN=9cd66e78-34db-4808-a879-3f0b7843fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:80:93:75:3d:dc:6b:2d:22:72:b2:b4:f1:72: 20:32:c2:db:c9:a8:a0:f4:dc:12:be:1e:da:84:a9: c1:db:33:ff:62:55:47:95:49:cc:48:7e:40:29:35: 09:42:57:69:d8:56:04:2a:dd:b7:81:ea:a1:00:94: 90:64:43:4b:14:1a:00:60:70:6f:4b:26:69:db:6d: 18:d3:13:1a:e4:60:84:12:9a:7b:7c:a0:58:79:98: 1e:37:2b:cc:71:32:24:ce:f1:05:27:b8:dc:93:c5: dc:94:16:45:a8:0e:1a:ca:a6:67:52:14:00:29:99: 44:f3:a8:4b:bc:51:51:88:d8:cb:68:f6:22:1b:78: bc:90:31:f3:a8:77:37:78:d5:94:b2:50:32:18:27: 34:6c:fe:71:c6:15:f2:41:b7:3e:ca:38:f7:9f:e4: 00:7b:85:07:9d:58:56:0d:40:08:99:d7:a9:90:b1: 66:68:4c:8c:2f:8b:7e:6a:92:e3:46:37:44:fe:f3: 40:28:66:d3:d5:4f:4e:71:a9:08:f0:df:1a:1f:3f: 46:72:88:17:33:17:8b:1a:c0:cf:3f:c9:98:3b:14: c7:ab:e2:6f:0d:b5:08:be:59:1c:9a:c3:92:be:ea: fb:10:fd:94:e9:71:69:c1:88:a4:1f:46:ea:3f:ec: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:68:15:DF:52:2D:77:24:6D:10:20:E0:C2:05:3F:79:99:B8:B5:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d88c9dd8-6ead-3cdd-88a2-10f8ce6af59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:49:ba:db:5d:12:81:ae:ba:21:e4:6f:11:5f:24:fe:a8:d7: e6:53:b3:ad:9b:ba:45:c8:f3:81:8c:78:15:d5:db:33:b9:98: cd:26:78:af:90:1d:28:48:7c:c1:ca:cf:6f:94:0b:bc:67:23: 04:1e:57:14:91:e9:bd:0a:02:29:29:97:35:88:43:1a:21:c5: a9:2a:a7:55:83:52:85:9d:0b:24:a1:9b:e8:3d:11:60:06:cc: 17:89:65:c8:ef:6e:cf:79:f7:e8:9a:91:0c:42:61:96:fa:47: 57:0c:ad:d8:a1:71:2a:fd:ca:70:58:34:a0:43:a2:15:0e:5c: d1:f1:f2:1e:7c:55:9d:6a:b0:0b:b3:0a:ac:49:6f:be:f2:f3: 51:2b:62:48:3d:53:75:5e:fb:87:f5:62:60:7b:0f:b4:38:1c: 8f:6f:b1:69:7a:dd:9e:37:9a:f3:1f:d0:48:4a:ce:c8:20:10: 9c:36:ab:c0:67:5f:3f:bf:ad:83:41:3d:98:3d:8f:a8:6e:eb: cd:58:f8:29:38:ae:42:c6:da:f8:73:a2:dc:91:08:68:6d:67: 8d:b6:b0:15:80:01:2b:b8:b4:7d:7a:cd:21:6b:e5:11:ae:bc: 42:90:61:21:78:db:60:7d:f0:c7:a2:f6:87:5a:97:40:6b:ef: f5:63:1b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9NKFCUwpkSHY7uwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjA5MzcyNFoXDTI1MDcyMTA5MzcyNFowLzEtMCsGA1UEAxMk OWNkNjZlNzgtMzRkYi00ODA4LWE4NzktM2YwYjc4NDNmYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ICTdT3cay0icrK08XIgMsLbyaig9NwSvh7a hKnB2zP/YlVHlUnMSH5AKTUJQldp2FYEKt23geqhAJSQZENLFBoAYHBvSyZp220Y 0xMa5GCEEpp7fKBYeZgeNyvMcTIkzvEFJ7jck8XclBZFqA4ayqZnUhQAKZlE86hL vFFRiNjLaPYiG3i8kDHzqHc3eNWUslAyGCc0bP5xxhXyQbc+yjj3n+QAe4UHnVhW DUAImdepkLFmaEyML4t+apLjRjdE/vNAKGbT1U9OcakI8N8aHz9GcogXMxeLGsDP P8mYOxTHq+JvDbUIvlkcmsOSvur7EP2U6XFpwYikH0bqP+zldQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtoFd9SLXckbRAg4MIFP3mZuLX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDg4YzlkZDgtNmVhZC0z Y2RkLTg4YTItMTBmOGNlNmFmNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9JuttdEoGuuiHkbxFfJP6o1+ZTs62bukXI84GMeBXV2zO5mM0meK+Q HShIfMHKz2+UC7xnIwQeVxSR6b0KAikplzWIQxohxakqp1WDUoWdCyShm+g9EWAG zBeJZcjvbs959+iakQxCYZb6R1cMrdihcSr9ynBYNKBDohUOXNHx8h58VZ1qsAuz CqxJb77y81ErYkg9U3Ve+4f1YmB7D7Q4HI9vsWl63Z43mvMf0EhKzsggEJw2q8Bn Xz+/rYNBPZg9j6hu681Y+Ck4rkLG2vhzotyRCGhtZ422sBWAASu4tH16zSFr5RGu vEKQYSF422B98Mei9odal0Br7/VjG8s= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:50 2025 by rpki-client