$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa File: 0bb8b992-e69b-3f68-9228-3d2a8870d832.roa (raw, json) Hash identifier: CvLcWlYhfhxaZptTuzGzXoXcP28FAH+hF7FwtqkMLa4= Subject key identifier: 6F:B5:D8:2A:FF:46:02:E8:F5:EF:3E:2B:D6:F0:32:59:52:07:49:33 Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Certificate serial: 010D0C9F4328584943F25B49D302CCAD18A94920 Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa Signing time: Fri 21 Mar 2025 21:01:18 +0000 ROA not before: Fri 21 Mar 2025 21:01:18 +0000 ROA not after: Thu 19 Jun 2025 21:01:18 +0000 asID: 203 IP address blocks: 107.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:f2:5b:49:d3:02:cc:ad:18:a9:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Validity Not Before: Mar 21 21:01:18 2025 GMT Not After : Jun 19 21:01:18 2025 GMT Subject: CN=f15ee8fa-d363-49fc-94da-c5be09d6b239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:2a:0f:0e:d5:97:04:f8:a0:08:c6:5b:df: 7c:58:28:c2:39:14:68:b5:35:39:79:a7:04:4e:b8: 5e:c5:0f:95:09:f1:f6:6e:49:2f:03:d9:e3:8b:aa: dc:14:f9:cf:7d:84:8e:3e:7a:18:b1:17:9b:2b:d0: 7a:57:56:19:33:15:e9:bb:4e:b6:7f:6b:6d:45:58: 88:a5:4c:f6:b7:25:5e:f2:c3:8a:ca:30:71:74:36: d0:6c:74:87:b9:87:20:fc:89:d5:4c:b0:16:f1:7e: f1:b4:8a:32:6a:eb:80:dd:31:58:f9:ef:73:53:39: 4d:c6:81:50:68:30:6f:e4:3a:59:20:c8:74:af:0e: fa:fa:b4:5d:cc:89:9d:59:dd:63:06:f6:2c:b3:d0: 5a:1b:9f:1e:a0:7b:4d:36:cd:be:6c:20:52:34:d0: 61:14:b2:d2:0b:dd:80:73:eb:83:3f:51:f1:a9:56: e9:e2:cb:f7:2a:eb:ab:ab:74:73:1d:2e:f4:2f:46: 47:4b:3f:8e:c7:8d:11:bd:ef:ac:60:22:1b:6f:ea: 31:6f:2f:6e:22:e4:a4:45:ec:33:45:31:b6:69:e3: 34:7b:3a:e6:5b:ed:ad:6e:ed:b8:0f:3b:d0:82:b0: 9e:cf:e6:75:2e:27:f2:d5:67:1c:1b:c2:63:90:a1: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:D8:2A:FF:46:02:E8:F5:EF:3E:2B:D6:F0:32:59:52:07:49:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl X509v3 Authority Key Identifier: keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer sbgp-ipAddrBlock: critical IPv4: 107.191.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4b:95:ea:56:21:b8:9d:ce:b2:e9:14:96:cc:db:00:5f:6c: 1c:6c:91:07:39:09:3e:2c:1c:c8:64:6c:9f:cc:06:be:b6:ee: 86:67:04:11:f6:b5:d9:e0:f4:e4:c7:f7:9c:d3:19:7b:a1:d1: 53:5c:2c:4c:c7:ff:3c:b4:62:5c:c2:d7:1f:99:76:86:60:f6: df:2f:2f:4e:d4:f1:06:dc:c5:64:ad:f8:9a:26:27:82:2b:77: 59:df:9c:7f:8f:e9:f8:5d:e5:e1:3c:23:e4:cd:07:e3:3c:a8: b2:8f:81:ea:cf:1b:b2:57:26:bc:7d:af:f9:b9:34:db:f7:68: 21:12:d4:f4:88:78:f7:3d:cb:2c:ee:97:69:ad:38:01:62:b0: ab:80:06:77:c5:c3:18:3b:45:59:39:f5:65:ef:00:0e:1b:39: a0:ca:a4:14:c3:77:09:69:48:11:2e:bc:05:7f:39:76:f8:c2: eb:cc:1d:aa:d6:11:3a:83:de:4a:14:6e:82:b9:9f:20:aa:80: 36:88:68:4f:08:14:85:b4:d5:62:3d:10:fd:40:c4:c0:68:a5: 3a:f5:59:6e:1f:58:4c:28:cc:a4:b3:a9:42:85:67:c4:88:7f: 45:fa:53:ff:98:f2:a1:58:66:6f:69:04:02:6c:06:bd:68:09: a1:84:07:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElD8ltJ0wLMrRipSSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlNGM4ODEtMDM3Ny00OWY1LTlhZjUtNDEwZDMwZmI1 NTI3MB4XDTI1MDMyMTIxMDExOFoXDTI1MDYxOTIxMDExOFowLzEtMCsGA1UEAxMk ZjE1ZWU4ZmEtZDM2My00OWZjLTk0ZGEtYzViZTA5ZDZiMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq30qDw7VlwT4oAjGW998WCjCORRotTU5eacE TrhexQ+VCfH2bkkvA9nji6rcFPnPfYSOPnoYsRebK9B6V1YZMxXpu062f2ttRViI pUz2tyVe8sOKyjBxdDbQbHSHuYcg/InVTLAW8X7xtIoyauuA3TFY+e9zUzlNxoFQ aDBv5DpZIMh0rw76+rRdzImdWd1jBvYss9BaG58eoHtNNs2+bCBSNNBhFLLSC92A c+uDP1HxqVbp4sv3Kuurq3RzHS70L0ZHSz+Ox40Rve+sYCIbb+oxby9uIuSkRewz RTG2aeM0ezrmW+2tbu24DzvQgrCez+Z1Lify1WccG8JjkKF2wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+12Cr/RgLo9e8+K9bwMllSB0kzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0 Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBkMzBmYjU1MjcvMGJiOGI5OTItZTY5Yi0z ZjY4LTkyMjgtM2QyYTg4NzBkODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhlNGM4ODEtMDM3Ny00OWY1LTlh ZjUtNDEwZDMwZmI1NTI3L2Q4ZTRjODgxLTAzNzctNDlmNS05YWY1LTQxMGQzMGZi NTUyNy5jcmwwHwYDVR0jBBgwFoAU+GUVnd9PPVYksArZYvT7T4Li004wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBk MzBmYjU1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItLlepWIbidzrLpFJbM2wBfbBxskQc5CT4sHMhkbJ/MBr627oZnBBH2 tdng9OTH95zTGXuh0VNcLEzH/zy0YlzC1x+ZdoZg9t8vL07U8QbcxWSt+JomJ4Ir d1nfnH+P6fhd5eE8I+TNB+M8qLKPgerPG7JXJrx9r/m5NNv3aCES1PSIePc9yyzu l2mtOAFisKuABnfFwxg7RVk59WXvAA4bOaDKpBTDdwlpSBEuvAV/OXb4wuvMHarW ETqD3koUboK5nyCqgDaIaE8IFIW01WI9EP1AxMBopTr1WW4fWEwozKSzqUKFZ8SI f0X6U/+Y8qFYZm9pBAJsBr1oCaGEBzQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:34 2025 by rpki-client