$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa File: 983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa (raw, json) Hash identifier: 1dx3wZW/pxUjwoL/PeKpraljaxoJv5+s2s2Y4Dgahpk= Subject key identifier: B7:89:D2:36:49:36:56:6C:33:C7:66:71:C5:72:64:FE:D2:09:26:46 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285848CDE1177A8E50A1A1B03099C0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 137547 IP address blocks: 107.151.238.0/24 maxlen: 24 107.151.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:17:7a:8e:50:a1:a1:b0:30:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=4c76230c-8322-46bc-8b59-6ee29d5f450c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:32:01:cd:95:7f:aa:d9:a7:3f:4c:3d:74: e0:56:05:7e:7e:b3:b2:89:74:1c:84:4c:f3:77:30: 54:27:ec:e3:70:7e:d4:86:78:93:e9:de:04:98:23: a4:fb:67:c2:ef:d2:c5:b7:8b:dd:3a:6f:3f:c6:f3: 2d:0c:20:72:7b:79:d3:96:31:88:1e:0f:49:fb:70: b4:f8:49:fe:68:81:66:80:2e:ee:49:10:0d:4f:af: f7:89:91:05:fd:16:ca:55:7f:77:47:b8:2e:f6:79: 0d:db:cd:d0:ce:83:91:64:40:69:c6:1a:c8:96:35: 64:20:6e:eb:1a:a9:a7:3d:06:f9:d6:2c:e5:d9:f2: 34:44:00:0e:f1:4b:fc:36:bd:cf:0f:6c:10:c3:e3: b6:b6:dd:31:ad:74:90:cc:0f:67:04:20:3e:05:38: e6:22:89:fc:a4:99:b2:a8:f2:0e:fc:ac:fa:d1:dc: 3e:60:bd:fd:bf:74:0d:eb:38:c5:f3:dd:24:25:e1: e3:09:71:08:50:cd:4d:84:e4:14:ff:a8:f1:70:9c: 9d:e4:32:a0:9a:46:90:ed:e6:7f:6c:67:ef:52:cc: 05:a2:56:36:d3:11:9e:47:85:5d:52:56:31:6d:96: e5:26:5b:13:35:39:90:66:16:65:7c:0f:88:1e:5d: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:D2:36:49:36:56:6C:33:C7:66:71:C5:72:64:FE:D2:09:26:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2f:fc:07:9e:11:9c:3c:ac:f6:61:c3:e0:1d:c4:4e:8c:cf: 20:dc:4e:fa:45:6d:b5:f8:d2:d3:f0:45:a3:fd:f4:b1:67:ec: 87:32:2e:2d:65:c2:c5:c9:a5:e2:75:8a:07:36:15:a5:d5:f6: e5:fc:a9:33:51:61:2b:f2:9b:9c:21:53:64:a2:b8:78:f2:cd: d5:0a:e0:93:08:0a:08:24:4d:91:38:df:d3:e3:8b:a9:5e:1c: 46:60:ae:60:82:a5:75:90:2d:14:b7:91:a2:a8:26:f8:9a:54: 7b:bb:fc:83:8f:ae:a2:9c:cc:73:b5:a3:e6:62:d9:13:41:af: fa:18:b3:d2:39:b1:6b:40:dd:9b:ac:c6:8f:44:2c:e1:02:72: d8:99:58:27:75:a7:84:96:6d:b7:50:7a:79:33:df:2e:96:e4: fd:06:35:0e:8a:7e:cf:c3:2b:f0:35:4c:f9:91:f2:9e:73:dc: be:35:f2:b1:14:ff:36:55:d6:36:37:8f:05:25:93:96:5a:5e: eb:7d:49:ec:7d:f1:38:db:7e:c6:7c:aa:5c:51:01:b3:72:8d: d5:c7:ee:6b:73:ca:a5:5e:51:ae:43:4b:e1:32:54:e1:6f:9c: 2c:9e:a7:04:e0:17:99:ea:f5:10:95:05:3b:21:ad:0c:30:9f: f2:54:ea:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rd6jlChobAwmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NGM3NjIzMGMtODMyMi00NmJjLThiNTktNmVlMjlkNWY0NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMyAc2Vf6rZpz9MPXTgVgV+frOyiXQchEzz dzBUJ+zjcH7UhniT6d4EmCOk+2fC79LFt4vdOm8/xvMtDCBye3nTljGIHg9J+3C0 +En+aIFmgC7uSRANT6/3iZEF/RbKVX93R7gu9nkN283QzoORZEBpxhrIljVkIG7r GqmnPQb51izl2fI0RAAO8Uv8Nr3PD2wQw+O2tt0xrXSQzA9nBCA+BTjmIon8pJmy qPIO/Kz60dw+YL39v3QN6zjF890kJeHjCXEIUM1NhOQU/6jxcJyd5DKgmkaQ7eZ/ bGfvUswFolY20xGeR4VdUlYxbZblJlsTNTmQZhZlfA+IHl2oVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeJ0jZJNlZsM8dmccVyZP7SCSZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvOTgzZTFjMjEtM2FlMC0z YTQzLWIyNzAtZjRiMmU0ZjUzZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0v/AeeEZw8rPZhw+AdxE6MzyDcTvpFbbX40tPwRaP99LFn7IcyLi1l wsXJpeJ1igc2FaXV9uX8qTNRYSvym5whU2SiuHjyzdUK4JMICggkTZE439Pji6le HEZgrmCCpXWQLRS3kaKoJviaVHu7/IOPrqKczHO1o+Zi2RNBr/oYs9I5sWtA3Zus xo9ELOECctiZWCd1p4SWbbdQenkz3y6W5P0GNQ6Kfs/DK/A1TPmR8p5z3L418rEU /zZV1jY3jwUlk5ZaXut9Sex98TjbfsZ8qlxRAbNyjdXH7mtzyqVeUa5DS+EyVOFv nCyepwTgF5nq9RCVBTshrQwwn/JU6vk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:52:18 2025 by rpki-client