$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d3b96607-9b94-316f-8f50-ede5c640b815.roa File: d3b96607-9b94-316f-8f50-ede5c640b815.roa (raw, json) Hash identifier: 8Cpqhla0YW+kVUSnR+rxiAKF/bQ3qE9xclphHnRqXr4= Subject key identifier: 07:12:AB:04:25:A2:94:FF:FD:A9:35:AF:01:E5:6D:36:AC:E6:45:92 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848854B4A5519B3224B938141D0 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d3b96607-9b94-316f-8f50-ede5c640b815.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 5769 IP address blocks: 107.171.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:4a:55:19:b3:22:4b:93:81:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=d5a923d9-05e2-4a4e-a126-f78b357dc0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:5a:8b:4b:1f:22:ae:56:97:c6:e7:75:a3: 0f:8e:8c:40:87:d8:c1:fe:d4:00:9c:4f:dd:b8:79: f1:db:81:ce:fe:8a:2c:c1:7b:a1:6c:8a:02:65:b0: e8:ed:27:76:9c:cc:3a:49:3b:eb:12:65:c0:eb:35: cc:b7:e2:20:54:87:fd:11:2c:1a:d5:78:9e:0a:27: b4:f8:26:6c:68:71:70:af:53:62:08:e4:c4:09:f9: d8:ba:c9:1f:b7:af:0c:30:00:1c:54:b4:6a:a4:25: 49:90:64:7f:ae:48:70:09:2b:fe:03:a0:06:8e:cc: 18:7c:ca:0e:be:fd:0e:ef:d3:77:f4:cb:b3:1e:7b: e9:d7:64:ca:d7:20:0b:c1:40:40:f2:78:6e:65:f3: 4d:4d:94:35:d7:b8:df:81:34:ee:35:73:d2:10:24: 6e:69:f5:07:26:8f:d7:47:a4:91:fc:ba:85:81:5b: 65:1f:21:47:ee:71:98:92:f7:6d:01:50:ca:92:f3: 92:1d:4d:0e:9c:92:65:27:30:e9:d3:87:34:c5:5d: 56:c4:d5:17:68:4b:7e:02:92:e4:d5:9a:ad:28:51: 85:3c:82:d7:2e:10:d7:fa:61:dc:6f:df:f2:74:77: 87:a7:5c:5f:06:0f:81:e6:aa:c9:77:86:fd:13:48: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:12:AB:04:25:A2:94:FF:FD:A9:35:AF:01:E5:6D:36:AC:E6:45:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d3b96607-9b94-316f-8f50-ede5c640b815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 107.171.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b9:5d:11:fb:1b:c9:5c:34:61:76:5e:d3:09:89:8c:4b:27: 79:db:1c:52:44:71:e1:87:66:f4:61:d7:2d:e1:99:46:20:79: b8:01:92:23:31:31:69:54:36:fb:4e:6b:11:a8:4c:ef:dc:43: 7c:87:a1:38:07:b9:6d:2e:e3:e1:58:fa:2f:ef:f8:85:6a:a2: 83:25:33:eb:d7:bb:ee:51:38:22:69:7d:11:c4:45:c7:8f:af: 56:3b:92:6a:9a:7c:8e:a8:76:f3:01:b4:e0:8b:45:0a:0f:96: fe:a3:9a:95:39:b9:1b:d2:dd:56:db:6f:4f:0a:2c:f0:57:f6: 40:36:df:71:64:47:7c:64:e6:d7:1b:e4:4a:1c:71:b6:93:1d: ca:d6:ac:40:1d:47:52:ec:57:b5:2a:f3:ca:19:92:04:e8:3f: 79:2f:b3:56:69:bd:ae:35:f9:7a:2e:e5:b0:59:18:0f:75:37: b2:61:d2:d6:45:e2:f4:af:5c:a6:36:82:2b:4d:ec:a9:83:d5: a8:4b:0f:fd:3b:1b:04:e8:99:96:3a:86:93:7c:1a:f8:2d:7a: b4:16:8c:8e:b9:3d:9d:e7:ff:3b:dc:a3:0e:3e:4f:8c:75:92: 81:c6:b9:08:c8:20:9c:b3:88:db:ca:f2:7a:74:3e:5f:6f:39: e8:fc:54:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0pVGbMiS5OBQdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk ZDVhOTIzZDktMDVlMi00YTRlLWExMjYtZjc4YjM1N2RjMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBRai0sfIq5Wl8bndaMPjoxAh9jB/tQAnE/d uHnx24HO/ooswXuhbIoCZbDo7Sd2nMw6STvrEmXA6zXMt+IgVIf9ESwa1XieCie0 +CZsaHFwr1NiCOTECfnYuskft68MMAAcVLRqpCVJkGR/rkhwCSv+A6AGjswYfMoO vv0O79N39MuzHnvp12TK1yALwUBA8nhuZfNNTZQ117jfgTTuNXPSECRuafUHJo/X R6SR/LqFgVtlHyFH7nGYkvdtAVDKkvOSHU0OnJJlJzDp04c0xV1WxNUXaEt+ApLk 1ZqtKFGFPILXLhDX+mHcb9/ydHeHp1xfBg+B5qrJd4b9E0iWXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcSqwQlopT//ak1rwHlbTas5kWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvZDNiOTY2MDctOWI5NC0z MTZmLThmNTAtZWRlNWM2NDBiODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa6uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB65XRH7G8lcNGF2XtMJiYxLJ3nbHFJEceGHZvRh1y3hmUYgebgBkiMx MWlUNvtOaxGoTO/cQ3yHoTgHuW0u4+FY+i/v+IVqooMlM+vXu+5ROCJpfRHERceP r1Y7kmqafI6odvMBtOCLRQoPlv6jmpU5uRvS3Vbbb08KLPBX9kA233FkR3xk5tcb 5EoccbaTHcrWrEAdR1LsV7Uq88oZkgToP3kvs1Zpva41+Xou5bBZGA91N7Jh0tZF 4vSvXKY2gitN7KmD1ahLD/07GwTomZY6hpN8GvgterQWjI65PZ3n/zvcow4+T4x1 koHGuQjIIJyziNvK8np0Pl9vOej8VCw= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:08 2025 by rpki-client