$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa File: a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa (raw, json) Hash identifier: DQuVM/W7LRM7hcP5X7xzPLOwngmIKtU0n1ryR2upTlw= Subject key identifier: 76:C5:6C:A2:09:D9:D1:F8:64:2C:4C:0B:7A:96:04:5D:3F:39:02:89 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849029E8971E37575EF2750D380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa Signing time: Wed 26 Feb 2025 11:24:52 +0000 ROA not before: Wed 26 Feb 2025 11:24:52 +0000 ROA not after: Tue 27 May 2025 10:24:52 +0000 asID: 30036 IP address blocks: 107.167.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:9e:89:71:e3:75:75:ef:27:50:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 26 11:24:52 2025 GMT Not After : May 27 10:24:52 2025 GMT Subject: CN=4934da5c-952b-4d4a-b4f1-2418977eb466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:11:3d:21:08:f7:be:67:a2:02:5a:e5:c8: 09:c9:20:b6:70:b1:e8:c6:65:5e:cb:8d:4b:0a:38: 3a:94:0b:08:65:b0:17:fe:09:f3:37:24:dd:7c:6f: 20:c2:94:ca:16:9a:63:07:8c:d1:ce:74:b6:c2:9f: f0:6b:fc:4e:9c:10:a5:bb:fc:5c:d0:12:27:93:44: 43:71:7a:d2:f1:20:d6:14:07:a7:da:fc:ba:61:fe: 30:ff:68:98:93:48:c6:a5:bf:04:20:44:a6:bd:21: b4:6f:d3:26:54:13:a3:f2:86:ed:aa:b7:a9:14:4a: 60:5f:2a:1d:55:8d:36:d3:cd:5b:a5:a8:f9:f8:6b: bc:6d:0b:dc:08:f9:99:01:94:89:a9:15:36:3b:eb: 39:ab:82:2a:dd:1b:72:24:53:c6:ea:a8:3f:42:9c: 21:cd:7f:20:3f:a8:8e:90:a5:85:43:3a:72:31:06: 2b:cc:37:29:2d:ae:71:7c:f9:84:0e:fc:c3:b7:8b: 42:64:6d:ab:48:0c:15:9b:25:1d:ae:92:a8:44:89: 82:65:90:b6:ee:bb:a0:fe:e4:4d:45:f1:1d:44:96: d5:c0:44:e2:db:7e:88:61:44:48:43:30:09:39:53: 24:9d:f4:ec:b1:95:b8:54:80:ec:41:ad:7b:bc:69: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C5:6C:A2:09:D9:D1:F8:64:2C:4C:0B:7A:96:04:5D:3F:39:02:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a559bad2-abf0-3de4-b5cd-a26b4d86dae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:17:aa:98:3a:c4:07:10:bc:81:d6:f8:bd:e0:62:55:55:60: 0d:2c:99:b2:5b:b0:18:b2:76:5b:ca:16:3d:e8:77:76:91:c9: 96:72:f5:73:6c:cf:15:34:99:20:b3:d4:ad:a8:41:73:33:2e: f0:47:40:d7:54:25:e2:e3:bf:e9:88:8b:66:db:a0:aa:30:d4: 95:5a:bc:9f:66:e0:3d:2c:95:64:f1:c9:aa:23:3b:aa:d3:fa: 28:b2:34:f6:02:45:d0:25:00:e7:a8:5a:ab:f3:17:25:e5:34: f6:dd:ea:d6:92:72:d8:69:23:36:28:d1:1d:da:ce:ed:d2:97: 17:52:27:09:e1:87:f6:ff:eb:4a:af:1a:48:a0:83:18:5f:c6: 90:2a:b5:da:99:80:00:64:e6:cc:91:86:61:7b:88:36:bb:4f: 5a:69:b0:37:3d:d0:94:1f:ca:0a:31:ef:18:8e:13:7e:7f:aa: 21:4b:52:b6:fa:d5:0b:cd:90:21:99:4c:d8:fd:aa:d7:b5:8d: 26:35:4c:81:eb:cb:df:92:31:ef:7b:37:a8:f4:9c:e7:09:c4: 43:f1:fe:48:1c:de:29:ed:33:f9:ca:78:5a:61:f1:c8:6c:3a: 07:61:46:31:09:e6:1d:e9:7e:62:dc:d8:9b:58:79:bb:50:a0: be:63:aa:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkCnolx43V17ydQ04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyNjExMjQ1MloXDTI1MDUyNzEwMjQ1MlowLzEtMCsGA1UEAxMk NDkzNGRhNWMtOTUyYi00ZDRhLWI0ZjEtMjQxODk3N2ViNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYwRPSEI975nogJa5cgJySC2cLHoxmVey41L Cjg6lAsIZbAX/gnzNyTdfG8gwpTKFppjB4zRznS2wp/wa/xOnBClu/xc0BInk0RD cXrS8SDWFAen2vy6Yf4w/2iYk0jGpb8EIESmvSG0b9MmVBOj8obtqrepFEpgXyod VY02081bpaj5+Gu8bQvcCPmZAZSJqRU2O+s5q4Iq3RtyJFPG6qg/QpwhzX8gP6iO kKWFQzpyMQYrzDcpLa5xfPmEDvzDt4tCZG2rSAwVmyUdrpKoRImCZZC27rug/uRN RfEdRJbVwETi236IYURIQzAJOVMknfTssZW4VIDsQa17vGkvdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbFbKIJ2dH4ZCxMC3qWBF0/OQKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTU1OWJhZDItYWJmMC0z ZGU0LWI1Y2QtYTI2YjRkODZkYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwXqpg6xAcQvIHW+L3gYlVVYA0smbJbsBiydlvKFj3od3aRyZZy9XNs zxU0mSCz1K2oQXMzLvBHQNdUJeLjv+mIi2bboKow1JVavJ9m4D0slWTxyaojO6rT +iiyNPYCRdAlAOeoWqvzFyXlNPbd6taScthpIzYo0R3azu3SlxdSJwnhh/b/60qv GkiggxhfxpAqtdqZgABk5syRhmF7iDa7T1ppsDc90JQfygox7xiOE35/qiFLUrb6 1QvNkCGZTNj9qte1jSY1TIHry9+SMe97N6j0nOcJxEPx/kgc3intM/nKeFph8chs OgdhRjEJ5h3pfmLc2JtYebtQoL5jqjk= -----END CERTIFICATE-----Generated at Tue Apr 8 23:51:24 2025 by rpki-client