$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68fd27b1-d09c-3ada-8a1d-84e1f8df6c5e.roa File: 68fd27b1-d09c-3ada-8a1d-84e1f8df6c5e.roa (raw, json) Hash identifier: QyF8+PCInRxdycqoAwkEbpoekA1LlaBlMHNpIG7Txng= Subject key identifier: 75:15:50:8E:0A:F7:E8:AF:C1:26:C8:D1:06:17:D1:D7:38:15:A4:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D0B01EC83EB1C28ADCF58 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68fd27b1-d09c-3ada-8a1d-84e1f8df6c5e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 107.3.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:0b:01:ec:83:eb:1c:28:ad:cf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=bef63de7-f5e5-4a81-8a77-2ef385e7659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:2d:d6:d6:f2:ab:66:b7:bf:a2:3e:29:cf: 32:5e:a9:72:9f:ea:6c:91:8d:c3:36:79:01:91:0c: 61:a4:df:3a:44:a2:d9:ae:bf:cc:9c:3f:73:87:45: d3:7c:e6:5b:09:7f:45:4b:ff:61:a2:9e:2b:3b:f5: 2f:15:86:90:b7:98:01:01:9a:b8:05:82:68:bf:f4: ba:9f:72:52:96:a6:cd:ce:01:d8:2d:b3:8a:6c:8a: 79:96:ab:5b:50:3a:dd:41:02:22:69:38:92:cd:80: d2:03:c6:84:7c:20:12:53:bd:07:3f:73:36:00:be: 8c:1b:f9:98:01:90:79:c9:07:04:c0:58:e7:b3:ba: d3:89:64:0d:93:b5:c4:46:be:36:d0:29:b2:c8:8a: 42:b5:a8:d8:6c:c0:7b:cd:51:6c:cd:9c:4c:d7:16: 50:00:0d:6c:d5:00:ad:d6:a8:9b:45:13:a5:73:89: 8e:1e:05:69:1e:4d:63:c4:e4:0e:62:b9:92:98:af: db:07:ef:f7:3a:2c:8c:12:35:f6:88:39:f1:93:19: 00:74:74:79:35:b8:d3:52:8e:d2:c6:56:ac:f7:4d: d5:bb:96:0d:23:bb:ad:e5:08:31:da:32:18:8f:98: 3f:60:ef:7c:e2:1f:3e:54:5e:f1:89:e5:ea:61:9e: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:15:50:8E:0A:F7:E8:AF:C1:26:C8:D1:06:17:D1:D7:38:15:A4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68fd27b1-d09c-3ada-8a1d-84e1f8df6c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.3.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:68:7b:df:52:89:8e:05:27:60:c3:62:44:28:99:dd:06:24: 0b:03:a6:1d:a3:8e:05:6c:40:5f:a8:3d:51:d5:43:cf:78:87: ac:a7:d7:ad:7a:ad:79:10:17:6f:2b:f4:d9:ac:e8:2a:7f:0c: 8c:d3:68:b5:48:7c:93:c7:69:68:2b:90:98:60:7d:97:29:3a: 2b:5d:aa:08:99:7c:90:4d:e8:3c:8b:47:da:6c:3d:d6:21:5a: e9:1b:40:aa:14:9e:33:ee:e7:8a:67:b7:5d:b3:03:21:c5:10: fa:e7:ef:68:3c:c3:35:f2:f4:43:ce:e4:f3:ad:cf:f1:1b:ac: 08:b2:cc:57:5d:2d:23:ac:3b:50:1d:c9:29:73:dc:35:58:0a: f0:5c:c4:50:7c:53:45:d8:90:a0:77:44:2d:28:bf:8c:ee:e3: 3a:53:51:a6:5e:f2:da:41:2d:85:39:f0:c3:8e:4f:61:e9:ef: 02:df:3c:d4:64:f6:d0:75:b3:7a:9a:9e:f9:bd:41:9c:d2:3e: 91:6c:5c:a0:93:50:81:a6:67:d6:fb:99:17:97:80:f9:4d:24: a4:60:81:73:b3:67:47:e2:29:51:e6:41:85:2c:ac:d9:9b:0d: 1f:16:00:a7:1e:78:24:ad:c6:83:dd:b8:70:1a:c7:90:ad:18: 94:84:a6:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebQsB7IPrHCitz1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YmVmNjNkZTctZjVlNS00YTgxLThhNzctMmVmMzg1ZTc2NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrUt1tbyq2a3v6I+Kc8yXqlyn+pskY3DNnkB kQxhpN86RKLZrr/MnD9zh0XTfOZbCX9FS/9hop4rO/UvFYaQt5gBAZq4BYJov/S6 n3JSlqbNzgHYLbOKbIp5lqtbUDrdQQIiaTiSzYDSA8aEfCASU70HP3M2AL6MG/mY AZB5yQcEwFjns7rTiWQNk7XERr420CmyyIpCtajYbMB7zVFszZxM1xZQAA1s1QCt 1qibRROlc4mOHgVpHk1jxOQOYrmSmK/bB+/3OiyMEjX2iDnxkxkAdHR5NbjTUo7S xlas903Vu5YNI7ut5Qgx2jIYj5g/YO984h8+VF7xieXqYZ4QWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUVUI4K9+ivwSbI0QYX0dc4FaSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhmZDI3YjEtZDA5Yy0z YWRhLThhMWQtODRlMWY4ZGY2YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawPZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1oe99SiY4FJ2DDYkQomd0GJAsDph2jjgVsQF+oPVHVQ894h6yn1616 rXkQF28r9Nms6Cp/DIzTaLVIfJPHaWgrkJhgfZcpOitdqgiZfJBN6DyLR9psPdYh WukbQKoUnjPu54pnt12zAyHFEPrn72g8wzXy9EPO5POtz/EbrAiyzFddLSOsO1Ad ySlz3DVYCvBcxFB8U0XYkKB3RC0ov4zu4zpTUaZe8tpBLYU58MOOT2Hp7wLfPNRk 9tB1s3qanvm9QZzSPpFsXKCTUIGmZ9b7mReXgPlNJKRggXOzZ0fiKVHmQYUsrNmb DR8WAKceeCStxoPduHAax5CtGJSEpnc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:13:03 2025 by rpki-client