$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa File: baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa (raw, json) Hash identifier: 1kRsZPXUWNhQMUvnQVofrcFHTm8cAvyTw6u8PyE/+Mc= Subject key identifier: D2:9F:F4:7F:A7:18:12:5B:3C:22:F1:AB:97:E8:F3:34:41:90:F1:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F76C477E802F0EC4195080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 107.4.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:6c:47:7e:80:2f:0e:c4:19:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c6fb309a-1349-49f0-8fdb-5b4d249dd336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:f8:61:e1:11:7e:5e:5b:fb:07:86:58:65: 96:29:b2:41:86:4a:5f:e7:44:80:cd:3b:49:a5:07: 42:d0:1e:0e:f9:1c:f6:8e:4a:72:30:ff:8f:1e:b3: b7:08:2f:39:8f:7f:61:2c:93:8c:81:12:75:fe:4e: b9:b0:bf:b1:ec:26:cf:3d:b2:38:f8:bc:be:80:01: 4c:d7:2e:c4:31:5f:1c:1c:6f:9f:92:e2:ac:28:ca: 6c:5d:c4:6b:cb:39:48:46:c0:a8:b1:b3:e3:68:81: 4f:f0:69:12:ca:f2:98:de:ec:0e:44:5b:2d:8c:dc: 75:1b:07:e6:ba:84:8a:0c:95:53:0c:86:c6:9a:c9: db:31:15:db:db:cc:07:dd:16:2c:83:5c:29:6e:09: 2c:28:3f:83:99:78:de:af:6e:a8:a0:bd:1d:15:01: 59:e3:08:4a:99:a4:8f:cd:3e:ae:a5:87:fb:62:44: 00:a3:84:f4:71:cb:84:e4:0c:ef:6a:32:94:e6:96: 74:15:27:9e:75:9b:fd:b4:cd:b4:31:24:72:41:36: dd:cd:6f:c8:84:12:3f:e9:de:40:ba:5c:79:96:b4: e4:90:03:af:22:34:c3:ce:95:f8:ac:a0:1f:27:12: 13:d3:45:39:17:7b:3c:4f:0d:b9:89:85:b2:83:a7: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:F4:7F:A7:18:12:5B:3C:22:F1:AB:97:E8:F3:34:41:90:F1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:05:ad:9f:11:f1:c5:ea:b4:f4:b3:be:a6:9c:c2:04:f8:26: e4:e3:73:81:fb:dc:3c:a2:a3:93:1a:f5:10:ce:95:49:9b:d7: 7d:95:2b:e3:b8:2f:dd:92:c0:fc:5c:9c:ba:42:03:5f:c6:9d: f4:67:7b:16:dd:7a:37:b4:c1:1b:77:b0:5f:a3:90:da:32:2f: 8e:0a:cb:f0:d5:4d:1d:dc:82:a4:2b:27:33:ba:02:3b:bc:79: 4f:72:8e:fa:ce:e4:20:c2:93:04:32:62:12:32:ea:47:51:ad: b3:48:96:79:ec:0b:51:90:39:e8:8d:b0:12:52:15:5b:76:78: 85:dc:1e:d2:17:aa:3a:84:cf:50:67:d1:d4:b2:e9:95:e5:25: 58:42:b6:d3:54:a0:56:fa:bc:26:b4:a5:d6:b7:6d:1a:84:60: b1:03:d4:6c:42:e9:97:0c:32:37:3b:40:0e:24:16:6e:f3:a1: ca:ba:fe:99:0f:1a:23:c5:6e:39:8b:23:5c:00:ec:10:c2:94: 67:1c:38:1b:b1:90:4b:57:f8:4d:3e:ea:b7:b2:88:bb:f1:78: e9:3e:4b:c5:71:6e:bd:00:1d:2a:9e:02:c7:98:a7:ee:98:70: 99:64:d7:10:e6:6d:97:28:e7:5b:06:1d:ee:68:63:34:d5:4f: 9b:04:ec:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj092xHfoAvDsQZUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzZmYjMwOWEtMTM0OS00OWYwLThmZGItNWI0ZDI0OWRkMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeb4YeERfl5b+weGWGWWKbJBhkpf50SAzTtJ pQdC0B4O+Rz2jkpyMP+PHrO3CC85j39hLJOMgRJ1/k65sL+x7CbPPbI4+Ly+gAFM 1y7EMV8cHG+fkuKsKMpsXcRryzlIRsCosbPjaIFP8GkSyvKY3uwORFstjNx1Gwfm uoSKDJVTDIbGmsnbMRXb28wH3RYsg1wpbgksKD+DmXjer26ooL0dFQFZ4whKmaSP zT6upYf7YkQAo4T0ccuE5AzvajKU5pZ0FSeedZv9tM20MSRyQTbdzW/IhBI/6d5A ulx5lrTkkAOvIjTDzpX4rKAfJxIT00U5F3s8Tw25iYWyg6eA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKf9H+nGBJbPCLxq5fo8zRBkPH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmNGY1NzktZWZmMC0z NTBlLWI3YTMtY2ZkNDNjZmVhMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANoFrZ8R8cXqtPSzvqacwgT4JuTjc4H73Dyio5Ma9RDOlUmb132VK+O4 L92SwPxcnLpCA1/GnfRnexbdeje0wRt3sF+jkNoyL44Ky/DVTR3cgqQrJzO6Aju8 eU9yjvrO5CDCkwQyYhIy6kdRrbNIlnnsC1GQOeiNsBJSFVt2eIXcHtIXqjqEz1Bn 0dSy6ZXlJVhCttNUoFb6vCa0pda3bRqEYLED1GxC6ZcMMjc7QA4kFm7zocq6/pkP GiPFbjmLI1wA7BDClGccOBuxkEtX+E0+6reyiLvxeOk+S8Vxbr0AHSqeAseYp+6Y cJlk1xDmbZco51sGHe5oYzTVT5sE7Ow= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:18 2025 by rpki-client