$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa File: 0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa (raw, json) Hash identifier: Uyy7TAGsG+8/mdOT0KhA0+biTF3aHKaLl4eZv++LroY= Subject key identifier: 97:9D:6F:0D:23:77:96:F7:99:7B:62:F0:50:16:D6:74:4A:EB:8E:A6 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858485B6B02E0D225B28E8B03F500 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 4213 IP address blocks: 107.6.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:02:e0:d2:25:b2:8e:8b:03:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=50d6de91-46a4-423e-ad27-cc663d6464d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:00:e9:9b:a4:a8:85:11:3c:c0:da:b1:6e:24: 39:5f:93:ae:93:b8:b5:6c:94:c9:3f:35:ae:a0:65: b4:7e:2d:22:11:15:6c:68:94:e2:a2:f1:30:c7:21: 27:09:4e:40:15:a5:0c:6c:37:35:97:a5:45:cd:8d: 13:75:97:fd:2d:d3:5d:cf:aa:c6:37:e6:b9:91:b8: f0:02:16:0b:e2:e7:66:7d:de:b1:5e:e7:92:37:39: 81:98:db:06:37:df:3f:53:0f:e7:36:3b:ee:d8:60: a8:bb:bc:3c:5d:c0:3a:48:78:da:ab:2c:54:45:9a: cc:00:a0:0a:02:ae:75:34:a2:b1:92:a7:20:bd:b1: 63:56:93:42:6e:a0:4c:04:7a:ff:e2:cf:7b:f0:b6: 57:5f:58:a5:d7:45:bb:3d:16:be:d3:b9:61:a7:88: b0:be:39:4c:a1:89:67:0e:2c:a7:ba:4e:f7:3b:2e: 39:73:94:bb:23:72:c1:21:b0:ea:ba:3a:1e:fd:de: ce:b3:d0:22:f0:fc:4a:be:5a:ab:d3:65:b8:9f:05: 44:41:a9:3a:78:12:d2:c0:78:5c:4f:1b:d9:3b:3f: e7:81:b7:78:ea:47:04:05:53:55:d2:d3:ea:f8:19: c0:dc:ef:50:09:2b:8a:a7:d1:38:29:ca:2b:b7:b3: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9D:6F:0D:23:77:96:F7:99:7B:62:F0:50:16:D6:74:4A:EB:8E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/0bf4b25f-595b-3aee-bcd1-1342e5e7eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cb:c6:09:b1:8f:81:a0:35:06:06:6e:0e:ff:6a:d1:64:57: 08:49:66:5f:3a:20:90:fe:d1:00:2e:e3:56:e0:9b:03:e3:61: eb:ea:11:e2:cc:6d:08:47:77:6d:c4:34:e6:07:65:18:fc:cd: 66:ae:66:ac:0a:90:1f:52:c4:1f:00:ad:0a:68:28:7a:0b:ee: 26:63:92:cc:56:b5:06:43:65:c9:2f:98:f8:63:e6:bc:67:e5: 14:6d:ae:90:71:f7:84:99:83:b9:66:34:2f:33:e2:af:86:d0: b8:db:f8:8c:58:d2:c3:f2:90:ec:a9:2c:36:d5:a6:20:05:08: 9b:04:a4:18:1c:6f:f9:c9:d2:06:18:68:6a:50:75:ba:1b:49: 99:0e:dd:40:f2:b6:29:fd:22:6a:ea:c9:90:17:38:a4:e2:92: cc:d3:96:7c:66:9c:3c:02:eb:b1:5f:ab:d4:33:c7:66:7d:d5: b3:83:ad:ce:d8:9d:03:23:ec:1b:7d:a2:b7:18:91:d6:de:ce: 6f:02:18:d5:b6:29:21:51:bb:b6:91:04:f4:b7:c6:e1:43:61: 81:1d:0f:b3:f1:b0:61:46:d5:e3:5d:9a:73:09:53:91:0d:09: 21:10:30:a8:9d:eb:1b:80:99:a0:05:f7:18:fd:69:99:94:50: d0:20:e1:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawLg0iWyjosD9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk NTBkNmRlOTEtNDZhNC00MjNlLWFkMjctY2M2NjNkNjQ2NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQDpm6SohRE8wNqxbiQ5X5Ouk7i1bJTJPzWu oGW0fi0iERVsaJTiovEwxyEnCU5AFaUMbDc1l6VFzY0TdZf9LdNdz6rGN+a5kbjw AhYL4udmfd6xXueSNzmBmNsGN98/Uw/nNjvu2GCou7w8XcA6SHjaqyxURZrMAKAK Aq51NKKxkqcgvbFjVpNCbqBMBHr/4s978LZXX1il10W7PRa+07lhp4iwvjlMoYln Diynuk73Oy45c5S7I3LBIbDqujoe/d7Os9Ai8PxKvlqr02W4nwVEQak6eBLSwHhc TxvZOz/ngbd46kcEBVNV0tPq+BnA3O9QCSuKp9E4Kcort7MdOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJedbw0jd5b3mXti8FAW1nRK646mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMGJmNGIyNWYtNTk1Yi0z YWVlLWJjZDEtMTM0MmU1ZTdlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Lxgmxj4GgNQYGbg7/atFkVwhJZl86IJD+0QAu41bgmwPjYevqEeLM bQhHd23ENOYHZRj8zWauZqwKkB9SxB8ArQpoKHoL7iZjksxWtQZDZckvmPhj5rxn 5RRtrpBx94SZg7lmNC8z4q+G0Ljb+IxY0sPykOypLDbVpiAFCJsEpBgcb/nJ0gYY aGpQdbobSZkO3UDytin9ImrqyZAXOKTikszTlnxmnDwC67Ffq9Qzx2Z91bODrc7Y nQMj7Bt9orcYkdbezm8CGNW2KSFRu7aRBPS3xuFDYYEdD7PxsGFG1eNdmnMJU5EN CSEQMKid6xuAmaAF9xj9aZmUUNAg4ew= -----END CERTIFICATE-----Generated at Fri Mar 14 10:56:00 2025 by rpki-client