$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa File: 3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa (raw, json) Hash identifier: 6iNuRtHULKisslSxiFdpQFL65BOE5FPabR14GYi9wtE= Subject key identifier: 46:86:D1:39:0E:9D:43:BA:BF:3A:84:F4:08:E4:CD:6C:CC:D9:23:43 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858485B6B02D11A06871619DC3100 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 4213 IP address blocks: 107.6.234.0/23 maxlen: 24 107.6.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:02:d1:1a:06:87:16:19:dc:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=b30ecb56-abbb-43b8-812a-b29af9af7f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:88:4c:26:19:04:af:f3:f0:21:12:a5:2d:b0: d3:c5:7f:ab:f8:67:f2:a3:cf:3a:cd:ba:f9:19:0a: 70:b1:2c:61:a9:76:b6:1d:5a:7e:e6:f9:e9:ba:7d: 51:e7:ce:3a:5c:91:e3:a6:40:16:47:25:fd:53:bb: 0d:64:1d:73:c3:86:a9:a6:14:85:28:0e:4e:15:d1: b5:bd:44:89:a4:14:bf:1d:f4:70:87:ac:3f:68:1c: 09:20:80:df:2e:70:2a:a4:bf:33:54:31:6c:33:a8: 58:71:d6:a4:d0:e3:79:98:a1:96:2a:fa:ff:d9:44: d2:84:ca:1f:0d:1c:d9:53:94:f0:80:0a:3e:37:d9: c8:e7:60:80:81:25:20:fc:d8:21:d6:fc:ff:c5:0a: b1:0d:16:5e:5c:e0:18:26:1c:6e:e7:44:53:9b:3a: 50:93:eb:55:17:df:f6:ce:b2:cf:d5:9d:6a:8c:72: 55:e2:40:1b:53:28:e3:bd:07:6f:30:f3:36:7c:73: af:9e:5f:98:41:8b:45:77:83:9b:c7:2b:09:b5:e9: 64:fc:3a:f0:9a:a8:40:15:e8:bb:51:e7:23:12:c4: 9f:7a:de:0c:19:5c:9d:af:70:72:7f:30:44:55:c0: 55:89:76:25:3c:6c:98:a3:8b:17:f1:59:5c:26:29: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:D1:39:0E:9D:43:BA:BF:3A:84:F4:08:E4:CD:6C:CC:D9:23:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3a7217b7-2254-31de-bdcd-a13c9dbcd9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.234.0-107.6.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:64:f5:ad:e4:b8:52:b0:79:4d:d4:6c:b9:2e:75:9e:fa:9b: 08:7d:5f:ad:7e:3b:6a:3d:2f:34:b7:40:4b:c5:01:6d:80:c8: 39:cc:2b:2f:47:c2:9f:9f:a2:cb:cf:86:b7:b8:f3:f9:f2:86: 2b:bf:3f:f7:04:5b:32:a5:ef:1e:ca:81:c8:92:d5:47:b2:c9: 88:6c:e9:36:ac:85:10:e1:0b:d8:0d:87:97:db:06:fd:36:72: a3:ed:f6:86:ab:e4:3e:3a:83:36:90:cc:91:f4:ca:37:3e:18: 17:66:fd:00:54:92:20:fc:d4:44:f6:8a:33:f5:e3:f3:1e:8a: 33:b7:be:7d:77:2c:64:58:8e:09:70:9f:8d:10:c2:80:9d:44: d1:be:68:54:28:c8:96:db:12:49:7f:ca:68:03:b9:df:21:52: af:38:45:7c:93:ad:75:09:af:ca:ba:91:55:35:96:3d:d7:94: ba:93:2b:eb:3c:ac:b4:f2:ee:44:b9:26:4e:21:a1:24:04:1f: cd:ce:c3:79:21:6a:ab:df:ef:5d:aa:c0:47:df:cb:70:e0:85: 10:ef:e2:fc:3c:9d:e0:41:e2:c2:fe:26:35:e3:e8:7b:16:46: 46:f8:5a:49:ad:82:56:4a:0e:f4:da:9a:76:3b:5b:96:c6:32: 9c:f0:7b:c7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhbawLRGgaHFhncMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk YjMwZWNiNTYtYWJiYi00M2I4LTgxMmEtYjI5YWY5YWY3ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ohMJhkEr/PwIRKlLbDTxX+r+Gfyo886zbr5 GQpwsSxhqXa2HVp+5vnpun1R5846XJHjpkAWRyX9U7sNZB1zw4apphSFKA5OFdG1 vUSJpBS/HfRwh6w/aBwJIIDfLnAqpL8zVDFsM6hYcdak0ON5mKGWKvr/2UTShMof DRzZU5TwgAo+N9nI52CAgSUg/Ngh1vz/xQqxDRZeXOAYJhxu50RTmzpQk+tVF9/2 zrLP1Z1qjHJV4kAbUyjjvQdvMPM2fHOvnl+YQYtFd4ObxysJtelk/DrwmqhAFei7 UecjEsSfet4MGVydr3ByfzBEVcBViXYlPGyYo4sX8VlcJinC+QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEaG0TkOnUO6vzqE9AjkzWzM2SNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2E3MjE3YjctMjI1NC0z MWRlLWJkY2QtYTEzYzlkYmNkOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFrBuoD BARrBuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFWT1reS4UrB5TdRsuS51nvqbCH1frX47aj0vNLdAS8UB bYDIOcwrL0fCn5+iy8+Gt7jz+fKGK78/9wRbMqXvHsqByJLVR7LJiGzpNqyFEOEL 2A2Hl9sG/TZyo+32hqvkPjqDNpDMkfTKNz4YF2b9AFSSIPzURPaKM/Xj8x6KM7e+ fXcsZFiOCXCfjRDCgJ1E0b5oVCjIltsSSX/KaAO53yFSrzhFfJOtdQmvyrqRVTWW PdeUupMr6zystPLuRLkmTiGhJAQfzc7DeSFqq9/vXarAR9/LcOCFEO/i/Dyd4EHi wv4mNePoexZGRvhaSa2CVkoO9NqadjtblsYynPB7xw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:48 2025 by rpki-client