$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b8720080-73a4-3b44-b545-982499b7e624.roa File: b8720080-73a4-3b44-b545-982499b7e624.roa (raw, json) Hash identifier: kifHYOrl7fItXSpUu8/O9TFrtME+h7DTCMtj5F00ugg= Subject key identifier: C1:1E:67:41:79:ED:A0:A1:1B:24:4F:14:E6:71:75:60:2F:76:39:B3 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858493C09308F94181BF833E25CC0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b8720080-73a4-3b44-b545-982499b7e624.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 4213 IP address blocks: 107.6.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:30:8f:94:18:1b:f8:33:e2:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=92951e41-b224-41f9-84a4-2750c7a153a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:95:c4:c5:89:c4:33:f0:b3:24:21:68:0a: 92:62:ed:70:89:08:cb:f7:53:5a:fb:be:af:b9:be: bf:2d:ef:50:5a:e4:4f:d4:4d:e5:71:f1:c1:ff:61: c5:bc:e0:30:09:c9:b0:a5:d1:d1:31:03:3a:9e:05: a8:54:b7:f8:d2:df:79:48:cb:32:fd:b9:64:16:2e: ea:04:41:65:89:83:76:79:74:c0:47:52:c3:31:91: 34:80:e7:5b:60:4a:5f:d5:a8:47:fd:94:9f:26:b0: b7:8b:46:92:f1:cf:65:73:11:01:3c:1a:7b:51:c4: 1c:5a:e6:29:1a:6e:b7:7e:67:05:81:04:a4:bc:cb: 97:4d:02:da:f6:da:37:4b:90:64:8e:06:dd:f8:cf: 22:b1:ec:c4:67:2c:b4:28:3c:00:33:d8:0e:bb:e3: 21:3c:57:31:5b:41:f0:37:12:57:40:d8:73:c0:52: 9e:c6:37:e5:2e:89:d7:09:e7:f1:21:20:4d:35:3e: 14:d4:e9:c5:92:b0:72:34:bf:21:71:a4:d6:24:fa: 2d:bb:e0:13:9e:0c:72:3e:b3:21:9e:17:47:d7:64: 0e:8f:b6:2b:76:f8:1a:99:db:03:26:85:e2:1c:f9: 21:3c:39:79:2a:ce:09:39:65:56:68:9f:a3:50:1c: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1E:67:41:79:ED:A0:A1:1B:24:4F:14:E6:71:75:60:2F:76:39:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/b8720080-73a4-3b44-b545-982499b7e624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 107.6.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:41:d5:fe:17:dc:26:36:db:f6:fc:28:b2:b2:b0:5d:da:0f: b7:32:74:c6:13:8a:26:45:ea:7a:84:8e:18:52:58:8c:cf:ec: 34:c2:44:36:ca:cc:dc:04:a7:a9:8d:25:08:7c:5a:64:d8:43: c4:0d:8e:fc:e0:bd:57:c7:7d:4c:53:67:14:18:a8:fd:cb:0c: 48:74:bf:fc:3a:9d:f7:8f:e2:c4:b6:30:02:b4:82:93:0c:18: 72:3b:55:f4:fc:97:f1:d9:08:3e:ca:ff:85:02:58:c1:51:90: 18:25:49:e7:f0:32:b0:f1:f6:02:eb:41:bc:06:7e:54:d2:45: 9e:65:78:54:16:ba:30:cd:34:3c:2c:35:18:99:25:25:fd:ee: a9:cf:47:53:86:ab:f8:39:9f:4f:d0:05:03:92:69:ba:69:95: 38:39:45:e9:18:ca:cf:76:77:db:3e:74:40:0f:fe:60:cb:80: a1:ea:7e:aa:e6:58:42:19:b3:6a:78:bf:88:95:25:82:77:35: d3:68:dc:c9:b2:89:a8:19:6d:e4:2b:b2:a2:4c:dd:14:9e:f7: 79:e5:7f:d5:ac:af:ae:16:14:ac:3f:ba:34:df:b4:c7:27:7d: f0:0e:7b:c1:60:3a:df:92:bb:96:41:63:61:f1:b2:b4:63:a0: aa:94:16:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTCPlBgb+DPiXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTI5NTFlNDEtYjIyNC00MWY5LTg0YTQtMjc1MGM3YTE1M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyyVxMWJxDPwsyQhaAqSYu1wiQjL91Na+76v ub6/Le9QWuRP1E3lcfHB/2HFvOAwCcmwpdHRMQM6ngWoVLf40t95SMsy/blkFi7q BEFliYN2eXTAR1LDMZE0gOdbYEpf1ahH/ZSfJrC3i0aS8c9lcxEBPBp7UcQcWuYp Gm63fmcFgQSkvMuXTQLa9to3S5Bkjgbd+M8isezEZyy0KDwAM9gOu+MhPFcxW0Hw NxJXQNhzwFKexjflLonXCefxISBNNT4U1OnFkrByNL8hcaTWJPotu+ATngxyPrMh nhdH12QOj7YrdvgamdsDJoXiHPkhPDl5Ks4JOWVWaJ+jUBxPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEeZ0F57aChGyRPFOZxdWAvdjmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvYjg3MjAwODAtNzNhNC0z YjQ0LWI1NDUtOTgyNDk5YjdlNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCawb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtB1f4X3CY22/b8KLKysF3aD7cydMYTiiZF6nqEjhhSWIzP7DTCRDbK zNwEp6mNJQh8WmTYQ8QNjvzgvVfHfUxTZxQYqP3LDEh0v/w6nfeP4sS2MAK0gpMM GHI7VfT8l/HZCD7K/4UCWMFRkBglSefwMrDx9gLrQbwGflTSRZ5leFQWujDNNDws NRiZJSX97qnPR1OGq/g5n0/QBQOSabpplTg5RekYys92d9s+dEAP/mDLgKHqfqrm WEIZs2p4v4iVJYJ3NdNo3MmyiagZbeQrsqJM3RSe93nlf9Wsr64WFKw/ujTftMcn ffAOe8FgOt+Su5ZBY2HxsrRjoKqUFrU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:39 2025 by rpki-client