$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa File: c491c12d-818f-3600-85d3-2274f8c724f7.roa (raw, json) Hash identifier: tylHQoFH0jvCur21ijSUFK8P1a7hMCKacSTIK8Rijdk= Subject key identifier: BA:FB:61:D6:3C:69:D5:93:B6:01:2A:1E:09:97:01:82:AC:BA:25:72 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F43285848C938FADBE2A7C01BCB1536E0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa Signing time: Wed 05 Feb 2025 21:59:10 +0000 ROA not before: Wed 05 Feb 2025 21:59:10 +0000 ROA not after: Tue 06 May 2025 20:59:10 +0000 asID: 22652 IP address blocks: 107.161.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:38:fa:db:e2:a7:c0:1b:cb:15:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Feb 5 21:59:10 2025 GMT Not After : May 6 20:59:10 2025 GMT Subject: CN=70e0bd53-6f43-40d0-afc1-baa89568d920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:68:4d:a6:f9:47:18:f3:aa:f2:6a:1b:66:c5: a2:3a:1d:3b:59:88:2c:a9:dc:7d:f7:ed:c6:8a:7d: 5d:20:10:f9:51:30:52:b1:f1:61:ad:cb:aa:b4:07: d9:1a:2e:9e:00:df:c0:05:07:8e:30:c1:ba:a1:27: 2e:fd:ac:a2:70:82:91:61:ee:23:ff:0d:4e:83:c5: 70:e1:1e:1c:35:9a:d5:31:c6:03:c3:e7:4d:b8:a9: 09:b5:f1:56:63:59:65:6b:bd:9d:a3:d5:cd:70:54: 7a:11:5f:48:40:20:bf:b1:87:fa:49:ea:ea:2a:ed: 16:46:65:d3:a9:d4:ce:3a:83:92:40:fd:b9:2c:74: b3:f1:9a:4f:e4:38:50:19:92:85:ce:b7:3f:f2:47: 98:ea:e2:da:57:cb:91:4e:bf:ca:f9:be:d9:ec:92: 4e:0c:35:fd:17:fc:0c:2a:44:6a:1d:9b:05:00:e2: 58:ed:5e:b7:ff:56:54:4f:dc:8e:37:d7:9d:1f:38: f8:d2:f4:f9:4d:b0:ca:ae:aa:26:cc:88:d8:46:d5: fd:e5:ea:25:99:0d:a6:74:5f:a0:cf:8c:c2:e4:76: d5:58:2a:55:84:16:e2:39:34:bc:90:2f:69:81:59: 34:3f:5f:50:36:bc:ea:96:98:59:df:e5:9e:3d:76: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:61:D6:3C:69:D5:93:B6:01:2A:1E:09:97:01:82:AC:BA:25:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 107.161.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7e:a8:97:d4:e6:00:46:80:3e:a9:81:5d:90:4b:fe:6e:3a: d1:71:a3:fb:6e:a1:89:3a:79:80:c0:a2:2f:2b:a4:7d:20:f8: bd:63:21:02:30:c0:dd:94:32:3a:d4:9d:4c:d9:1f:2b:36:05: a0:f1:45:54:37:c9:de:45:b4:31:de:4e:d1:36:fd:f5:0c:6b: c7:17:be:d6:a4:54:64:85:be:e3:2b:71:a8:40:cc:2f:11:02: 4e:9e:90:23:31:01:a6:7c:da:3e:a2:69:1d:5d:4e:d1:5c:a5: ba:b5:b5:aa:5e:9a:96:bd:43:55:7e:83:dc:d4:57:10:64:25: 63:d0:da:ca:22:10:c1:28:08:4b:ed:4d:58:34:5d:a0:a6:d4: fd:12:a4:21:2b:91:f0:7b:c9:ca:99:80:da:2e:1a:e0:5d:9e: 61:4e:38:fb:0c:84:58:8d:f8:9b:7b:2f:16:c5:24:c3:77:43: 34:3b:95:c3:ec:9f:f3:d7:ec:47:e1:f6:61:e2:44:41:6e:5d: 65:9e:c6:41:5d:49:29:6a:a4:c9:01:ed:9c:be:a8:47:d7:e2: 9c:ee:52:4b:50:f1:38:f6:69:32:8b:94:8d:5d:81:ff:d0:c7: 5a:56:09:55:9e:87:64:97:9a:18:05:b8:ab:35:75:b1:ba:31: 98:f1:a7:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJOPrb4qfAG8sVNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDIwNTIxNTkxMFoXDTI1MDUwNjIwNTkxMFowLzEtMCsGA1UEAxMk NzBlMGJkNTMtNmY0My00MGQwLWFmYzEtYmFhODk1NjhkOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72hNpvlHGPOq8mobZsWiOh07WYgsqdx99+3G in1dIBD5UTBSsfFhrcuqtAfZGi6eAN/ABQeOMMG6oScu/ayicIKRYe4j/w1Og8Vw 4R4cNZrVMcYDw+dNuKkJtfFWY1lla72do9XNcFR6EV9IQCC/sYf6SerqKu0WRmXT qdTOOoOSQP25LHSz8ZpP5DhQGZKFzrc/8keY6uLaV8uRTr/K+b7Z7JJODDX9F/wM KkRqHZsFAOJY7V63/1ZUT9yON9edHzj40vT5TbDKrqomzIjYRtX95eolmQ2mdF+g z4zC5HbVWCpVhBbiOTS8kC9pgVk0P19QNrzqlphZ3+WePXb/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr7YdY8adWTtgEqHgmXAYKsuiVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzQ5MWMxMmQtODE4Zi0z NjAwLTg1ZDMtMjI3NGY4YzcyNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa6EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp+qJfU5gBGgD6pgV2QS/5uOtFxo/tuoYk6eYDAoi8rpH0g+L1jIQIw wN2UMjrUnUzZHys2BaDxRVQ3yd5FtDHeTtE2/fUMa8cXvtakVGSFvuMrcahAzC8R Ak6ekCMxAaZ82j6iaR1dTtFcpbq1tapempa9Q1V+g9zUVxBkJWPQ2soiEMEoCEvt TVg0XaCm1P0SpCErkfB7ycqZgNouGuBdnmFOOPsMhFiN+Jt7LxbFJMN3QzQ7lcPs n/PX7Efh9mHiREFuXWWexkFdSSlqpMkB7Zy+qEfX4pzuUktQ8Tj2aTKLlI1dgf/Q x1pWCVWeh2SXmhgFuKs1dbG6MZjxp14= -----END CERTIFICATE-----Generated at Sat Apr 12 00:06:21 2025 by rpki-client