$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa File: 045e585e-8292-389d-a1f1-87e5aa9d3e80.roa (raw, json) Hash identifier: dceaKhbKCyhgrS5g4KaFucWMnNP1iazKbAQ6cGIeCuw= Subject key identifier: 45:82:18:31:8C:59:03:23:B7:00:39:2D:6C:ED:24:C9:12:98:16:92 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285848EF616BF761733059613A2380 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 107.151.224.0/24 maxlen: 24 107.151.225.0/24 maxlen: 24 107.151.226.0/24 maxlen: 24 107.151.227.0/24 maxlen: 24 107.151.228.0/24 maxlen: 24 107.151.229.0/24 maxlen: 24 107.151.230.0/24 maxlen: 24 107.151.231.0/24 maxlen: 24 107.151.232.0/24 maxlen: 24 107.151.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6b:f7:61:73:30:59:61:3a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=57a99c73-b0d9-42c9-b1ec-9cd4b6ae4828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:b3:6a:0b:70:f6:f8:af:2c:bd:e8:af:b6: 9a:51:96:23:bf:27:e3:91:6f:89:95:84:36:e9:72: f9:5f:e5:aa:f6:e6:9c:2b:e9:cc:88:5d:53:55:71: 74:36:f9:d2:a1:04:e1:10:c3:8a:9f:10:dd:6b:b2: 46:6b:75:2f:53:14:7b:05:6d:83:66:49:c4:46:78: b7:c0:79:ea:cf:c9:fc:e8:d0:27:73:14:88:29:10: db:35:9f:f0:65:29:87:a8:ed:1d:39:03:f1:60:d6: 91:59:08:99:56:16:9b:d4:d5:3c:53:58:ab:3b:13: 0e:13:d2:e9:0f:c2:ac:e3:6e:f1:7f:b9:64:d5:26: 2d:84:e9:af:64:00:ea:19:20:9e:9d:c4:10:d2:96: 2a:d2:f7:f0:93:85:2a:33:f9:df:01:7f:33:06:e4: a7:97:8a:1c:ee:62:25:af:02:aa:df:26:8f:40:78: 7a:38:47:87:ee:45:33:cc:00:03:41:2a:b5:29:7c: 6e:5e:ab:93:6a:8b:6b:a2:ca:b5:72:44:10:0d:31: b4:62:64:8f:70:b1:11:fb:bd:22:5f:59:22:40:00: 90:77:ea:ba:9e:79:27:63:39:8e:e4:10:d4:23:67: e7:76:bb:d7:97:05:66:de:b3:60:9d:d1:e4:5e:19: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:82:18:31:8C:59:03:23:B7:00:39:2D:6C:ED:24:C9:12:98:16:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/045e585e-8292-389d-a1f1-87e5aa9d3e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4d:81:ad:89:bf:d1:b7:da:96:8f:81:76:28:d6:72:1f:07: 9c:2d:5f:e3:e1:0f:25:87:a2:26:d3:1f:d3:93:b5:79:cd:a5: cd:34:39:52:62:bb:8c:9c:8b:2f:85:98:3b:dc:69:be:99:67: 7c:82:41:a0:bf:e7:41:ca:e0:4b:d4:26:cb:4e:25:4c:9d:b4: d2:9e:2a:8f:8b:55:fc:4a:49:87:5a:70:35:6d:ba:5c:99:bc: c5:f9:10:23:65:66:f7:1d:ac:6c:31:12:77:2a:27:5e:e9:08: 70:a1:da:78:ee:8c:49:ae:8a:aa:32:09:dc:15:64:ec:e1:5a: 8d:54:e2:a7:03:f5:cf:34:83:34:8b:7b:10:11:f0:6f:6f:a4: 6b:92:ea:a5:62:0e:47:7f:fc:b8:19:c6:ec:94:7c:56:5c:3b: d1:f4:77:0f:e4:fd:6b:2c:22:77:69:53:78:08:d7:9a:5f:66: b4:b8:ed:b6:ac:70:41:f6:60:fe:db:14:42:16:21:2b:9d:09: 55:20:a4:06:7c:48:a3:29:03:ca:a4:eb:a1:1f:a9:6b:d3:70: 12:cb:ad:81:85:ca:06:7d:cc:98:cb:01:2e:52:24:70:ca:66: d4:26:c9:22:47:d6:bd:83:d4:e3:5b:fe:87:fc:09:f5:b4:c4: 82:ea:46:1d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjvYWv3YXMwWWE6I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NTdhOTljNzMtYjBkOS00MmM5LWIxZWMtOWNkNGI2YWU0ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq2zagtw9vivLL3or7aaUZYjvyfjkW+JlYQ2 6XL5X+Wq9uacK+nMiF1TVXF0NvnSoQThEMOKnxDda7JGa3UvUxR7BW2DZknERni3 wHnqz8n86NAncxSIKRDbNZ/wZSmHqO0dOQPxYNaRWQiZVhab1NU8U1irOxMOE9Lp D8Ks427xf7lk1SYthOmvZADqGSCencQQ0pYq0vfwk4UqM/nfAX8zBuSnl4oc7mIl rwKq3yaPQHh6OEeH7kUzzAADQSq1KXxuXquTaotrosq1ckQQDTG0YmSPcLER+70i X1kiQACQd+q6nnknYzmO5BDUI2fndrvXlwVm3rNgndHkXhlpBwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEWCGDGMWQMjtwA5LWztJMkSmBaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMDQ1ZTU4NWUtODI5Mi0z ODlkLWExZjEtODdlNWFhOWQzZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAIU2BrYm/0bfalo+BdijWch8HnC1f4+EPJYeiJtMf05O1 ec2lzTQ5UmK7jJyLL4WYO9xpvplnfIJBoL/nQcrgS9Qmy04lTJ200p4qj4tV/EpJ h1pwNW26XJm8xfkQI2Vm9x2sbDESdyonXukIcKHaeO6MSa6KqjIJ3BVk7OFajVTi pwP1zzSDNIt7EBHwb2+ka5LqpWIOR3/8uBnG7JR8Vlw70fR3D+T9aywid2lTeAjX ml9mtLjttqxwQfZg/tsUQhYhK50JVSCkBnxIoykDyqTroR+pa9NwEsutgYXKBn3M mMsBLlIkcMpm1CbJIkfWvYPU41v+h/wJ9bTEgupGHQ== -----END CERTIFICATE-----Generated at Fri Apr 4 23:50:17 2025 by rpki-client