$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa File: 430e50a7-91f5-304d-9b3f-69a68efcd530.roa (raw, json) Hash identifier: I58dfBWBXVNl0qa1z9gmCroYh4663GvUSlzqvigD7wg= Subject key identifier: 5B:11:B3:92:FB:DF:F3:94:CB:57:57:C0:99:9D:00:BB:47:9D:24:7F Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849447F0BB8E77EFDA20859B440 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa Signing time: Sat 22 Mar 2025 01:44:46 +0000 ROA not before: Sat 22 Mar 2025 01:44:46 +0000 ROA not after: Fri 20 Jun 2025 01:44:46 +0000 asID: 197730 IP address blocks: 107.151.224.0/21 maxlen: 21 107.151.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:7f:0b:b8:e7:7e:fd:a2:08:59:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 22 01:44:46 2025 GMT Not After : Jun 20 01:44:46 2025 GMT Subject: CN=cbd1b7dc-22c7-43d6-b4c8-6d3e68d69c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:26:41:a3:fe:b1:6b:6d:5d:36:a3:73:5b:2c: 49:d5:08:e6:73:a2:9f:c6:7b:02:7c:d1:dd:56:33: 0d:1e:19:76:6e:52:e2:ed:89:ec:5f:69:75:20:0b: 2f:6a:ea:61:7f:61:87:58:0b:42:cd:4d:f5:44:5f: f0:c4:a7:21:8a:fb:50:b4:4b:d3:42:a2:d1:1b:67: c0:a7:7b:90:9d:49:ad:c7:5d:9e:0f:3a:b2:bf:d1: e6:bc:66:45:18:42:0f:0b:9d:03:55:9c:85:26:95: 1a:d8:d2:60:ce:17:d4:98:81:a2:72:fa:b8:39:27: e3:10:69:65:22:6a:c8:88:5b:ec:da:2a:82:b9:14: f4:5c:59:42:4d:84:58:ed:10:61:06:51:f4:a0:25: ed:2a:7f:ab:12:dd:48:45:75:d0:a1:18:9e:09:ec: 27:72:47:12:06:80:c5:c7:8f:e4:2d:98:34:eb:e7: 5e:56:4a:fa:b3:f6:82:44:c8:ae:6d:04:50:bb:a7: e7:ca:1c:ae:ad:57:db:3a:52:21:d6:07:eb:a7:20: dd:f3:ff:b2:60:78:73:e2:09:9d:14:bb:a2:4c:dd: e6:be:42:56:37:96:a0:f7:e5:f8:6e:3f:b8:0d:cf: 51:22:8f:6f:52:71:e2:ff:15:ee:48:b8:8b:62:a8: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:11:B3:92:FB:DF:F3:94:CB:57:57:C0:99:9D:00:BB:47:9D:24:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a3:f6:4f:4e:09:3d:ad:00:f9:49:17:a2:81:50:c4:3a:5e: fe:89:6d:de:6b:56:46:e1:0e:9f:e5:be:25:9b:90:34:6a:e6: 5e:5e:1f:f8:79:ae:36:47:94:4a:58:b9:8b:59:b5:a9:90:8a: 79:2f:7f:46:12:46:b6:df:b4:38:87:9c:58:b7:ef:c2:09:bc: 4f:d2:a9:6f:72:e4:96:5e:a4:81:24:6a:ae:1a:6d:49:63:18: 3e:8d:75:6c:ed:56:aa:98:3b:61:e3:23:d1:53:66:e1:78:c7: 47:98:07:d4:f2:90:7e:d5:4b:66:d2:36:76:d1:e7:9c:9a:65: 95:ea:40:00:c8:03:a8:a3:c0:17:33:46:41:6d:f2:ea:c0:cd: b8:89:41:a8:b6:d8:a2:da:41:49:09:13:44:c8:42:05:33:45: 53:d8:b7:8c:6e:e7:31:c6:6d:7f:67:2a:48:62:14:7d:43:99: 48:8a:57:27:e1:2b:7c:2b:23:58:52:f5:a0:de:4f:8c:7a:d8: e0:c9:b1:66:7b:d2:5f:37:d1:80:56:be:e2:26:63:cd:1c:dd: bd:22:fb:db:79:8f:4d:cb:46:a4:b4:22:ae:b4:74:57:68:b5: d3:44:1c:20:5a:24:84:d2:bf:4b:7e:ae:df:30:e7:db:44:d7: f6:22:32:e7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElEfwu45379oghZtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDMyMjAxNDQ0NloXDTI1MDYyMDAxNDQ0NlowLzEtMCsGA1UEAxMk Y2JkMWI3ZGMtMjJjNy00M2Q2LWI0YzgtNmQzZTY4ZDY5YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSZBo/6xa21dNqNzWyxJ1Qjmc6KfxnsCfNHd VjMNHhl2blLi7YnsX2l1IAsvauphf2GHWAtCzU31RF/wxKchivtQtEvTQqLRG2fA p3uQnUmtx12eDzqyv9HmvGZFGEIPC50DVZyFJpUa2NJgzhfUmIGicvq4OSfjEGll ImrIiFvs2iqCuRT0XFlCTYRY7RBhBlH0oCXtKn+rEt1IRXXQoRieCewnckcSBoDF x4/kLZg06+deVkr6s/aCRMiubQRQu6fnyhyurVfbOlIh1gfrpyDd8/+yYHhz4gmd FLuiTN3mvkJWN5ag9+X4bj+4Dc9RIo9vUnHi/xXuSLiLYqgY9wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFsRs5L73/OUy1dXwJmdALtHnSR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNDMwZTUwYTctOTFmNS0z MDRkLTliM2YtNjlhNjhlZmNkNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAeqP2T04JPa0A+UkXooFQxDpe/olt3mtWRuEOn+W+JZuQ NGrmXl4f+HmuNkeUSli5i1m1qZCKeS9/RhJGtt+0OIecWLfvwgm8T9Kpb3Lkll6k gSRqrhptSWMYPo11bO1Wqpg7YeMj0VNm4XjHR5gH1PKQftVLZtI2dtHnnJpllepA AMgDqKPAFzNGQW3y6sDNuIlBqLbYotpBSQkTRMhCBTNFU9i3jG7nMcZtf2cqSGIU fUOZSIpXJ+ErfCsjWFL1oN5PjHrY4MmxZnvSXzfRgFa+4iZjzRzdvSL723mPTctG pLQirrR0V2i100QcIFokhNK/S36u3zDn20TX9iIy5w== -----END CERTIFICATE-----Generated at Thu Apr 10 14:38:09 2025 by rpki-client