$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9bf665f2-1455-3d67-aef9-6d593c673d9b.roa File: 9bf665f2-1455-3d67-aef9-6d593c673d9b.roa (raw, json) Hash identifier: ssrhBviQTkLGq4CF+hTE29iCspamizb7F4Bkr86Q2OI= Subject key identifier: 8D:7A:94:9D:CF:F1:C0:C0:6B:05:74:D1:06:1A:31:3F:12:2B:E4:17 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584949FE945365471DE597C54380 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9bf665f2-1455-3d67-aef9-6d593c673d9b.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 8796 IP address blocks: 107.151.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:94:53:65:47:1d:e5:97:c5:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=95c42eb8-c956-4e8a-a3ae-45c7e896b26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:d8:98:ff:75:8c:a0:1b:a2:a4:25:2e:bb: c2:45:e2:57:40:d1:49:01:1b:10:1c:24:61:4f:66: 8f:a6:1a:db:3d:19:5e:8f:c3:b9:56:aa:35:be:11: 9b:ec:11:6a:0f:94:fe:a1:38:da:9b:37:eb:b4:9d: da:44:a8:b9:93:bd:c7:f7:e6:ad:db:f5:88:e7:47: 14:82:d9:f8:51:50:01:94:f8:7c:23:a1:e7:06:24: b3:ae:6c:6e:b0:36:0d:d0:c9:d0:8a:7f:33:14:6d: 4e:0a:ab:1f:89:b1:6f:cf:f6:e8:dc:bd:07:2a:44: cc:89:ba:83:be:b8:2c:06:ff:2f:28:9b:9d:7b:b8: 72:0e:36:21:c4:7a:08:dd:9b:92:0b:9a:49:83:f6: 34:8a:0c:1a:7d:5d:79:50:9d:57:fc:b3:1b:87:76: 31:a2:17:9e:2d:85:fe:3f:c0:71:5c:72:c4:24:ba: 76:12:60:d5:b6:a7:b7:7a:64:d7:1d:81:d0:d0:73: cf:4a:09:58:e6:95:d7:7d:89:53:5c:1e:21:55:1b: 6f:7d:07:37:c0:ae:90:30:15:3a:92:9e:db:1f:62: 2c:88:93:f1:c5:1b:5e:d0:15:76:90:6e:9a:c6:2c: 84:7b:86:cf:fb:9d:88:2e:de:1f:57:f1:f0:fa:6d: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7A:94:9D:CF:F1:C0:C0:6B:05:74:D1:06:1A:31:3F:12:2B:E4:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/9bf665f2-1455-3d67-aef9-6d593c673d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c2:80:f7:85:63:e6:5d:eb:2e:86:52:b9:71:ec:d8:12:79: c2:bb:d1:13:4b:cc:96:0f:41:53:2c:88:54:a0:55:c9:4b:22: 2f:84:f1:a7:ec:16:4d:e2:47:0b:d1:b5:02:e6:8a:73:ac:81: 18:22:83:83:b0:51:64:cd:cd:40:ba:53:21:c5:41:19:53:a9: df:65:64:5d:11:46:54:fc:19:c2:ba:09:bc:37:a4:4a:8c:af: ee:74:ae:4e:e2:18:45:ca:3d:29:da:2a:74:b8:8b:2e:03:61: df:4b:f1:98:32:5c:82:00:22:dc:ea:fe:c0:71:f5:30:1a:6e: 00:4d:0f:cd:b5:61:43:86:11:a8:29:a4:89:17:f3:1c:1d:70: 1c:3e:18:90:a6:25:02:e4:be:35:94:d8:b1:f0:78:f3:2e:d6: 8b:90:d8:5a:6d:0a:cb:c3:83:c3:f6:07:15:d7:16:1e:5d:30: b6:6d:20:8f:11:bc:e6:b5:44:bd:af:97:0c:d5:61:84:f1:ba: ed:d4:a8:d2:6f:5b:fe:f5:a6:65:53:db:f0:91:d4:84:4e:ef: 1b:5d:21:77:28:68:0d:4b:7a:87:14:8e:27:4a:03:f6:61:f3: 8b:4a:cb:c1:28:d2:73:59:e6:80:14:39:a1:cb:18:a4:da:cc: 58:b5:e8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pRTZUcd5ZfFQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk OTVjNDJlYjgtYzk1Ni00ZThhLWEzYWUtNDVjN2U4OTZiMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXbYmP91jKAboqQlLrvCReJXQNFJARsQHCRh T2aPphrbPRlej8O5Vqo1vhGb7BFqD5T+oTjamzfrtJ3aRKi5k73H9+at2/WI50cU gtn4UVABlPh8I6HnBiSzrmxusDYN0MnQin8zFG1OCqsfibFvz/bo3L0HKkTMibqD vrgsBv8vKJude7hyDjYhxHoI3ZuSC5pJg/Y0igwafV15UJ1X/LMbh3YxoheeLYX+ P8BxXHLEJLp2EmDVtqe3emTXHYHQ0HPPSglY5pXXfYlTXB4hVRtvfQc3wK6QMBU6 kp7bH2IsiJPxxRte0BV2kG6axiyEe4bP+52ILt4fV/Hw+m2kwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI16lJ3P8cDAawV00QYaMT8SK+QXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvOWJmNjY1ZjItMTQ1NS0z ZDY3LWFlZjktNmQ1OTNjNjczZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5f7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrCgPeFY+Zd6y6GUrlx7NgSecK70RNLzJYPQVMsiFSgVclLIi+E8afs Fk3iRwvRtQLminOsgRgig4OwUWTNzUC6UyHFQRlTqd9lZF0RRlT8GcK6Cbw3pEqM r+50rk7iGEXKPSnaKnS4iy4DYd9L8ZgyXIIAItzq/sBx9TAabgBND821YUOGEagp pIkX8xwdcBw+GJCmJQLkvjWU2LHwePMu1ouQ2FptCsvDg8P2BxXXFh5dMLZtII8R vOa1RL2vlwzVYYTxuu3UqNJvW/71pmVT2/CR1IRO7xtdIXcoaA1LeocUjidKA/Zh 84tKy8Eo0nNZ5oAUOaHLGKTazFi16Hs= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:59 2025 by rpki-client