$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa File: 1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa (raw, json) Hash identifier: nZo6uR6MpnOKkbHGuwpcuOcjA1IDO6i7VBWocUg4kI4= Subject key identifier: 3F:EE:FC:95:96:B3:B2:52:20:C9:85:21:0F:56:B5:47:EC:F3:43:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB1D1932FC298C77A5380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 107.167.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b1:d1:93:2f:c2:98:c7:7a:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=c2c9051d-8281-40fb-9d85-e8beeb172e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:1d:ab:18:bf:cd:97:ef:1b:75:e5:55:0b: a2:30:16:5b:b6:b5:4a:e4:0f:de:0f:cc:62:d0:f4: 52:d0:e1:85:09:cd:d1:a5:b9:85:90:19:b3:a8:81: 4f:5f:68:df:62:f1:8c:56:b3:7b:06:c8:74:04:16: d2:b9:d7:2b:da:8b:4f:d7:3f:df:3e:9e:11:e3:94: 80:40:77:74:6b:21:e3:d2:5c:9f:fe:f5:79:d2:97: dd:83:05:19:36:03:7d:20:97:a8:37:5f:86:63:3e: b1:69:e3:ae:2f:de:84:61:08:fd:ab:ea:a9:f1:09: da:5e:7d:c7:07:55:62:16:53:1a:e2:05:d3:62:10: f2:4b:c1:97:41:ec:63:43:b1:45:f8:3c:48:2a:21: a7:a4:99:3d:51:f0:35:5b:cf:77:22:c1:29:2e:4e: 53:62:f2:04:61:4b:f0:82:03:03:0a:92:93:06:cf: dd:b3:3c:e5:15:14:96:0d:b8:bc:1b:28:b0:87:9d: 70:83:36:fe:9a:de:86:6a:3d:ae:ed:52:68:92:44: bc:fd:1d:d6:90:70:39:d8:08:6b:2f:73:8f:c2:51: 83:d8:88:b1:46:0e:44:97:d6:a7:61:76:17:4c:94: 2c:1b:7d:92:29:82:fa:43:5d:89:cb:8c:21:69:2e: 3a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:FC:95:96:B3:B2:52:20:C9:85:21:0F:56:B5:47:EC:F3:43:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d87ac02-c3cc-3fd0-a5dd-7ea4be20f4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:0a:36:8b:e0:56:46:5f:f9:a0:1e:1d:9d:43:09:0c:8d:16: bb:c4:e8:4e:db:f0:be:28:74:ec:e3:49:04:05:10:c7:c4:89: 49:76:d9:18:a3:03:5d:16:51:83:b3:aa:aa:08:32:7c:17:dc: 42:ef:a0:be:01:2d:60:06:0a:76:4a:46:db:02:7b:9b:a9:0f: 05:4e:66:84:03:b1:6c:dd:60:bc:e2:b2:3b:63:8b:74:cf:3f: 18:f8:86:69:6c:71:f6:15:a6:16:26:7b:ba:03:13:8d:0a:7d: b1:7d:30:ce:5c:78:21:0c:d6:6b:a0:f8:89:61:42:d2:96:f0: 76:81:42:3f:3e:8c:34:36:e8:5e:dc:d5:0e:d6:e0:db:16:e0: 3f:4b:7b:cc:f4:1f:54:09:47:2f:8e:42:07:6d:ef:53:a6:1a: 50:cd:ed:7e:2b:ea:0e:73:4d:39:6c:e1:3c:ff:75:f5:66:39: 1a:8b:b2:6d:69:91:73:8f:f7:de:0d:1d:cf:92:4f:ec:d1:4c: c1:68:4d:ca:5b:2a:3a:d6:24:2a:ce:2e:7a:9e:5f:8f:31:63: ff:89:a6:75:e0:d8:2a:6b:0d:c1:23:34:63:d5:02:34:1b:0d: b3:eb:3f:b4:5f:e2:d9:9b:66:3b:64:b8:fd:cf:9d:d8:9f:54: 15:17:63:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67HRky/CmMd6U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YzJjOTA1MWQtODI4MS00MGZiLTlkODUtZThiZWViMTcyZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBUdqxi/zZfvG3XlVQuiMBZbtrVK5A/eD8xi 0PRS0OGFCc3RpbmFkBmzqIFPX2jfYvGMVrN7Bsh0BBbSudcr2otP1z/fPp4R45SA QHd0ayHj0lyf/vV50pfdgwUZNgN9IJeoN1+GYz6xaeOuL96EYQj9q+qp8QnaXn3H B1ViFlMa4gXTYhDyS8GXQexjQ7FF+DxIKiGnpJk9UfA1W893IsEpLk5TYvIEYUvw ggMDCpKTBs/dszzlFRSWDbi8Gyiwh51wgzb+mt6Gaj2u7VJokkS8/R3WkHA52Ahr L3OPwlGD2IixRg5El9anYXYXTJQsG32SKYL6Q12Jy4whaS46WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/u/JWWs7JSIMmFIQ9WtUfs80MyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ4N2FjMDItYzNjYy0z ZmQwLWE1ZGQtN2VhNGJlMjBmNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4KNovgVkZf+aAeHZ1DCQyNFrvE6E7b8L4odOzjSQQFEMfEiUl22Rij A10WUYOzqqoIMnwX3ELvoL4BLWAGCnZKRtsCe5upDwVOZoQDsWzdYLzisjtji3TP Pxj4hmlscfYVphYme7oDE40KfbF9MM5ceCEM1mug+IlhQtKW8HaBQj8+jDQ26F7c 1Q7W4NsW4D9Le8z0H1QJRy+OQgdt71OmGlDN7X4r6g5zTTls4Tz/dfVmORqLsm1p kXOP994NHc+ST+zRTMFoTcpbKjrWJCrOLnqeX48xY/+JpnXg2CprDcEjNGPVAjQb DbPrP7Rf4tmbZjtkuP3PndifVBUXY3M= -----END CERTIFICATE-----Generated at Fri Apr 4 20:57:36 2025 by rpki-client