$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1039566-35c7-3f62-a941-47310e45d845.roa File: c1039566-35c7-3f62-a941-47310e45d845.roa (raw, json) Hash identifier: TiD5btrIlANkRvE7LL+cJnyt3ePt6Ss9zmlzjIwTd4E= Subject key identifier: CA:CE:B3:65:B5:69:BE:12:C5:C7:3D:40:F3:F2:64:29:C2:C2:60:8B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBAFAF1C8AB582A78F1360 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1039566-35c7-3f62-a941-47310e45d845.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 107.167.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:af:af:1c:8a:b5:82:a7:8f:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=fe576d9c-a8ef-462d-87fd-86f7d36cc5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:00:19:7d:73:76:ab:56:34:23:6a:dc:39: c4:8c:e0:25:f8:7d:7e:89:7f:62:57:8f:88:89:19: a9:33:bf:c1:db:11:b9:0a:3c:cb:bc:c2:6e:36:90: b8:82:66:ab:b3:1d:71:31:b7:8d:ad:dd:d2:16:00: 5c:42:80:b6:af:ab:f8:df:da:ba:d8:5a:3c:d7:d4: a8:ce:cd:89:3f:f7:f3:73:78:e5:d3:28:12:78:37: 9f:ac:45:be:5e:3c:7c:9a:92:fe:4c:73:60:2c:dd: 34:d9:1d:3f:38:a3:e7:ae:d7:6b:8b:e5:c9:2e:bd: 0b:98:5b:0f:a5:91:51:12:6e:bf:b1:f6:2c:4d:96: db:c6:65:90:1f:ec:ad:44:e4:31:cb:14:d5:a2:48: 26:19:ab:5e:b8:33:93:62:4e:65:a8:49:e5:0c:30: be:97:85:e7:be:d1:62:c8:0b:68:ab:61:c7:62:ee: 4b:63:e8:e0:eb:40:86:e2:87:01:fd:55:74:01:c5: 4a:f9:ee:a3:db:0e:e0:14:cc:3a:ac:ce:41:22:e1: 32:e0:7a:e8:e2:5c:8f:0c:16:df:e3:31:ca:04:de: 76:e8:5a:76:76:a5:a4:03:a9:0d:30:66:27:74:62: d8:50:9d:c1:64:9b:1b:78:6d:35:61:a3:0c:75:ca: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:B3:65:B5:69:BE:12:C5:C7:3D:40:F3:F2:64:29:C2:C2:60:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c1039566-35c7-3f62-a941-47310e45d845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5f:00:18:9a:3c:4a:26:35:c9:4f:f7:05:bf:cd:65:83:b6: 58:d4:cf:99:58:ad:03:ac:5e:e2:e2:4c:dc:32:9f:2b:cc:99: 96:93:72:aa:12:60:bd:9f:2f:89:54:f5:cc:de:c5:0b:29:eb: 1a:e8:f5:f5:84:2b:ac:45:7d:ec:70:c3:f4:0f:24:43:df:7c: 3a:df:d7:1d:38:43:37:7e:94:bd:3c:9a:e9:cd:60:e5:9b:79: 5c:86:17:23:52:30:d5:c1:7b:22:99:4d:b6:f3:1d:91:d9:5e: 02:44:40:36:89:84:a1:4e:85:8c:98:08:ab:46:87:5d:0a:f4: 07:e0:72:5d:5d:ef:0d:fc:d3:4c:3e:1d:0d:a5:d9:34:3f:c0: 64:c2:42:02:e4:ad:d1:a3:ac:a7:99:e8:3f:cc:ec:1c:45:08: 68:19:33:af:36:75:b5:4a:1f:6f:5f:bb:fd:54:0a:78:60:5c: 95:4e:0e:3e:45:91:ab:9b:8f:19:0b:b7:7b:37:d0:e2:f4:a2: 86:58:b3:ab:ca:72:57:a0:03:36:52:b5:bd:88:ae:9f:68:95: 5d:d5:84:26:8f:f0:07:91:e1:d0:23:af:66:a6:01:ea:4a:b3: b4:86:b5:38:b1:6e:a5:f5:46:8b:6a:5e:49:6a:b2:15:59:89: 43:44:84:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66+vHIq1gqePE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZmU1NzZkOWMtYThlZi00NjJkLTg3ZmQtODZmN2QzNmNjNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQAGX1zdqtWNCNq3DnEjOAl+H1+iX9iV4+I iRmpM7/B2xG5CjzLvMJuNpC4gmarsx1xMbeNrd3SFgBcQoC2r6v439q62Fo819So zs2JP/fzc3jl0ygSeDefrEW+Xjx8mpL+THNgLN002R0/OKPnrtdri+XJLr0LmFsP pZFREm6/sfYsTZbbxmWQH+ytROQxyxTVokgmGateuDOTYk5lqEnlDDC+l4XnvtFi yAtoq2HHYu5LY+jg60CG4ocB/VV0AcVK+e6j2w7gFMw6rM5BIuEy4Hro4lyPDBbf 4zHKBN526Fp2dqWkA6kNMGYndGLYUJ3BZJsbeG01YaMMdcp3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrOs2W1ab4Sxcc9QPPyZCnCwmCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzEwMzk1NjYtMzVjNy0z ZjYyLWE5NDEtNDczMTBlNDVkODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1fABiaPEomNclP9wW/zWWDtljUz5lYrQOsXuLiTNwynyvMmZaTcqoS YL2fL4lU9czexQsp6xro9fWEK6xFfexww/QPJEPffDrf1x04Qzd+lL08munNYOWb eVyGFyNSMNXBeyKZTbbzHZHZXgJEQDaJhKFOhYyYCKtGh10K9Afgcl1d7w3800w+ HQ2l2TQ/wGTCQgLkrdGjrKeZ6D/M7BxFCGgZM682dbVKH29fu/1UCnhgXJVODj5F kaubjxkLt3s30OL0ooZYs6vKclegAzZStb2Irp9olV3VhCaP8AeR4dAjr2amAepK s7SGtTixbqX1RotqXklqshVZiUNEhCg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:43 2025 by rpki-client