$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d77c21a6-f522-35da-88b7-28906e529b5f.roa File: d77c21a6-f522-35da-88b7-28906e529b5f.roa (raw, json) Hash identifier: ZG2XJIO+x03WTcoUfUkrIKkHFHeE3emQkJaQdvKCOHc= Subject key identifier: 09:57:5F:60:15:E4:12:69:4C:79:A5:AB:D6:9D:48:9A:3F:8D:EB:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB3E921AE432062F7EF3C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d77c21a6-f522-35da-88b7-28906e529b5f.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 107.167.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b3:e9:21:ae:43:20:62:f7:ef:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=98ea1836-aa4e-46f0-bc63-f2d888c0c6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:dc:a2:e4:3b:4c:36:2d:dc:05:97:b4:72: 89:f8:43:b0:03:7e:8c:64:0a:54:85:a3:30:e4:03: a8:1a:1c:2d:03:fc:71:42:8a:6c:f4:73:5e:2f:52: e4:b4:05:3b:98:6b:ab:b3:8f:d4:92:e8:02:63:d5: 00:e0:98:99:29:bb:13:e4:00:5a:a2:26:54:c0:c5: 59:10:1f:d1:95:84:fe:2c:21:21:01:4c:fa:df:de: c3:70:65:63:36:0e:da:6d:10:72:33:e0:97:0d:5e: ec:7d:69:b8:3b:1a:25:5f:db:d9:9b:23:2b:0a:81: 64:0a:ed:3d:65:89:29:31:1f:88:46:4d:58:54:e1: 01:1f:26:02:6b:02:23:e0:ad:70:e7:96:73:72:f6: 00:b5:6c:ff:f4:8a:af:29:1a:01:74:b3:d8:d0:94: 57:c8:a0:f5:a8:38:f4:cd:d1:18:8d:0e:ed:45:28: ab:13:2a:63:c6:72:9a:d0:65:37:f0:4b:d0:4f:f4: 3f:71:9e:3a:05:4d:7f:f6:aa:85:22:bc:58:fd:87: c3:05:57:8b:20:34:bd:b0:c9:b1:d7:f3:e1:96:6f: 15:9e:da:f0:f8:ab:14:b1:b6:ed:ac:57:bd:b3:91: 04:82:1d:67:4f:f0:33:ba:a7:c0:46:a3:92:74:fd: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:5F:60:15:E4:12:69:4C:79:A5:AB:D6:9D:48:9A:3F:8D:EB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d77c21a6-f522-35da-88b7-28906e529b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 107.167.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:82:36:1c:61:67:c6:e2:15:6d:18:11:b0:56:54:66:c4:ce: 85:e6:e1:78:a9:1c:99:4b:de:90:e5:30:c1:3b:35:18:15:c4: de:9b:ee:eb:0b:32:b7:c1:a6:aa:3a:27:de:d3:7d:5e:36:a5: 6c:83:20:1a:a7:a6:9e:f2:79:05:c2:0c:13:6d:50:f8:2c:4b: 05:45:9e:61:e1:04:ba:8b:11:d7:04:25:bd:e0:d5:5f:01:8c: 1f:15:bd:4d:66:9f:3e:09:19:1c:14:17:93:39:84:4b:81:3f: 70:9c:c4:1d:50:9f:fc:63:72:8c:1c:9b:24:2f:9e:96:31:2a: c9:df:b6:8d:d2:9b:1a:0e:61:5e:57:d1:41:50:83:db:9f:52: 45:fa:3c:62:6f:dd:51:33:13:b5:06:e7:7e:67:a0:61:e1:80: d5:79:58:fd:e7:1f:89:1c:de:6a:c1:48:34:44:3e:c2:cb:17: b2:05:c2:56:f1:4f:53:dc:ce:a6:06:8c:3d:4d:d4:39:77:72: 97:86:e3:8c:b8:46:5b:c4:8d:5c:05:3b:36:80:b4:65:f9:d1: 6d:90:90:d9:cd:08:2d:0f:e6:84:dd:62:4d:a5:c2:18:b2:33: 83:c5:04:97:e9:9b:3e:b4:0b:c8:c9:53:e4:f2:69:99:99:fb: 6a:35:53:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67PpIa5DIGL37zwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OThlYTE4MzYtYWE0ZS00NmYwLWJjNjMtZjJkODg4YzBjNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxDcouQ7TDYt3AWXtHKJ+EOwA36MZApUhaMw 5AOoGhwtA/xxQops9HNeL1LktAU7mGurs4/UkugCY9UA4JiZKbsT5ABaoiZUwMVZ EB/RlYT+LCEhAUz6397DcGVjNg7abRByM+CXDV7sfWm4OxolX9vZmyMrCoFkCu09 ZYkpMR+IRk1YVOEBHyYCawIj4K1w55ZzcvYAtWz/9IqvKRoBdLPY0JRXyKD1qDj0 zdEYjQ7tRSirEypjxnKa0GU38EvQT/Q/cZ46BU1/9qqFIrxY/YfDBVeLIDS9sMmx 1/Phlm8Vntrw+KsUsbbtrFe9s5EEgh1nT/AzuqfARqOSdP3wrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlXX2AV5BJpTHmlq9adSJo/jeuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDc3YzIxYTYtZjUyMi0z NWRhLTg4YjctMjg5MDZlNTI5YjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6e6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKCNhxhZ8biFW0YEbBWVGbEzoXm4XipHJlL3pDlMME7NRgVxN6b7usL MrfBpqo6J97TfV42pWyDIBqnpp7yeQXCDBNtUPgsSwVFnmHhBLqLEdcEJb3g1V8B jB8VvU1mnz4JGRwUF5M5hEuBP3CcxB1Qn/xjcowcmyQvnpYxKsnfto3SmxoOYV5X 0UFQg9ufUkX6PGJv3VEzE7UG535noGHhgNV5WP3nH4kc3mrBSDREPsLLF7IFwlbx T1PczqYGjD1N1Dl3cpeG44y4RlvEjVwFOzaAtGX50W2QkNnNCC0P5oTdYk2lwhiy M4PFBJfpmz60C8jJU+TyaZmZ+2o1U88= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:53 2025 by rpki-client