$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa File: 23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa (raw, json) Hash identifier: q5iDgUk7JbGFXjLBETDqmu2++/SDjIc1QbJzZNN4xYk= Subject key identifier: 0D:9D:5D:39:E1:98:13:C9:2A:5E:5B:CB:33:2A:6F:AD:7E:D4:82:9C Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584917DC329B0570FACE5FB99600 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 398823 IP address blocks: 107.148.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:32:9b:05:70:fa:ce:5f:b9:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=7dd5e550-566b-41fb-939c-54ef0a756534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:70:f2:8d:0e:40:ec:da:3e:9c:04:a9:53: 48:91:c3:f8:41:da:d9:49:e6:a5:b5:a8:5e:c9:20: d5:b1:96:d8:5e:8c:39:2f:38:eb:79:b5:db:d2:79: a5:54:03:96:76:25:0a:a8:ed:ae:e2:83:d2:82:fc: ff:6f:b7:57:55:a4:bb:f1:e5:ee:a8:99:5d:ce:a0: 49:ca:ce:82:5e:d8:47:34:c8:0c:08:b1:5a:8d:e8: f2:de:bf:9f:0d:88:2a:f2:e9:3d:a0:2a:3b:f2:e9: 24:12:78:71:bc:42:8c:77:ba:e7:99:e9:d8:d5:4e: b3:55:d0:39:64:5a:90:eb:1a:08:bb:0b:87:a3:76: 78:70:c8:6e:79:ee:78:17:e7:0d:90:d1:a3:26:46: b6:ed:f3:69:a2:7f:94:73:b4:52:2c:be:d8:14:a1: 69:1e:f4:b9:43:d8:47:f2:bb:3a:ab:28:66:04:77: c0:2f:1d:30:02:62:bd:63:2c:98:ea:79:46:aa:97: f4:c5:5a:bf:d1:5a:25:eb:f4:a3:96:cd:53:4d:50: f8:fd:fb:90:50:38:e0:7f:0b:e0:81:73:75:d6:70: e9:72:26:f2:74:1b:ad:36:4b:7d:df:d0:d6:56:bb: 32:4d:ba:32:47:f4:84:9f:65:e9:61:c0:3d:3f:79: 17:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:5D:39:E1:98:13:C9:2A:5E:5B:CB:33:2A:6F:AD:7E:D4:82:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ec:d0:b5:23:28:67:e4:a4:5f:c6:63:46:55:f0:96:85:01: 4d:40:7f:15:9a:b1:e4:81:ab:61:0a:73:7b:aa:e6:eb:0c:f2: cf:bc:08:c8:2e:37:e6:65:cb:98:ad:ff:55:bb:79:6c:27:09: 21:61:ae:64:4b:e8:9c:0f:e3:c0:ba:0b:dd:8e:56:a8:81:0f: a5:3f:92:1c:05:8c:bf:6e:0a:96:ed:8e:72:e7:f4:1f:42:e9: 0a:9d:04:d2:33:0a:17:e9:ca:bb:f1:af:6d:c9:af:0d:5b:ef: 41:00:5f:c1:dc:82:f3:32:df:f1:be:7b:24:80:35:00:f4:f9: 61:45:37:1f:e7:d7:b6:d3:5f:17:75:d8:e0:98:7c:27:7f:40: 20:47:9d:70:9d:27:c6:69:49:10:7c:8a:4a:3f:33:b6:f9:2c: 04:e7:c3:88:80:39:59:3d:4e:26:64:c1:e0:be:7e:df:1d:80: f3:96:1f:5f:17:40:15:31:20:46:14:f1:6d:48:78:d9:71:8c: e1:6f:12:cb:0c:33:2d:a6:c8:ce:e3:ca:06:e9:1b:8c:7b:6e: 1c:9c:9d:4c:cc:3f:70:88:b8:a9:e6:da:71:0f:f3:91:37:05: a7:61:00:1d:f3:4a:7e:5d:45:9c:30:21:fa:2c:66:44:b2:26: f3:34:97:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DKbBXD6zl+5lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk N2RkNWU1NTAtNTY2Yi00MWZiLTkzOWMtNTRlZjBhNzU2NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLVw8o0OQOzaPpwEqVNIkcP4QdrZSealtahe ySDVsZbYXow5LzjrebXb0nmlVAOWdiUKqO2u4oPSgvz/b7dXVaS78eXuqJldzqBJ ys6CXthHNMgMCLFajejy3r+fDYgq8uk9oCo78ukkEnhxvEKMd7rnmenY1U6zVdA5 ZFqQ6xoIuwuHo3Z4cMhuee54F+cNkNGjJka27fNpon+Uc7RSLL7YFKFpHvS5Q9hH 8rs6qyhmBHfALx0wAmK9YyyY6nlGqpf0xVq/0Vol6/Sjls1TTVD4/fuQUDjgfwvg gXN11nDpcibydButNkt939DWVrsyTboyR/SEn2XpYcA9P3kXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2dXTnhmBPJKl5byzMqb61+1IKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjM3NjZlMjItODJjYS0z MDA2LWJiNjctNmY2ZTZiOWFhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5SEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLs0LUjKGfkpF/GY0ZV8JaFAU1AfxWaseSBq2EKc3uq5usM8s+8CMgu N+Zly5it/1W7eWwnCSFhrmRL6JwP48C6C92OVqiBD6U/khwFjL9uCpbtjnLn9B9C 6QqdBNIzChfpyrvxr23Jrw1b70EAX8HcgvMy3/G+eySANQD0+WFFNx/n17bTXxd1 2OCYfCd/QCBHnXCdJ8ZpSRB8iko/M7b5LATnw4iAOVk9TiZkweC+ft8dgPOWH18X QBUxIEYU8W1IeNlxjOFvEssMMy2myM7jygbpG4x7bhycnUzMP3CIuKnm2nEP85E3 BadhAB3zSn5dRZwwIfosZkSyJvM0lwE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:55 2025 by rpki-client