$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa File: 37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa (raw, json) Hash identifier: f/mCqcsC9uAxb+9Ylt5ayCmPZm5jij1DhEHW+2iS+bg= Subject key identifier: E7:51:E6:00:6F:26:05:2A:8C:85:DC:95:12:CB:EF:55:C5:38:08:1E Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B53477C0091BC77506180 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398823 IP address blocks: 107.148.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:53:47:7c:00:91:bc:77:50:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=969cfe48-3966-4fe1-909e-49afb1b0c058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:d6:85:6c:7b:fa:39:52:92:19:07:39:ea: 13:6c:ef:05:27:d6:dc:a4:e0:0a:1e:00:ee:8a:7f: d0:ce:5f:f0:72:92:50:5d:b3:e9:2b:96:ce:ea:76: 7c:db:66:cb:23:b9:5c:2a:de:55:02:37:62:e1:63: e8:69:b3:f9:f2:bf:c9:f6:99:bc:92:ac:5b:ee:e6: f3:7c:ef:5b:8a:5b:0a:5c:0f:76:a8:8d:41:32:2e: f9:79:a5:64:13:1a:db:44:f2:1f:54:f6:46:2e:42: 98:77:31:99:60:74:02:c0:2d:4d:f3:8f:b1:84:73: a5:1f:ba:97:7f:5c:ad:6d:9d:b6:6d:78:44:8d:f3: cd:f4:21:e7:b3:1b:18:2c:28:68:fa:0b:ae:d9:b2: 9e:db:a3:85:16:25:8d:65:b9:f7:8f:2d:ae:28:58: 93:ec:a0:58:84:0b:48:b7:78:5c:73:cc:a8:4c:8d: 21:4a:ea:43:bc:ad:c0:d4:2a:55:e0:29:a0:21:34: b0:cb:da:b2:dd:37:7b:a0:bb:4c:6a:b0:6f:49:5d: 53:27:b3:b7:c7:67:21:95:2a:d4:aa:8e:1a:68:64: d5:e3:3c:e6:e8:7f:99:f0:1f:42:20:16:e5:c2:72: cc:ac:00:b2:0f:fc:18:f8:86:4f:7c:8e:7d:f3:b2: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:51:E6:00:6F:26:05:2A:8C:85:DC:95:12:CB:EF:55:C5:38:08:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:69:1f:85:25:40:bc:a9:5e:79:e7:d8:ca:28:3f:d2:e8:5d: 8e:28:22:3d:6a:c9:21:fd:a8:72:23:be:f0:36:3f:c4:36:1d: 32:3d:04:1d:9f:08:11:f6:66:7c:cd:ca:eb:48:08:7b:73:e3: 38:48:11:ea:81:66:ec:b4:08:e9:7b:4b:c6:9b:24:77:da:8b: 96:69:5b:f2:69:1d:ca:a3:c3:0a:a5:d5:f2:11:af:b8:8d:60: ac:56:0e:61:c0:21:93:4b:41:ed:fb:98:49:b1:ed:d2:17:aa: de:7e:06:6d:3c:0e:5a:a1:e0:ab:86:c3:b1:9f:ff:98:ae:a4: eb:d6:5e:22:be:33:2d:e9:b2:de:17:87:56:5e:5e:6e:8c:13: 75:ed:85:c9:59:a2:4a:05:85:f2:95:18:0c:a3:bc:a2:54:39: 30:53:fe:0a:0a:cb:8d:6f:0e:ab:87:10:93:6a:de:fc:97:73: 56:99:8a:00:fb:79:cb:02:03:0d:22:2e:61:d5:ab:6d:b2:d3: 0f:6d:18:f4:61:38:5b:f9:d1:60:28:fc:63:c2:a1:7d:ca:2a: 2e:79:5d:d9:1f:cb:05:1a:7e:0a:23:7d:72:89:a1:a1:33:cf: 74:87:86:6d:33:1e:4d:7e:9f:e5:66:12:78:87:f4:dd:57:1a: 57:94:68:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1NHfACRvHdQYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk OTY5Y2ZlNDgtMzk2Ni00ZmUxLTkwOWUtNDlhZmIxYjBjMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5/WhWx7+jlSkhkHOeoTbO8FJ9bcpOAKHgDu in/Qzl/wcpJQXbPpK5bO6nZ822bLI7lcKt5VAjdi4WPoabP58r/J9pm8kqxb7ubz fO9bilsKXA92qI1BMi75eaVkExrbRPIfVPZGLkKYdzGZYHQCwC1N84+xhHOlH7qX f1ytbZ22bXhEjfPN9CHnsxsYLCho+guu2bKe26OFFiWNZbn3jy2uKFiT7KBYhAtI t3hcc8yoTI0hSupDvK3A1CpV4CmgITSwy9qy3Td7oLtMarBvSV1TJ7O3x2chlSrU qo4aaGTV4zzm6H+Z8B9CIBblwnLMrACyD/wY+IZPfI5987I8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdR5gBvJgUqjIXclRLL71XFOAgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMzdiZjQ5YjYtM2U3ZS0z NTJjLThhNWQtM2E4ZWQ2YzRhZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABppH4UlQLypXnnn2MooP9LoXY4oIj1qySH9qHIjvvA2P8Q2HTI9BB2f CBH2ZnzNyutICHtz4zhIEeqBZuy0COl7S8abJHfai5ZpW/JpHcqjwwql1fIRr7iN YKxWDmHAIZNLQe37mEmx7dIXqt5+Bm08Dlqh4KuGw7Gf/5iupOvWXiK+My3pst4X h1ZeXm6ME3XthclZokoFhfKVGAyjvKJUOTBT/goKy41vDquHEJNq3vyXc1aZigD7 ecsCAw0iLmHVq22y0w9tGPRhOFv50WAo/GPCoX3KKi55XdkfywUafgojfXKJoaEz z3SHhm0zHk1+n+VmEniH9N1XGleUaFE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:09 2025 by rpki-client