$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4643ae5d-5ace-3aac-ba6f-89af9eeb967a.roa File: 4643ae5d-5ace-3aac-ba6f-89af9eeb967a.roa (raw, json) Hash identifier: jGdzzUH+ibS5Av6oa+FR0Vv/d0L6EjPtdj9B41DbzgI= Subject key identifier: F6:22:C6:7F:F0:62:EC:49:E9:0C:CA:A9:81:85:83:53:8F:F0:12:C7 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B530075571F76AA849340 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4643ae5d-5ace-3aac-ba6f-89af9eeb967a.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 394432 IP address blocks: 107.148.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:53:00:75:57:1f:76:aa:84:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=5520542a-542c-4522-a0fe-e6203e04285b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:96:ce:c7:7b:2f:bc:b8:7d:e4:1c:49:f3: cb:c5:f0:8a:76:35:4d:c4:b4:a4:53:f9:54:ee:73: 4d:53:88:78:db:15:f7:d0:6d:6d:c2:8a:3e:02:fb: 52:28:d7:e3:69:c8:35:ce:87:29:88:4e:dc:4b:4b: db:af:2f:1f:59:30:79:fa:38:36:c6:8f:dd:11:c9: fd:4a:85:3a:dc:56:5e:8c:74:9e:4e:6a:69:ec:9e: 01:a4:76:22:bb:3c:ba:b7:94:75:84:7a:17:a4:cd: 15:08:90:22:7a:1b:d9:14:f2:e0:8e:ff:f8:f4:34: 46:10:55:ae:15:28:6f:16:25:34:18:04:d5:1d:9f: 05:a6:03:de:27:6b:91:5a:29:8e:f8:b9:83:c4:3b: fe:41:be:a0:35:15:5a:89:e2:f5:89:60:14:7d:2b: c7:93:d2:88:c3:5c:f6:51:35:27:25:86:01:36:e1: c8:e4:96:5a:d5:76:b4:6d:98:2d:31:92:9d:22:09: 5d:60:50:d0:15:9a:44:29:b9:64:ce:4e:42:11:60: a9:da:e5:1b:70:d5:d2:57:c0:ef:f1:b4:6d:ba:99: e0:cb:1e:57:4f:f2:f7:95:5f:33:ed:7f:ab:59:e0: d3:dd:c0:c6:f8:d5:95:49:ed:74:18:8a:33:79:4e: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:22:C6:7F:F0:62:EC:49:E9:0C:CA:A9:81:85:83:53:8F:F0:12:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4643ae5d-5ace-3aac-ba6f-89af9eeb967a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3f:ac:b1:4f:c1:b8:0e:74:2c:e8:72:1c:dc:a6:fe:80:e6: 88:63:79:da:28:af:3d:92:83:0f:c0:0f:2c:57:d4:86:b6:c7: 23:d1:10:93:f1:e1:d1:59:cb:77:21:fb:e0:f6:3f:59:e3:69: ce:1f:99:fc:66:e2:09:09:52:12:ca:86:8b:00:a3:9b:78:6d: 37:bb:e8:ac:67:a4:45:c2:29:aa:46:1b:36:10:1c:3b:6e:34: 8c:08:1e:f4:95:92:1f:84:3d:f5:4c:0b:c6:01:72:0b:29:6a: cf:67:d9:bd:69:2b:99:dc:ca:f5:12:ba:ae:21:b2:f3:52:30: 7e:e5:d5:0b:79:8f:2c:d9:e5:07:fe:ec:69:d7:cd:ce:39:56: 32:f4:0d:87:20:98:9d:7a:e6:bb:8e:c9:04:64:f2:d6:55:bf: e0:a5:a5:a5:35:a5:bb:28:e9:01:87:26:07:79:a7:95:ef:82: c3:02:54:96:1c:5e:57:f4:a8:de:03:97:8e:97:7e:73:ba:e6: 22:a3:3f:0a:a9:38:1e:af:92:90:bf:38:0b:fb:0f:7b:15:c7: 89:db:4e:53:0b:af:4b:f9:cf:27:39:53:36:24:01:63:0e:31: 0a:f9:85:d7:d7:9e:2e:1e:8e:d9:d7:cc:6a:d0:d9:dc:7d:91: cd:91:1b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1MAdVcfdqqEk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTUyMDU0MmEtNTQyYy00NTIyLWEwZmUtZTYyMDNlMDQyODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj2Wzsd7L7y4feQcSfPLxfCKdjVNxLSkU/lU 7nNNU4h42xX30G1twoo+AvtSKNfjacg1zocpiE7cS0vbry8fWTB5+jg2xo/dEcn9 SoU63FZejHSeTmpp7J4BpHYiuzy6t5R1hHoXpM0VCJAiehvZFPLgjv/49DRGEFWu FShvFiU0GATVHZ8FpgPeJ2uRWimO+LmDxDv+Qb6gNRVaieL1iWAUfSvHk9KIw1z2 UTUnJYYBNuHI5JZa1Xa0bZgtMZKdIgldYFDQFZpEKblkzk5CEWCp2uUbcNXSV8Dv 8bRtupngyx5XT/L3lV8z7X+rWeDT3cDG+NWVSe10GIozeU6ZfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYixn/wYuxJ6QzKqYGFg1OP8BLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNDY0M2FlNWQtNWFjZS0z YWFjLWJhNmYtODlhZjllZWI5NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5REMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw/rLFPwbgOdCzochzcpv6A5ohjedoorz2Sgw/ADyxX1Ia2xyPREJPx 4dFZy3ch++D2P1njac4fmfxm4gkJUhLKhosAo5t4bTe76KxnpEXCKapGGzYQHDtu NIwIHvSVkh+EPfVMC8YBcgspas9n2b1pK5ncyvUSuq4hsvNSMH7l1Qt5jyzZ5Qf+ 7GnXzc45VjL0DYcgmJ165ruOyQRk8tZVv+ClpaU1pbso6QGHJgd5p5XvgsMCVJYc Xlf0qN4Dl46XfnO65iKjPwqpOB6vkpC/OAv7D3sVx4nbTlMLr0v5zyc5UzYkAWMO MQr5hdfXni4ejtnXzGrQ2dx9kc2RG64= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:15 2025 by rpki-client