$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa File: 4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa (raw, json) Hash identifier: 1tJKoWSke1heRKqP0bPUk/gey7BCorpRy7ODv43R7Jk= Subject key identifier: 65:D5:C2:DE:C1:29:F9:52:F7:79:30:F8:57:E5:47:37:B3:24:6E:B8 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B53572E697A2A8E96EC60 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398823 IP address blocks: 107.148.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:53:57:2e:69:7a:2a:8e:96:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=b3c66c1f-86d9-4f41-a01c-3e6e381d7f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d5:4a:24:1e:43:91:46:c6:fd:d0:37:aa:d6: 09:59:cc:d7:ec:4e:53:f6:02:a5:86:25:43:35:4f: 93:3b:09:6b:fc:99:a0:6a:4b:64:ee:1b:bc:ed:40: 44:75:01:7d:e6:93:4a:e4:c3:89:96:05:bf:de:61: c0:d3:b0:ae:62:c1:60:5c:d1:4e:65:22:37:22:43: fd:61:c3:06:69:99:b7:82:47:a6:d7:21:64:85:b6: 33:0b:5c:8e:d4:43:3e:76:ff:3c:c0:38:96:ce:54: ee:d2:b4:f3:b2:ce:89:6a:7f:17:6e:ae:0a:3f:3e: 6c:5d:1c:50:33:07:ff:a1:11:5f:ea:2d:47:21:fb: b4:b7:b2:5d:47:c2:44:65:3c:0a:11:5f:aa:e0:30: 52:4a:57:2f:fc:b2:ef:fd:36:ab:28:7f:ce:b9:74: 47:c5:99:82:d2:cd:5e:ff:9e:fb:c5:23:ac:e8:88: 85:9a:49:3d:25:ea:ca:d8:3a:86:8b:68:fa:bf:57: 70:4f:dc:df:76:51:6d:b2:82:df:a7:55:4f:7a:c4: 92:08:bb:06:1f:f4:34:a0:44:d6:d4:bf:0a:d1:7d: 35:ba:5b:6e:99:af:db:68:c3:08:f7:a7:91:c1:2e: 0b:49:85:be:20:b3:66:eb:27:f6:bf:27:06:13:d5: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:C2:DE:C1:29:F9:52:F7:79:30:F8:57:E5:47:37:B3:24:6E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4cc90c6c-7e51-3f45-a02c-d1a0ac60e38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:51:27:09:82:25:b9:90:5e:9d:f6:46:7d:7d:49:c2:78:da: dd:96:ca:c8:84:1b:b7:21:74:1e:bc:81:2d:2d:38:70:e5:c7: 2b:23:90:94:70:6e:a1:d6:89:02:8b:5f:7b:3c:71:42:ea:41: f4:8d:58:f8:16:e9:87:df:d7:8f:84:98:56:4a:07:50:37:05: 77:4a:88:f5:a3:ec:2b:63:70:90:ee:90:1e:09:ba:7e:64:da: 23:59:e0:e7:5c:1b:3c:98:cf:78:76:d7:8c:35:3d:2d:9d:5d: 79:65:cb:f2:98:b7:61:c3:36:e4:5b:e6:4d:16:7f:a9:83:13: 7e:b1:22:db:63:b0:e7:44:92:ca:61:d2:e5:53:40:0c:71:88: 6a:e7:00:40:fd:3e:90:82:97:f6:b7:b6:e7:49:44:58:be:c5: 6c:df:66:c8:d6:a7:8f:d2:1c:45:04:32:1b:83:26:1a:c0:90: 0a:5b:c9:3b:0f:fd:b9:5b:e7:1c:0f:ac:cc:55:9f:b1:33:f6: c8:34:72:60:ee:86:06:5e:db:1d:03:f6:0f:c6:a1:b2:a3:93: 86:7d:f0:a7:3b:cb:8d:83:ab:0c:ce:69:a7:93:ac:ce:86:30: 84:e9:25:aa:30:14:06:a3:b5:f2:7f:2e:df:e4:7f:46:33:b8: 48:5e:1e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1NXLml6Ko6W7GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjNjNjZjMWYtODZkOS00ZjQxLWEwMWMtM2U2ZTM4MWQ3ZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdVKJB5DkUbG/dA3qtYJWczX7E5T9gKlhiVD NU+TOwlr/Jmgaktk7hu87UBEdQF95pNK5MOJlgW/3mHA07CuYsFgXNFOZSI3IkP9 YcMGaZm3gkem1yFkhbYzC1yO1EM+dv88wDiWzlTu0rTzss6Jan8Xbq4KPz5sXRxQ Mwf/oRFf6i1HIfu0t7JdR8JEZTwKEV+q4DBSSlcv/LLv/TarKH/OuXRHxZmC0s1e /577xSOs6IiFmkk9JerK2DqGi2j6v1dwT9zfdlFtsoLfp1VPesSSCLsGH/Q0oETW 1L8K0X01ultuma/baMMI96eRwS4LSYW+ILNm6yf2vycGE9VAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXVwt7BKflS93kw+FflRzezJG64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGNjOTBjNmMtN2U1MS0z ZjQ1LWEwMmMtZDFhMGFjNjBlMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZRJwmCJbmQXp32Rn19ScJ42t2WysiEG7chdB68gS0tOHDlxysjkJRw bqHWiQKLX3s8cULqQfSNWPgW6Yff14+EmFZKB1A3BXdKiPWj7CtjcJDukB4Jun5k 2iNZ4OdcGzyYz3h214w1PS2dXXlly/KYt2HDNuRb5k0Wf6mDE36xIttjsOdEksph 0uVTQAxxiGrnAED9PpCCl/a3tudJRFi+xWzfZsjWp4/SHEUEMhuDJhrAkApbyTsP /blb5xwPrMxVn7Ez9sg0cmDuhgZe2x0D9g/GobKjk4Z98Kc7y42DqwzOaaeTrM6G MITpJaowFAajtfJ/Lt/kf0YzuEheHg4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:17 2025 by rpki-client