$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa File: 5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa (raw, json) Hash identifier: FOqnhyjbw43fhHfc4CIsZ1vEL6HC2qzpoxKC9ZVtq4g= Subject key identifier: A8:92:8E:AF:6A:EC:0E:EB:99:19:3F:96:D0:3B:E0:B6:10:57:75:CD Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F432858491246AC3E7AC0526128387C80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 398478 IP address blocks: 107.148.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ac:3e:7a:c0:52:61:28:38:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=eb9fd144-3c24-4fa2-a47e-06aa1cb86647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:7d:08:7b:c4:1f:d5:d8:36:c3:0e:3a:4e: 3e:ae:80:b9:47:c8:4b:a3:40:09:c9:ec:05:ed:4f: d6:f1:4c:7b:99:23:ff:61:74:54:a2:c9:1b:7b:8a: bb:8c:ab:fd:ed:4a:9d:71:88:b2:2c:d9:c4:8e:4f: 34:27:03:35:7a:49:13:2e:a4:6a:23:96:27:f6:32: e1:b0:11:5a:4e:65:bd:ae:62:ef:b5:cb:aa:bc:b7: 2e:ef:4c:fb:9c:3d:24:b8:db:78:17:27:8d:11:ea: d6:4e:c4:18:6b:14:f0:83:9f:6a:fc:09:3e:c2:e7: 9d:73:6b:68:14:d2:d5:f6:66:c9:a4:59:11:59:5d: b0:88:87:e2:61:c7:e2:6b:a0:18:d1:9c:79:7b:c8: 40:1e:88:0b:da:e7:68:85:d6:ad:59:53:fd:0b:d4: cd:03:a9:a0:e1:8b:5f:45:c4:87:ae:0b:30:f1:dd: de:df:a3:46:b1:43:ab:93:2b:86:4b:df:cd:56:73: 40:8f:91:a3:e8:47:61:e4:f5:5d:52:65:db:69:cd: 4f:64:9a:66:f1:73:be:cc:29:0c:24:28:1d:42:f3: 55:de:7a:3b:94:cf:66:01:6e:ad:af:e3:85:2f:e7: 4f:a8:fc:6a:5b:15:d5:fb:a5:bb:c3:e9:87:7b:95: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:92:8E:AF:6A:EC:0E:EB:99:19:3F:96:D0:3B:E0:B6:10:57:75:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5034296d-7ef5-39ca-b56a-ef7c8b7f8d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bb:4c:47:55:76:11:06:33:c4:3a:44:90:cb:90:04:45:c2: 55:a7:83:77:6d:a5:bc:81:69:35:58:c0:cd:06:33:02:0e:33: 96:e5:74:76:be:cc:e3:8a:e1:8c:04:c5:18:6a:22:7b:3c:a1: 7c:15:11:84:77:69:f0:f5:99:3f:d4:ff:1a:35:12:2e:91:0e: d0:ca:61:cf:3d:0e:17:78:e5:21:db:31:a4:0a:14:d7:b3:1d: 71:f2:92:e7:be:a0:32:7e:68:47:66:69:79:ef:6e:3c:27:83: b8:74:0b:04:ba:3e:c8:5a:44:03:5f:d4:c1:ef:39:c0:a6:98: 58:1a:36:f8:2f:cd:23:0c:bb:0b:ef:b2:1d:eb:4f:88:17:40: 73:d5:9d:01:8d:26:39:06:56:c1:67:6f:16:0c:78:31:2f:e0: 11:0d:97:92:8d:a0:c3:24:62:79:1d:68:b5:87:b7:bd:79:40: 54:3d:b9:6c:b9:5a:fa:f8:61:d6:f6:2a:42:1a:a7:cd:33:ec: 4e:bf:97:cb:8b:99:75:cf:7b:f0:25:87:53:c2:ea:1c:a1:8a: 59:35:0d:d9:ad:77:34:91:f3:b2:13:62:77:fa:21:90:1e:1b: ca:c3:e1:8a:96:1d:ba:4b:c6:6d:2d:a1:bb:90:5b:36:10:ee: 49:96:c9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqw+esBSYSg4fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZWI5ZmQxNDQtM2MyNC00ZmEyLWE0N2UtMDZhYTFjYjg2NjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEB9CHvEH9XYNsMOOk4+roC5R8hLo0AJyewF 7U/W8Ux7mSP/YXRUoskbe4q7jKv97UqdcYiyLNnEjk80JwM1ekkTLqRqI5Yn9jLh sBFaTmW9rmLvtcuqvLcu70z7nD0kuNt4FyeNEerWTsQYaxTwg59q/Ak+wuedc2to FNLV9mbJpFkRWV2wiIfiYcfia6AY0Zx5e8hAHogL2udohdatWVP9C9TNA6mg4Ytf RcSHrgsw8d3e36NGsUOrkyuGS9/NVnNAj5Gj6Edh5PVdUmXbac1PZJpm8XO+zCkM JCgdQvNV3no7lM9mAW6tr+OFL+dPqPxqWxXV+6W7w+mHe5XUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiSjq9q7A7rmRk/ltA74LYQV3XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTAzNDI5NmQtN2VmNS0z OWNhLWI1NmEtZWY3YzhiN2Y4ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq7TEdVdhEGM8Q6RJDLkARFwlWng3dtpbyBaTVYwM0GMwIOM5bldHa+ zOOK4YwExRhqIns8oXwVEYR3afD1mT/U/xo1Ei6RDtDKYc89Dhd45SHbMaQKFNez HXHykue+oDJ+aEdmaXnvbjwng7h0CwS6PshaRANf1MHvOcCmmFgaNvgvzSMMuwvv sh3rT4gXQHPVnQGNJjkGVsFnbxYMeDEv4BENl5KNoMMkYnkdaLWHt715QFQ9uWy5 Wvr4Ydb2KkIap80z7E6/l8uLmXXPe/Alh1PC6hyhilk1DdmtdzSR87ITYnf6IZAe G8rD4YqWHbpLxm0tobuQWzYQ7kmWybw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:26 2025 by rpki-client