$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa File: 53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa (raw, json) Hash identifier: 7sBhF+C6rDXAPCAJzxew0E9uKsLSsfIDVkOu/bIDJPk= Subject key identifier: E5:58:D1:F4:6B:B7:A5:86:06:2B:C5:96:33:2D:4A:FB:A6:5A:29:40 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B54AEE96A9EC02EBAF880 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398823 IP address blocks: 107.149.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:54:ae:e9:6a:9e:c0:2e:ba:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=47dac900-a220-4cc7-bfc4-89e31091afdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:6b:a3:8b:77:9b:68:7f:30:3e:bd:29:7a: df:87:25:2c:27:ed:b8:ce:a3:e5:86:8c:67:4a:51: b7:36:4d:8e:cb:65:c1:93:3a:8c:2f:40:60:74:15: cb:44:b2:35:8f:4d:dc:f4:3b:71:ca:70:fc:2a:fd: df:e2:e2:a3:b0:c5:e8:c7:21:08:da:60:d7:46:36: 6b:22:73:85:f7:b2:8b:67:c4:7f:69:ce:75:b8:ad: 8c:e2:da:bf:77:ca:53:a2:d6:ec:03:5d:03:c7:59: 58:0d:4d:45:7f:09:f4:34:08:f7:bb:9d:3e:8b:2f: fe:39:b7:fd:49:cc:c0:6b:e4:9d:3d:10:a0:ac:d1: 24:2a:42:6d:28:66:ec:e3:b5:22:65:e3:db:67:bd: 73:dd:e2:92:eb:a6:ff:5d:ee:72:03:93:1f:ad:b5: b9:10:fe:29:14:92:f2:ca:5c:3c:0d:bc:b3:24:28: bd:cf:95:d2:5e:d9:56:9d:2a:d1:e2:50:0e:31:0a: fc:f9:0a:67:dd:3e:f8:53:23:96:63:48:ba:d2:84: 21:43:1f:b2:6f:30:be:2a:d0:85:69:76:40:50:0e: db:31:c5:0a:a7:4a:f7:bf:a9:7f:47:42:25:1c:27: 18:62:d5:0e:49:5d:1d:e9:50:69:45:78:bc:b1:f8: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:D1:F4:6B:B7:A5:86:06:2B:C5:96:33:2D:4A:FB:A6:5A:29:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/53c685ce-0dc9-3acc-81af-0df8fb57a9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c0:54:8b:dd:bb:6d:cd:70:87:ab:0e:d2:28:6d:a9:d1:55: cf:1a:4f:26:15:f4:a8:f1:fb:48:8a:3f:21:10:b1:ad:d3:c3: ab:eb:23:a4:35:7c:50:22:ac:41:d5:e0:2e:76:5f:af:07:d9: e5:0d:ef:86:f1:1a:38:01:72:4a:97:4a:c5:92:87:78:7f:0e: 54:a2:80:da:d5:9e:db:27:38:30:43:ab:62:93:75:e7:a6:20: 1e:0a:75:2d:56:96:58:c4:1e:84:45:fb:d4:77:f7:81:5e:94: 89:15:b5:18:eb:bd:57:89:47:1e:08:79:d2:85:f7:4d:4f:b6: a2:af:fb:2f:9c:06:40:ed:08:bf:14:f0:dd:5e:ff:b4:d3:41: c9:86:bf:75:a8:67:c6:40:04:44:8f:8f:2c:98:3c:b8:36:f6: 3b:e7:34:1a:86:fe:72:8c:55:e4:49:3e:70:01:5f:f9:5b:fb: 2b:b4:dd:ee:15:2a:af:76:c6:f0:3b:54:b2:ed:5d:58:f7:ee: 56:07:f3:c4:5b:04:bb:98:a0:0a:2b:72:fa:ae:14:67:ed:5f: a6:c9:06:7c:21:26:a6:d9:9c:15:e2:c7:23:95:cd:24:36:0f: 9f:e0:76:e7:b3:ac:b2:53:a5:1b:de:1b:37:45:ce:e7:8f:fe: d7:a8:82:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1Su6WqewC66+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDdkYWM5MDAtYTIyMC00Y2M3LWJmYzQtODllMzEwOTFhZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2tro4t3m2h/MD69KXrfhyUsJ+24zqPlhoxn SlG3Nk2Oy2XBkzqML0BgdBXLRLI1j03c9DtxynD8Kv3f4uKjsMXoxyEI2mDXRjZr InOF97KLZ8R/ac51uK2M4tq/d8pTotbsA10Dx1lYDU1Ffwn0NAj3u50+iy/+Obf9 SczAa+SdPRCgrNEkKkJtKGbs47UiZePbZ71z3eKS66b/Xe5yA5MfrbW5EP4pFJLy ylw8DbyzJCi9z5XSXtlWnSrR4lAOMQr8+Qpn3T74UyOWY0i60oQhQx+ybzC+KtCF aXZAUA7bMcUKp0r3v6l/R0IlHCcYYtUOSV0d6VBpRXi8sfg8QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVY0fRrt6WGBivFljMtSvumWilAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTNjNjg1Y2UtMGRjOS0z YWNjLTgxYWYtMGRmOGZiNTdhOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvAVIvdu23NcIerDtIobanRVc8aTyYV9Kjx+0iKPyEQsa3Tw6vrI6Q1 fFAirEHV4C52X68H2eUN74bxGjgBckqXSsWSh3h/DlSigNrVntsnODBDq2KTdeem IB4KdS1WlljEHoRF+9R394FelIkVtRjrvVeJRx4IedKF901PtqKv+y+cBkDtCL8U 8N1e/7TTQcmGv3WoZ8ZABESPjyyYPLg29jvnNBqG/nKMVeRJPnABX/lb+yu03e4V Kq92xvA7VLLtXVj37lYH88RbBLuYoAorcvquFGftX6bJBnwhJqbZnBXixyOVzSQ2 D5/gduezrLJTpRveGzdFzueP/teoggA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:29 2025 by rpki-client