$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa File: 653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa (raw, json) Hash identifier: OOwaZpOwl9IBIPQtccpDaOvp9R10dJOV9Gj83hIL2Iw= Subject key identifier: 49:EA:23:7A:8F:B3:63:3E:20:58:65:C0:D7:B0:22:C0:32:37:E0:79 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B548F71FFBFC1205D2180 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398478 IP address blocks: 107.149.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:54:8f:71:ff:bf:c1:20:5d:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=b7476610-766a-47f8-8e7d-5f5a5d5a601c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:e3:8c:f7:3b:22:79:55:c7:0a:d0:fa:1e: 4f:22:67:df:24:9f:c8:e7:02:96:c2:f9:e2:ec:65: b7:cd:95:cd:cf:00:3d:b1:bd:1c:d5:5f:a9:03:85: 3a:64:a8:52:09:d6:57:ed:f7:9d:00:cf:04:56:34: d9:ac:42:5a:9f:6c:dc:dc:f8:c7:41:8e:b6:89:b4: d2:41:bb:fd:d2:d2:8b:fc:8e:81:74:84:bd:be:82: 8c:92:3a:26:5f:d8:44:e2:f9:40:cd:c5:ae:30:08: 6a:03:eb:5c:0a:19:98:79:c9:89:28:34:63:61:0c: 5c:9d:ed:77:53:bf:1c:33:67:7f:07:9c:23:9d:29: 30:ec:8a:6b:64:03:54:e4:a5:97:86:88:67:b1:e7: e4:43:11:b6:3d:3e:2e:86:90:bc:dc:a8:15:16:bd: 5d:e1:3b:4a:2a:80:2d:34:2f:a8:a4:0b:62:c1:49: 7f:17:39:a3:2a:04:3d:a1:8e:42:77:6f:59:a7:9e: fb:89:e8:3d:95:f9:35:2f:65:8d:97:6b:6d:9b:34: 8a:c3:3c:17:b4:ab:01:87:b3:e8:9b:d3:15:a6:dc: 3d:75:50:30:48:4a:5f:d0:d2:af:79:0e:dd:0a:cc: e8:5d:e0:a8:1e:32:b6:91:74:4a:7f:d8:7f:e4:ff: 9d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:23:7A:8F:B3:63:3E:20:58:65:C0:D7:B0:22:C0:32:37:E0:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ec:f3:96:30:a7:e2:1f:84:a2:ce:9e:ea:cd:74:f8:12:2c: 16:2a:e6:9a:81:0f:4e:c2:dc:e0:a0:f3:02:b1:aa:c5:f2:11: 7d:77:6e:91:87:7d:f8:7b:4d:f3:8a:06:e8:bf:83:d1:0a:11: 23:70:1d:0c:8f:f8:72:32:36:0b:19:1f:83:95:47:e1:84:10: b7:62:c4:16:d4:c9:bf:09:ae:db:82:dd:cd:f5:95:b1:d4:d3: f8:a4:f4:66:03:3e:3b:4b:2f:9b:22:fe:4b:59:48:15:67:07: 8e:eb:86:e8:f3:82:78:4d:de:0a:90:b1:4a:a5:ef:08:99:84: b7:f8:eb:4b:77:cb:c8:12:52:df:45:30:82:66:eb:75:46:a3: 78:16:88:f5:aa:43:18:bf:2f:e0:32:e9:e0:ad:99:b3:54:fa: 84:35:e2:ff:3d:35:31:67:f2:9e:9e:07:51:6a:f8:90:0f:16: 1a:0f:27:55:31:ce:ab:3e:48:fb:81:b3:07:86:85:e6:28:c1: 33:d5:e1:ab:39:04:b1:99:3f:75:ce:d2:1c:a9:41:d8:ad:0d: e1:82:ea:dc:3b:a5:97:b2:20:ae:8d:5d:0c:36:4a:ee:54:43: 47:5e:6a:65:0d:d8:85:c2:ef:ba:55:08:65:ad:c1:46:d0:a0: df:7e:9b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1SPcf+/wSBdIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk Yjc0NzY2MTAtNzY2YS00N2Y4LThlN2QtNWY1YTVkNWE2MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF7jjPc7InlVxwrQ+h5PImffJJ/I5wKWwvni 7GW3zZXNzwA9sb0c1V+pA4U6ZKhSCdZX7fedAM8EVjTZrEJan2zc3PjHQY62ibTS Qbv90tKL/I6BdIS9voKMkjomX9hE4vlAzcWuMAhqA+tcChmYecmJKDRjYQxcne13 U78cM2d/B5wjnSkw7IprZANU5KWXhohnsefkQxG2PT4uhpC83KgVFr1d4TtKKoAt NC+opAtiwUl/FzmjKgQ9oY5Cd29Zp577ieg9lfk1L2WNl2ttmzSKwzwXtKsBh7Po m9MVptw9dVAwSEpf0NKveQ7dCszoXeCoHjK2kXRKf9h/5P+dbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnqI3qPs2M+IFhlwNewIsAyN+B5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNjUzZTBmMDYtMGQ1Yi0z MWE0LWJjOTQtYmJlYTNjMGRkY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7s85Ywp+IfhKLOnurNdPgSLBYq5pqBD07C3OCg8wKxqsXyEX13bpGH ffh7TfOKBui/g9EKESNwHQyP+HIyNgsZH4OVR+GEELdixBbUyb8JrtuC3c31lbHU 0/ik9GYDPjtLL5si/ktZSBVnB47rhujzgnhN3gqQsUql7wiZhLf460t3y8gSUt9F MIJm63VGo3gWiPWqQxi/L+Ay6eCtmbNU+oQ14v89NTFn8p6eB1Fq+JAPFhoPJ1Ux zqs+SPuBsweGheYowTPV4as5BLGZP3XO0hypQditDeGC6tw7pZeyIK6NXQw2Su5U Q0deamUN2IXC77pVCGWtwUbQoN9+m9I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:20 2025 by rpki-client