$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa File: 7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json) Hash identifier: M/UUJ2a4tgoQHWy8PTi7GkrfqBwKzil28tS7doiw8sE= Subject key identifier: DC:82:D3:23:55:A2:AA:43:5A:FA:DC:FD:C1:DF:FF:95:22:7E:C0:F9 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B546BA77D31A777FDB480 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 398823 IP address blocks: 107.149.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:54:6b:a7:7d:31:a7:77:fd:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=b43e34cf-a2df-49e1-82e7-aa466c2bf0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4e:d2:d7:e5:d9:fb:ce:40:42:97:e5:f4:18: 22:66:b8:85:29:e4:e2:81:b9:e0:df:d5:c9:b1:18: 9e:6c:74:ad:05:f6:e4:c6:0f:80:24:37:3e:2c:fc: 65:7d:d7:4b:f8:93:d7:f6:fb:29:32:4b:c1:f6:12: 07:16:f1:73:7c:1d:a0:8d:8b:a5:45:a2:92:74:f3: 1c:be:e5:99:67:6b:93:a7:03:79:7c:1f:bc:96:1b: e6:40:44:4e:7e:1c:66:e5:ef:65:86:91:41:a9:fa: 28:bc:ab:0a:6e:55:86:d1:d0:a4:66:4c:28:dc:a8: 5e:f7:8d:a2:62:2b:9c:7f:61:bb:c7:f9:de:25:0f: e2:1c:7e:0d:83:dd:de:13:4f:1d:b6:4a:e4:ab:c6: 32:69:54:25:01:a0:f7:7d:74:dd:b7:85:47:08:35: 76:f0:0e:90:42:31:1c:ee:a7:c1:f9:fc:22:68:08: eb:7e:01:87:e5:90:d9:fc:59:ec:86:9e:68:ae:5b: c5:e2:83:07:c8:5d:2e:52:ca:81:9d:e8:8a:53:c6: 15:f5:2d:2a:63:6f:2b:4d:ab:43:85:5a:99:84:ac: dd:83:c4:a5:0b:89:01:46:41:ba:7e:12:cf:4f:36: 85:6e:4e:83:ad:a4:31:d5:02:39:7f:bb:a5:c7:c2: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:D3:23:55:A2:AA:43:5A:FA:DC:FD:C1:DF:FF:95:22:7E:C0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c8:ae:e4:20:36:c5:c0:33:14:80:c2:a2:82:81:e6:b0:2f: 94:17:95:a0:71:3d:8f:8a:02:c1:ae:2f:c1:df:f8:29:cc:64: b7:00:8b:29:79:c9:06:90:4d:9b:cf:a6:7f:b8:bd:de:b1:87: 95:3d:56:ac:c0:a7:66:b7:a6:6b:45:ca:c9:68:ac:c4:0f:32: f0:f6:8f:88:db:b8:8b:67:13:f5:89:51:ef:79:9d:39:9e:11: f5:fe:4b:ed:46:3c:59:c0:f9:92:d3:08:7b:59:d9:6f:b1:ac: 06:70:ea:be:ae:5d:79:dc:2a:1f:eb:61:d8:3d:77:de:c0:d6: a6:f5:e5:bd:50:8c:57:49:75:ee:e8:39:a1:5d:a1:3f:a9:8e: 26:74:88:c7:5d:39:31:77:a1:42:9e:75:a7:ec:a7:33:a3:8f: 6e:dd:07:85:ac:b3:4f:31:30:3f:0c:a4:90:30:1d:e1:31:a6: 7b:ba:aa:31:32:33:e3:b7:3e:5b:30:b2:47:da:85:10:df:0a: e7:77:a1:c2:b8:39:be:94:ee:8a:ba:77:e1:8b:4c:a1:c8:11: 5d:ce:5b:8b:73:95:d0:65:68:97:5a:c9:ec:b0:c4:94:56:32: b7:2c:62:56:ff:54:15:57:17:f0:9b:df:f4:ae:e9:0f:57:06: 80:82:2d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1Rrp30xp3f9tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjQzZTM0Y2YtYTJkZi00OWUxLTgyZTctYWE0NjZjMmJmMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE7S1+XZ+85AQpfl9BgiZriFKeTigbng39XJ sRiebHStBfbkxg+AJDc+LPxlfddL+JPX9vspMkvB9hIHFvFzfB2gjYulRaKSdPMc vuWZZ2uTpwN5fB+8lhvmQEROfhxm5e9lhpFBqfoovKsKblWG0dCkZkwo3Khe942i Yiucf2G7x/neJQ/iHH4Ng93eE08dtkrkq8YyaVQlAaD3fXTdt4VHCDV28A6QQjEc 7qfB+fwiaAjrfgGH5ZDZ/Fnshp5orlvF4oMHyF0uUsqBneiKU8YV9S0qY28rTatD hVqZhKzdg8SlC4kBRkG6fhLPTzaFbk6DraQx1QI5f7ulx8IO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyC0yNVoqpDWvrc/cHf/5UifsD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzUzM2Y1Y2QtYzhjZi0z OTU2LThjYjgtNTg4N2E0YzNlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfIruQgNsXAMxSAwqKCgeawL5QXlaBxPY+KAsGuL8Hf+CnMZLcAiyl5 yQaQTZvPpn+4vd6xh5U9VqzAp2a3pmtFyslorMQPMvD2j4jbuItnE/WJUe95nTme EfX+S+1GPFnA+ZLTCHtZ2W+xrAZw6r6uXXncKh/rYdg9d97A1qb15b1QjFdJde7o OaFdoT+pjiZ0iMddOTF3oUKedafspzOjj27dB4Wss08xMD8MpJAwHeExpnu6qjEy M+O3PlswskfahRDfCud3ocK4Ob6U7oq6d+GLTKHIEV3OW4tzldBlaJdayeywxJRW MrcsYlb/VBVXF/Cb3/Su6Q9XBoCCLbI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:52 2025 by rpki-client