$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa File: a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json) Hash identifier: FmcMaA7JNyxj8bbljM9AHJ3BuoxwR0TwurLfLItYfJo= Subject key identifier: E7:11:82:48:E4:21:19:B8:E6:0A:F1:43:D4:18:E1:F2:96:E6:E0:2D Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848A29B54DCFA86A5EC451C9080 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 399195 IP address blocks: 107.149.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:54:dc:fa:86:a5:ec:45:1c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=17c59668-e5fc-47c7-85ee-d83acf7a0f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:e9:96:93:1c:37:a4:65:9f:5a:38:72:32: c5:b9:86:d5:dd:b9:83:ce:6a:3e:bb:6e:61:2d:8a: aa:35:9b:b1:c7:40:03:98:8b:21:9e:2c:02:c5:7c: f9:81:2b:f6:08:78:86:dc:de:2a:79:52:93:22:b7: 90:75:2c:08:a5:b3:a8:3c:df:43:33:cf:26:3f:25: b5:3c:7b:f1:88:ca:37:f6:37:4d:de:f2:63:87:a9: 4f:42:5b:1d:7c:7b:a4:52:31:30:e5:30:ab:d3:d3: 57:20:d7:bb:f2:5f:18:6d:9d:6e:a7:f2:4a:76:b1: a8:c6:d4:76:0c:4b:e5:f9:3b:df:66:f1:d6:43:c6: bf:84:b5:e4:c1:9d:50:3c:26:26:af:5d:ea:22:50: 3a:8e:6b:9f:03:e9:36:b2:86:8b:e6:2d:80:9e:30: fe:88:9d:67:00:d4:a9:5c:76:ef:32:f0:42:47:0a: 3e:c3:eb:0f:6a:e0:42:da:4f:3a:7f:aa:31:fc:70: 6d:26:26:d7:84:01:82:67:35:a5:15:15:99:aa:d6: e9:30:b3:82:2b:a1:04:2d:33:93:84:af:9e:89:02: c2:ab:aa:83:fd:13:9a:73:02:1c:9c:ff:bf:bc:c9: c8:0f:f4:c8:25:27:10:35:e2:be:a8:72:04:ff:ff: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:11:82:48:E4:21:19:B8:E6:0A:F1:43:D4:18:E1:F2:96:E6:E0:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0a:4b:d9:0f:27:dc:04:dc:91:f0:d0:56:34:31:c8:34:a3: e4:56:0a:6f:d5:44:ea:65:fb:53:cc:82:e8:f2:61:7d:6f:b1: 2d:d7:7c:a7:1c:99:6b:4e:16:dc:1a:08:a7:40:d2:e1:3d:14: 60:09:91:51:01:00:c6:d8:a8:d0:ba:2b:92:dc:40:27:88:8e: be:3e:53:ee:fa:8f:e5:dc:b0:c8:cf:2c:4b:42:03:7a:01:8e: 16:53:aa:03:66:de:4f:4b:5f:5d:37:07:14:48:98:f8:4d:aa: f4:ca:86:7c:4c:ea:95:f8:e7:23:88:55:53:e5:70:30:a0:dd: 42:fb:92:71:d6:bd:d1:8f:9a:a3:87:d7:b8:82:72:70:6a:48: c6:ee:91:d9:26:55:7f:38:68:54:2d:5b:53:52:12:9f:a5:48: 9d:ce:64:f5:03:0d:f0:50:76:49:05:8b:8c:73:a2:76:7d:9b: f9:ae:e8:b3:3a:8f:3a:3f:f2:7f:99:db:f5:9e:9d:22:57:b1: 6c:dc:8b:56:04:3e:be:c2:64:23:d5:ae:a6:04:36:5c:69:54: c5:00:ec:70:e8:f1:dd:70:23:44:e7:4c:fe:fa:08:c0:73:77: 62:63:41:0e:9b:55:69:36:d3:e8:40:27:9d:9a:2c:2e:bf:b3: 1b:b5:98:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1Tc+oal7EUckIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk MTdjNTk2NjgtZTVmYy00N2M3LTg1ZWUtZDgzYWNmN2EwZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMbplpMcN6Rln1o4cjLFuYbV3bmDzmo+u25h LYqqNZuxx0ADmIshniwCxXz5gSv2CHiG3N4qeVKTIreQdSwIpbOoPN9DM88mPyW1 PHvxiMo39jdN3vJjh6lPQlsdfHukUjEw5TCr09NXINe78l8YbZ1up/JKdrGoxtR2 DEvl+TvfZvHWQ8a/hLXkwZ1QPCYmr13qIlA6jmufA+k2soaL5i2AnjD+iJ1nANSp XHbvMvBCRwo+w+sPauBC2k86f6ox/HBtJibXhAGCZzWlFRWZqtbpMLOCK6EELTOT hK+eiQLCq6qD/ROacwIcnP+/vMnID/TIJScQNeK+qHIE//9WHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcRgkjkIRm45grxQ9QY4fKW5uAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTNhY2M4NzUtYTUwOS0z YjdhLWIxYmYtOTk2ZDM2MmUyZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwKS9kPJ9wE3JHw0FY0Mcg0o+RWCm/VROpl+1PMgujyYX1vsS3XfKcc mWtOFtwaCKdA0uE9FGAJkVEBAMbYqNC6K5LcQCeIjr4+U+76j+XcsMjPLEtCA3oB jhZTqgNm3k9LX103BxRImPhNqvTKhnxM6pX45yOIVVPlcDCg3UL7knHWvdGPmqOH 17iCcnBqSMbukdkmVX84aFQtW1NSEp+lSJ3OZPUDDfBQdkkFi4xzonZ9m/mu6LM6 jzo/8n+Z2/WenSJXsWzci1YEPr7CZCPVrqYENlxpVMUA7HDo8d1wI0TnTP76CMBz d2JjQQ6bVWk20+hAJ52aLC6/sxu1mOA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:27 2025 by rpki-client