$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa File: a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa (raw, json) Hash identifier: DYs63C3jOJ6Z+kGWycWd31gGSForFDCyEN12k7FKcyk= Subject key identifier: BA:FD:1D:D5:9C:56:2A:A8:15:7E:EB:0C:88:76:43:FD:2B:E3:B5:5D Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F432858489A3B43BD606C49910F6A0680 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 398993 IP address blocks: 107.148.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:43:bd:60:6c:49:91:0f:6a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=0ef03050-aaf0-4278-9dad-a0ba38e73953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:fb:51:c3:b6:6a:8e:96:96:fd:69:96:f4: d1:8f:a9:70:a9:c7:ea:f6:80:44:c4:3b:fe:55:76: 3f:5c:1a:e8:83:36:fb:84:ab:3b:61:d8:d6:9f:8f: cd:d0:b7:51:f4:93:2f:36:1e:fd:a0:f8:87:32:b6: c2:98:40:c0:40:36:76:62:0c:f7:32:dd:ea:e2:f5: 22:f1:82:5e:46:45:a5:aa:46:34:d3:05:d1:8b:98: 6a:4e:96:27:b2:c1:58:a9:c4:23:47:6f:32:ec:e0: 15:15:75:95:a1:76:c3:1f:41:37:90:ca:23:ce:7b: 61:77:60:29:a2:26:56:4e:ee:4c:fb:8c:bc:32:7b: 1d:3a:e1:b7:17:59:eb:63:fb:a0:ad:19:00:cd:18: 52:2f:78:91:a0:ef:f7:cd:fa:0d:e4:c8:e9:83:38: 75:ec:06:67:3a:11:13:6d:15:f1:75:08:1b:f2:0e: 91:1a:c6:83:9c:21:c9:9d:6a:c6:e3:a2:5e:15:02: 6b:a2:99:0a:00:e1:82:12:d0:ce:6c:b3:18:1c:df: 43:ed:58:92:92:de:3d:4a:66:40:46:53:25:42:51: 4f:57:bb:1d:b4:e2:57:25:ed:24:cd:9f:d0:8e:d0: be:a2:fc:4b:a1:60:5a:fa:25:97:81:f1:62:cb:8b: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:1D:D5:9C:56:2A:A8:15:7E:EB:0C:88:76:43:FD:2B:E3:B5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:53:44:95:3e:a9:e1:a2:ad:52:27:34:bc:9b:4c:09:68:79: 07:2a:ca:a2:da:d5:89:d6:8d:9c:7b:7c:3e:97:a1:ef:9e:c8: 0e:b9:6b:8f:43:a8:61:0a:8c:aa:e6:b2:76:1c:ad:43:d1:37: 21:13:5c:8f:7b:f5:77:01:26:33:eb:38:a0:7d:4c:a3:97:a7: 10:86:b2:2f:14:34:fc:4e:9b:e4:75:25:4f:51:49:fa:b5:25: 30:49:1c:c8:39:4c:02:0d:bd:29:c4:ab:65:e2:0d:07:dd:51: b7:14:b4:9f:13:cd:c4:aa:59:38:9f:7e:fb:3b:f4:72:5d:d4: 5a:d5:1a:04:7e:10:18:f9:f6:5e:be:96:15:b8:1d:b6:eb:5b: bf:0c:9a:39:9b:86:47:f4:78:e5:2b:d7:53:e5:8a:c0:53:88: 6c:f2:02:2c:90:5c:17:5d:8c:e6:ce:cb:c2:35:12:70:e2:1b: e3:ef:cc:53:09:a2:75:eb:17:b9:ce:b0:3a:01:4b:f3:fb:3d: 33:23:89:b1:eb:27:6c:e1:7c:29:ca:99:28:26:18:45:32:cf: 73:61:33:45:94:85:b0:af:3a:46:c6:2b:f3:64:f2:00:78:dc: 8f:ea:c0:fb:f7:eb:09:31:ea:38:5b:95:0c:19:a4:db:be:0a: 9d:b8:ec:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0O9YGxJkQ9qBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk MGVmMDMwNTAtYWFmMC00Mjc4LTlkYWQtYTBiYTM4ZTczOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzz7UcO2ao6Wlv1plvTRj6lwqcfq9oBExDv+ VXY/XBrogzb7hKs7YdjWn4/N0LdR9JMvNh79oPiHMrbCmEDAQDZ2Ygz3Mt3q4vUi 8YJeRkWlqkY00wXRi5hqTpYnssFYqcQjR28y7OAVFXWVoXbDH0E3kMojznthd2Ap oiZWTu5M+4y8MnsdOuG3F1nrY/ugrRkAzRhSL3iRoO/3zfoN5Mjpgzh17AZnOhET bRXxdQgb8g6RGsaDnCHJnWrG46JeFQJropkKAOGCEtDObLMYHN9D7ViSkt49SmZA RlMlQlFPV7sdtOJXJe0kzZ/QjtC+ovxLoWBa+iWXgfFiy4vhrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr9HdWcViqoFX7rDIh2Q/0r47VdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTVjNWM2ZjEtZTI5Yi0z OGMwLTgyZjEtOGNmMWE5MDkyOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9TRJU+qeGirVInNLybTAloeQcqyqLa1YnWjZx7fD6Xoe+eyA65a49D qGEKjKrmsnYcrUPRNyETXI979XcBJjPrOKB9TKOXpxCGsi8UNPxOm+R1JU9RSfq1 JTBJHMg5TAINvSnEq2XiDQfdUbcUtJ8TzcSqWTiffvs79HJd1FrVGgR+EBj59l6+ lhW4HbbrW78Mmjmbhkf0eOUr11PlisBTiGzyAiyQXBddjObOy8I1EnDiG+PvzFMJ onXrF7nOsDoBS/P7PTMjibHrJ2zhfCnKmSgmGEUyz3NhM0WUhbCvOkbGK/Nk8gB4 3I/qwPv36wkx6jhblQwZpNu+Cp247GQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:25 2025 by rpki-client