$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa File: f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa (raw, json) Hash identifier: UgmA2I1rXOrgs2+J31EVAtkzyIy2MYu4avrFH5RI6Lg= Subject key identifier: DF:9F:9D:64:27:1C:13:A1:2B:95:DE:26:CE:FF:38:C6:68:96:09:8F Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285848BE8629510E87038CDDBC5780 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 398993 IP address blocks: 104.233.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:29:51:0e:87:03:8c:dd:bc:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=626bb1ef-11ef-4a72-988f-ae58fa536248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:df:1f:b9:56:47:b9:a3:40:f3:56:4d:be: 0d:93:0e:4d:02:49:20:d0:b3:ba:0e:2f:6b:9c:64: 16:e8:ab:c0:47:e8:2e:1a:c4:92:a8:2b:e6:0d:d3: 43:d6:81:17:cd:28:6e:75:ee:44:83:99:ef:84:92: dd:f3:4d:57:24:74:25:00:9b:a1:06:ba:c0:87:05: 2b:9e:56:e1:11:19:21:5a:0d:72:ae:7d:7b:30:19: 1d:3e:ac:cd:c9:98:70:20:95:31:d3:67:7b:a6:20: cd:1c:e3:54:16:db:15:b1:dc:f7:5b:a9:cb:dc:c4: 20:49:f1:2a:d8:a6:75:38:d3:17:2f:f0:08:07:e5: 38:e0:bf:08:27:a2:ac:69:58:b9:40:db:aa:78:c8: b2:7b:0e:4e:67:74:b3:0c:91:75:1f:be:4d:29:40: d2:a5:ec:8a:35:64:d8:54:7e:58:63:75:d2:80:4c: 05:1b:51:4b:d2:19:ef:e5:04:9a:87:e2:92:e3:be: d8:0a:33:7d:d8:23:f6:15:da:63:39:11:00:b5:6a: 70:aa:e4:eb:15:1e:89:e0:81:c0:ed:72:66:75:1f: 1f:f0:00:3a:b2:cc:8c:8e:0b:45:8b:e4:43:d1:b1: ed:6e:6c:4c:0f:ea:3b:3d:56:63:e6:f9:e3:16:33: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9F:9D:64:27:1C:13:A1:2B:95:DE:26:CE:FF:38:C6:68:96:09:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/f133d619-0ae5-312a-8d2f-f0c1bef15f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bc:22:7f:02:88:98:be:34:9b:8e:12:62:41:60:ed:37:5d: 8d:ab:28:e3:11:34:8c:15:b8:63:6d:91:72:e0:8b:1f:dd:ce: a6:3f:b5:90:12:20:32:94:e6:f7:64:ca:20:d6:a6:62:fe:7f: 3c:be:e9:fc:ad:50:04:07:67:9d:6c:5f:6d:e0:28:1f:36:c0: 18:cd:94:68:49:90:cc:06:76:84:28:cc:4e:31:5c:79:cf:19: 5a:02:64:04:95:23:e8:36:a1:27:71:41:01:b6:6b:1b:3c:a9: 25:4b:d4:48:af:43:75:4a:6a:4a:7a:5c:12:04:96:7e:2c:19: 59:b6:29:36:dc:2f:1d:db:84:4a:44:e2:bc:d5:93:77:6d:72: 18:3b:d2:53:88:3e:8b:47:9c:0b:aa:56:83:7d:53:01:72:64: 58:2d:6f:3a:91:d8:5b:56:e2:7e:a1:b9:24:c9:5e:db:ee:65: e1:3b:14:ce:92:97:0a:0c:aa:6e:c3:ed:8a:a5:b5:94:b0:98: 18:f1:59:81:8a:eb:a8:4b:13:47:16:0e:58:d6:7b:7d:84:35: 74:b6:b8:cb:34:a0:57:20:d2:ff:0a:9f:43:4a:49:97:5b:d5: ee:84:43:2a:4d:d2:cc:08:7e:21:17:8c:f1:2f:07:64:7c:d4: 88:22:05:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hilRDocDjN28V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NjI2YmIxZWYtMTFlZi00YTcyLTk4OGYtYWU1OGZhNTM2MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEjfH7lWR7mjQPNWTb4Nkw5NAkkg0LO6Di9r nGQW6KvAR+guGsSSqCvmDdND1oEXzShude5Eg5nvhJLd801XJHQlAJuhBrrAhwUr nlbhERkhWg1yrn17MBkdPqzNyZhwIJUx02d7piDNHONUFtsVsdz3W6nL3MQgSfEq 2KZ1ONMXL/AIB+U44L8IJ6KsaVi5QNuqeMiyew5OZ3SzDJF1H75NKUDSpeyKNWTY VH5YY3XSgEwFG1FL0hnv5QSah+KS477YCjN92CP2FdpjOREAtWpwquTrFR6J4IHA 7XJmdR8f8AA6ssyMjgtFi+RD0bHtbmxMD+o7PVZj5vnjFjPmrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+fnWQnHBOhK5XeJs7/OMZolgmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZjEzM2Q2MTktMGFlNS0z MTJhLThkMmYtZjBjMWJlZjE1ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK8In8CiJi+NJuOEmJBYO03XY2rKOMRNIwVuGNtkXLgix/dzqY/tZAS IDKU5vdkyiDWpmL+fzy+6fytUAQHZ51sX23gKB82wBjNlGhJkMwGdoQozE4xXHnP GVoCZASVI+g2oSdxQQG2axs8qSVL1EivQ3VKakp6XBIEln4sGVm2KTbcLx3bhEpE 4rzVk3dtchg70lOIPotHnAuqVoN9UwFyZFgtbzqR2FtW4n6huSTJXtvuZeE7FM6S lwoMqm7D7YqltZSwmBjxWYGK66hLE0cWDljWe32ENXS2uMs0oFcg0v8Kn0NKSZdb 1e6EQypN0swIfiEXjPEvB2R81IgiBco= -----END CERTIFICATE-----Generated at Wed Apr 9 17:10:12 2025 by rpki-client