$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab4637be-a075-37fa-ab37-ac1607960ef1.roa File: ab4637be-a075-37fa-ab37-ac1607960ef1.roa (raw, json) Hash identifier: brkTireJiQ11wXM2yfag/+yFdtOMFJK83W4rvb9kZWc= Subject key identifier: 00:3C:2B:76:FD:C3:2E:7B:C2:08:B3:7A:E6:74:6E:30:59:23:89:4A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285848E0066472C03A70904DFE0F80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab4637be-a075-37fa-ab37-ac1607960ef1.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 33363 IP address blocks: 107.147.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:64:72:c0:3a:70:90:4d:fe:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=b7a61d15-d51c-414a-96e9-54d90239d3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:d4:6b:c5:c0:8d:10:b8:82:f1:3a:ea:d4: ff:b1:4c:da:25:5e:c2:c2:80:67:c5:6b:2c:7d:53: c1:07:06:eb:38:fd:6f:bf:c8:d7:46:32:4b:7f:36: 19:d1:ef:99:1c:ad:96:46:91:27:8d:5b:d5:c1:5c: 94:0f:57:94:a8:18:81:15:63:ae:9f:4c:ca:01:97: 3e:0d:ef:7c:73:bc:69:80:5b:ae:c3:12:88:3c:c2: dd:06:35:92:df:00:ff:b6:6c:cb:e2:26:4a:87:7b: 9e:c9:92:ce:4a:cb:a2:39:7e:32:c9:f3:4f:a5:b4: de:34:b1:38:2f:80:f7:18:ce:9b:02:7d:7c:91:74: b7:c4:60:96:40:eb:08:5d:72:28:4a:9c:13:b7:01: 21:6e:d8:e1:78:41:d0:5f:e0:ac:74:4b:be:98:bd: 8f:f1:ed:03:b8:82:a2:a5:fc:cc:51:8b:c8:8f:2a: 86:04:37:19:83:f2:f9:ed:e1:0b:3e:b7:5c:63:8e: 7c:04:fe:97:f6:33:c9:87:14:af:ea:27:11:f1:d7: cf:34:dc:cf:4a:a1:df:fd:36:ad:2b:01:19:59:2f: 17:fa:2b:bb:3e:a4:2e:24:ae:2d:63:9a:c7:f7:3f: 90:24:07:eb:d8:27:a7:d6:a9:26:63:e7:85:e4:9d: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3C:2B:76:FD:C3:2E:7B:C2:08:B3:7A:E6:74:6E:30:59:23:89:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab4637be-a075-37fa-ab37-ac1607960ef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 107.147.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c2:cf:05:4c:d6:70:0e:e8:2e:ea:25:b3:63:f0:43:6a:52: 16:69:41:2f:1c:87:cd:6f:5b:23:cc:9a:97:b9:30:db:d4:ba: c0:fd:41:48:80:3a:ac:26:00:52:2c:96:07:44:b3:6c:9f:a5: e6:d1:12:c0:ae:67:7e:67:0c:c4:89:23:cc:cb:f1:e5:9e:1b: ac:bd:f8:4d:92:aa:f3:df:3a:f1:2b:75:94:ac:2b:80:64:60: d7:ee:2f:b5:10:ed:7a:39:5a:71:26:7b:9f:f8:ae:02:08:3e: fc:91:24:02:54:57:f5:94:48:99:38:fb:0a:97:5d:0d:c5:c7: 1f:1b:e3:8b:26:7d:41:dd:8b:56:7c:72:d8:33:1e:8e:e3:ed: 38:d8:c0:07:f7:30:c2:70:a5:40:93:21:e2:32:b9:ac:9d:dc: a8:70:de:1e:7e:26:83:04:2a:6b:ed:06:98:0a:78:92:33:37: 8d:fd:45:a0:bf:3b:50:49:85:b1:5a:94:08:a8:bb:fe:e8:e8: 96:fb:38:26:15:ff:08:02:91:d5:a3:24:64:cf:3a:26:56:4a: b7:b5:fd:5e:6f:46:f5:bf:f0:3a:0e:96:51:c8:7e:af:e0:bc: a6:40:3b:f4:7b:b3:ab:e3:7b:5a:63:dd:fc:7f:7f:7d:62:15: 25:a3:6e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBmRywDpwkE3+D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YjdhNjFkMTUtZDUxYy00MTRhLTk2ZTktNTRkOTAyMzlkM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijrUa8XAjRC4gvE66tT/sUzaJV7CwoBnxWss fVPBBwbrOP1vv8jXRjJLfzYZ0e+ZHK2WRpEnjVvVwVyUD1eUqBiBFWOun0zKAZc+ De98c7xpgFuuwxKIPMLdBjWS3wD/tmzL4iZKh3ueyZLOSsuiOX4yyfNPpbTeNLE4 L4D3GM6bAn18kXS3xGCWQOsIXXIoSpwTtwEhbtjheEHQX+CsdEu+mL2P8e0DuIKi pfzMUYvIjyqGBDcZg/L57eELPrdcY458BP6X9jPJhxSv6icR8dfPNNzPSqHf/Tat KwEZWS8X+iu7PqQuJK4tY5rH9z+QJAfr2Cen1qkmY+eF5J1RFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA8K3b9wy57wgizeuZ0bjBZI4lKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWI0NjM3YmUtYTA3NS0z N2ZhLWFiMzctYWMxNjA3OTYwZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa5MAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfCzwVM1nAO6C7qJbNj8ENqUhZpQS8ch81vWyPMmpe5MNvUusD9QUiA OqwmAFIslgdEs2yfpebREsCuZ35nDMSJI8zL8eWeG6y9+E2SqvPfOvErdZSsK4Bk YNfuL7UQ7Xo5WnEme5/4rgIIPvyRJAJUV/WUSJk4+wqXXQ3Fxx8b44smfUHdi1Z8 ctgzHo7j7TjYwAf3MMJwpUCTIeIyuayd3Khw3h5+JoMEKmvtBpgKeJIzN439RaC/ O1BJhbFalAiou/7o6Jb7OCYV/wgCkdWjJGTPOiZWSre1/V5vRvW/8DoOllHIfq/g vKZAO/R7s6vje1pj3fx/f31iFSWjbis= -----END CERTIFICATE-----Generated at Sat Apr 5 03:46:39 2025 by rpki-client