$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa File: f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa (raw, json) Hash identifier: qUhJNoajU8XwQxyiXI+MYGznv35mjiMjX1Hj7P4DZZM= Subject key identifier: 6F:7A:CA:01:7D:0E:37:28:49:E0:B8:E8:44:C8:BC:11:64:A7:15:AC Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F43285849CE9A5A01AF8AC161D1DF0BE0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 398919 IP address blocks: 107.144.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:5a:01:af:8a:c1:61:d1:df:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d0af7983-33ba-475d-bac3-04b08fbb6649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:ee:af:76:7f:e5:5c:4f:20:6c:c8:5f:ed: 7c:30:71:28:2f:18:56:97:99:e4:3d:54:19:60:29: c9:34:2c:10:f8:2a:0e:93:4c:ca:6f:e1:0e:d1:01: 90:4e:14:05:ff:90:55:c9:ed:3a:59:f2:f0:00:d4: 75:ed:72:b4:9e:2c:d3:a8:6c:c3:d8:b2:66:e0:37: fb:93:a8:75:73:d7:95:3b:ea:ff:62:3a:13:21:9a: e9:fa:1d:43:02:51:03:23:59:63:0b:83:d6:da:0c: 51:70:06:ce:67:c2:88:85:75:8c:5a:7b:0f:81:3d: 84:b4:4d:cc:75:cf:d3:a9:a0:d7:25:86:7b:99:cf: 7f:f0:75:b4:19:32:40:f4:6a:4e:5d:fb:f7:3f:09: fc:df:c8:4d:15:da:cf:30:f2:af:da:42:12:e5:9f: f0:22:5a:74:92:34:6d:3f:91:89:27:42:ff:26:15: e4:1f:08:bc:84:dc:6b:74:b0:62:19:56:fb:b8:6a: c7:fb:a4:d8:95:fc:67:1f:bc:18:81:ed:04:95:39: d9:5c:4a:5f:17:29:78:e9:a0:57:5e:c6:76:1b:4b: ca:02:90:ec:69:d6:39:38:8e:82:c0:19:a0:10:de: d2:d6:b2:b8:86:f5:1c:7f:7c:ba:20:a6:fa:37:c2: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7A:CA:01:7D:0E:37:28:49:E0:B8:E8:44:C8:BC:11:64:A7:15:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f4208e21-9ba8-37ff-bfff-16ca1827a50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 107.144.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8a:90:9f:79:82:0a:48:57:ec:5b:8e:57:16:70:61:b4:3c: 53:bd:50:f0:4a:08:3f:f2:1c:88:ff:3f:0c:6e:b5:b4:12:bf: 6d:8b:38:ce:e8:7c:c3:fd:d2:e3:ed:28:88:4f:3a:11:e5:d9: 46:0a:18:11:8c:7f:23:d4:94:d3:11:c1:bb:6f:e7:42:72:8b: 05:b5:b5:53:b2:c0:90:32:d1:d1:b0:9d:20:f1:1c:fc:cb:33: 59:80:70:b3:35:a4:c6:79:61:d2:06:66:1e:bf:c5:a1:6f:7e: 06:c0:db:9a:71:e6:29:ca:09:56:15:c7:69:df:dc:86:08:7d: 6d:05:d0:bc:56:19:83:04:88:77:7f:41:93:cd:d6:61:d0:1c: 93:15:e1:92:ff:e8:9c:b6:a9:22:b5:3e:b4:7c:de:41:d9:07: 33:3d:28:de:0c:9e:35:b9:18:d7:33:84:a4:3f:cb:be:39:63: 91:9e:df:0e:cb:e0:8c:7a:4b:11:6d:06:2b:74:81:20:36:ea: 57:8a:91:91:14:8b:b0:e3:8c:88:51:b7:92:47:f2:23:73:15: 70:6c:39:21:0a:80:56:63:30:6b:7f:5f:4a:b0:e0:32:c6:43: d1:78:59:d1:4e:3c:06:70:bf:9b:da:08:ef:90:ed:c5:9d:20: 90:e2:8e:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmloBr4rBYdHfC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDBhZjc5ODMtMzNiYS00NzVkLWJhYzMtMDRiMDhmYmI2NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxrur3Z/5VxPIGzIX+18MHEoLxhWl5nkPVQZ YCnJNCwQ+CoOk0zKb+EO0QGQThQF/5BVye06WfLwANR17XK0nizTqGzD2LJm4Df7 k6h1c9eVO+r/YjoTIZrp+h1DAlEDI1ljC4PW2gxRcAbOZ8KIhXWMWnsPgT2EtE3M dc/TqaDXJYZ7mc9/8HW0GTJA9GpOXfv3Pwn838hNFdrPMPKv2kIS5Z/wIlp0kjRt P5GJJ0L/JhXkHwi8hNxrdLBiGVb7uGrH+6TYlfxnH7wYge0ElTnZXEpfFyl46aBX XsZ2G0vKApDsadY5OI6CwBmgEN7S1rK4hvUcf3y6IKb6N8KWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG96ygF9DjcoSeC46ETIvBFkpxWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjQyMDhlMjEtOWJhOC0z N2ZmLWJmZmYtMTZjYTE4MjdhNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5CRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGKkJ95ggpIV+xbjlcWcGG0PFO9UPBKCD/yHIj/PwxutbQSv22LOM7o fMP90uPtKIhPOhHl2UYKGBGMfyPUlNMRwbtv50JyiwW1tVOywJAy0dGwnSDxHPzL M1mAcLM1pMZ5YdIGZh6/xaFvfgbA25px5inKCVYVx2nf3IYIfW0F0LxWGYMEiHd/ QZPN1mHQHJMV4ZL/6Jy2qSK1PrR83kHZBzM9KN4MnjW5GNczhKQ/y745Y5Ge3w7L 4Ix6SxFtBit0gSA26leKkZEUi7DjjIhRt5JH8iNzFXBsOSEKgFZjMGt/X0qw4DLG Q9F4WdFOPAZwv5vaCO+Q7cWdIJDijtc= -----END CERTIFICATE-----Generated at Fri Jun 6 18:01:38 2025 by rpki-client