$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa File: d4c71e90-c45a-3390-94ca-0437b1719610.roa (raw, json) Hash identifier: KHgkMB3IGT+FuktddNXg0dMXNONCOPyZWx7wST2bW8k= Subject key identifier: ED:B5:F8:A1:45:8F:E4:D3:A2:15:44:BC:E7:A0:13:E8:FB:0D:97:ED Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849C903EC6848FEC7F4CB93D1C0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa Signing time: Thu 08 May 2025 12:59:12 +0000 ROA not before: Thu 08 May 2025 12:59:12 +0000 ROA not after: Wed 06 Aug 2025 12:59:12 +0000 asID: 215595 IP address blocks: 107.158.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:03:ec:68:48:fe:c7:f4:cb:93:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 8 12:59:12 2025 GMT Not After : Aug 6 12:59:12 2025 GMT Subject: CN=4f32c0ba-2dd6-4f26-8e07-4a8b09bd2649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:45:a4:9b:57:ee:20:0f:eb:fd:62:85:7d: e0:f5:84:83:1a:3e:ad:9c:47:3f:f1:a8:0f:d8:4e: ff:69:0e:ce:e4:ba:9f:ae:d8:c2:c2:42:7b:21:98: 75:74:4e:cb:85:e3:43:6b:cf:7d:2b:3c:ad:37:cb: 9f:90:17:6e:23:d2:e3:cd:e7:60:0e:0b:1b:63:f3: cd:fb:05:30:ea:47:a6:d6:2c:7e:b6:14:b5:d8:39: c1:cd:64:6c:7a:d2:9b:7b:92:8a:08:ec:5e:6b:bb: 38:20:17:d0:35:44:b5:1a:26:c2:20:b1:7e:64:21: 2d:68:1a:b0:17:94:fd:3d:03:64:a6:79:28:d2:6d: c2:5f:6c:27:16:cb:0a:ad:e8:d0:94:95:39:7c:b9: 20:71:c4:07:76:08:0b:62:7f:25:66:d9:f6:41:70: ee:cd:38:7c:2d:52:f0:0c:52:26:4a:20:c8:50:ff: 84:a0:f7:c3:b1:cb:96:9a:14:33:78:2d:0d:60:ca: ba:b6:ca:92:29:25:29:6f:25:ed:23:64:d2:7e:bf: 72:fc:b3:fc:e0:a2:74:34:d2:b2:7f:65:a8:fe:0f: 77:86:b8:cd:19:3f:f6:ac:ab:99:31:30:cb:a0:84: 06:41:c4:19:95:cc:43:f6:be:34:52:cc:59:8b:cd: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B5:F8:A1:45:8F:E4:D3:A2:15:44:BC:E7:A0:13:E8:FB:0D:97:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4c71e90-c45a-3390-94ca-0437b1719610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f6:e2:97:4a:d3:72:4e:1b:d6:1e:05:35:2e:4e:0c:ef:bd: 27:5b:53:d8:cd:c5:b8:13:f7:2f:c9:91:d2:33:c4:be:d3:11: 33:6a:37:eb:56:e3:58:45:d2:5e:7b:86:1c:65:89:71:bc:2b: 0f:7d:bc:ca:f4:41:95:9b:65:43:41:35:65:c9:5c:3e:30:fd: 7e:1a:e8:1a:89:45:8b:22:01:d6:99:55:c8:f6:91:35:59:b5: e5:8c:3a:59:8c:79:b6:36:b6:c2:21:4c:ec:b1:01:8a:98:82: 42:10:c8:c5:ef:46:34:d7:06:f0:af:09:c6:07:ba:42:c2:8a: 2c:56:07:16:76:c8:cd:6a:00:96:de:4a:9a:12:58:2f:80:1c: 55:1b:e0:76:10:49:96:b2:53:88:9c:16:ec:9d:21:ec:a1:ba: 55:94:d8:c0:bf:26:26:8a:d8:a7:2c:e2:a0:26:70:4c:02:89: 1d:d7:a3:8b:00:f8:07:71:35:b3:6f:df:45:3c:b9:e8:ab:be: 1c:66:e5:69:62:8f:5f:d4:21:8c:ff:2b:fc:8d:00:46:b1:35: 7f:f1:88:d9:35:06:e5:73:9a:50:6b:24:44:c0:99:c4:b6:d8: 2a:aa:6c:87:0f:a9:2a:5f:d9:01:4f:17:13:96:d6:b2:56:ff: 17:ab:e6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJA+xoSP7H9MuT0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUwODEyNTkxMloXDTI1MDgwNjEyNTkxMlowLzEtMCsGA1UEAxMk NGYzMmMwYmEtMmRkNi00ZjI2LThlMDctNGE4YjA5YmQyNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeRFpJtX7iAP6/1ihX3g9YSDGj6tnEc/8agP 2E7/aQ7O5LqfrtjCwkJ7IZh1dE7LheNDa899KzytN8ufkBduI9LjzedgDgsbY/PN +wUw6kem1ix+thS12DnBzWRsetKbe5KKCOxea7s4IBfQNUS1GibCILF+ZCEtaBqw F5T9PQNkpnko0m3CX2wnFssKrejQlJU5fLkgccQHdggLYn8lZtn2QXDuzTh8LVLw DFImSiDIUP+EoPfDscuWmhQzeC0NYMq6tsqSKSUpbyXtI2TSfr9y/LP84KJ0NNKy f2Wo/g93hrjNGT/2rKuZMTDLoIQGQcQZlcxD9r40UsxZi801dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO21+KFFj+TTohVEvOegE+j7DZftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDRjNzFlOTAtYzQ1YS0z MzkwLTk0Y2EtMDQzN2IxNzE5NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa56CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz24pdK03JOG9YeBTUuTgzvvSdbU9jNxbgT9y/JkdIzxL7TETNqN+tW 41hF0l57hhxliXG8Kw99vMr0QZWbZUNBNWXJXD4w/X4a6BqJRYsiAdaZVcj2kTVZ teWMOlmMebY2tsIhTOyxAYqYgkIQyMXvRjTXBvCvCcYHukLCiixWBxZ2yM1qAJbe SpoSWC+AHFUb4HYQSZayU4icFuydIeyhulWU2MC/JiaK2Kcs4qAmcEwCiR3Xo4sA +AdxNbNv30U8ueirvhxm5Wlij1/UIYz/K/yNAEaxNX/xiNk1BuVzmlBrJETAmcS2 2CqqbIcPqSpf2QFPFxOW1rJW/xer5v8= -----END CERTIFICATE-----Generated at Mon May 12 03:23:08 2025 by rpki-client