$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/dfff354e-32d5-3edc-9f59-69429128c70f.roa File: dfff354e-32d5-3edc-9f59-69429128c70f.roa (raw, json) Hash identifier: VMo8WHUB24PO1bOq49yoY0GVeF5jrfkNwlMxSMLZ5y8= Subject key identifier: 16:85:64:4E:40:40:9F:90:4E:8A:1F:6D:A9:F3:60:C3:85:1F:21:6F Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Certificate serial: 010D0C9F43285848F3911DD0AB141A213F3F3B00 Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/dfff354e-32d5-3edc-9f59-69429128c70f.roa Signing time: Fri 21 Feb 2025 02:00:39 +0000 ROA not before: Fri 21 Feb 2025 02:00:39 +0000 ROA not after: Thu 22 May 2025 01:00:39 +0000 asID: 396348 IP address blocks: 107.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:91:1d:d0:ab:14:1a:21:3f:3f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Validity Not Before: Feb 21 02:00:39 2025 GMT Not After : May 22 01:00:39 2025 GMT Subject: CN=aa2e73b6-2b2e-42a5-9a92-08ed0be3fa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:35:8d:86:0a:5a:47:ac:d0:ad:83:00:e5: e3:a4:5e:63:be:6a:cd:c2:8d:96:6f:26:9a:92:a0: fc:48:0d:e0:a4:07:ba:89:12:6d:31:63:78:9e:43: 09:73:fb:72:51:41:95:26:6a:bf:83:fe:b6:6f:25: f0:9a:1d:2d:f2:62:5c:51:09:a7:57:60:3d:d0:6d: 77:08:1f:82:95:c8:b0:33:22:8c:fc:bf:5e:9f:1d: 23:ad:3f:df:41:20:0d:a5:89:27:58:e5:4f:7c:14: 0b:81:a4:55:14:7f:ca:37:d4:a2:14:b2:51:d7:98: 79:3e:3b:b2:85:5d:85:8a:7d:5e:d6:d0:69:c8:c1: 1c:4e:3b:b6:14:7b:f9:56:4c:d6:42:85:a5:bd:1a: f4:2a:a8:ea:7c:5b:c6:e1:d0:56:c7:f2:9d:cd:9f: 94:7a:74:45:96:4b:7f:39:b4:a6:68:f4:f7:5e:5f: 53:5f:77:5f:3b:64:31:29:e9:bd:6e:69:be:d7:21: 26:9d:70:d8:da:de:02:99:34:4f:3e:db:ec:4d:90: 22:c3:89:c3:1c:de:b0:90:ca:5c:ee:08:81:e2:b2: 26:1f:43:cc:91:bd:66:df:7c:6c:99:b3:1e:d2:8a: 46:ad:95:06:03:14:1e:b6:95:3c:71:04:85:2e:fb: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:85:64:4E:40:40:9F:90:4E:8A:1F:6D:A9:F3:60:C3:85:1F:21:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/dfff354e-32d5-3edc-9f59-69429128c70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl X509v3 Authority Key Identifier: keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer sbgp-ipAddrBlock: critical IPv4: 107.191.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f3:b6:b5:86:8b:90:a9:10:7b:4d:84:14:59:5e:13:c6:bb: 8d:23:88:d0:82:5a:b0:00:ba:56:61:20:fe:5e:fb:8b:8d:a8: a9:51:a2:70:f0:2c:1b:78:e5:bc:aa:88:c9:be:35:d4:4e:23: 6f:ff:d3:f1:95:3b:7a:25:ff:fb:1b:86:cf:2f:33:74:87:19: 40:5b:88:f8:43:f7:38:50:e7:a1:bd:56:c4:85:7e:89:84:6c: 0f:99:8d:9c:cf:13:38:3c:55:a6:68:e6:16:2c:55:aa:ca:7e: 89:7e:0f:8f:36:3a:9d:e2:f3:15:fa:19:b3:ef:96:b5:55:e4: 8a:2d:13:04:45:9b:91:6b:7e:40:94:d4:50:66:0a:7f:62:15: bf:c9:21:f3:8a:2b:bd:35:60:e1:9e:2a:ab:49:81:c4:57:c7: d9:43:2a:21:e2:68:59:6f:9c:31:26:4d:ce:24:ab:8e:bb:fd: 8d:6c:6c:b4:0f:fe:6b:45:ce:48:df:1f:d3:28:4e:56:4e:4c: b1:13:d2:e3:a4:78:4e:95:dc:37:3b:4a:e9:3c:e4:1d:e2:28: 86:3f:e1:13:12:59:a0:00:07:12:13:f4:4a:91:0e:c5:bd:10: 48:5b:ea:36:72:b3:e0:80:e1:e2:ae:5f:e6:73:f5:e0:60:3f: 53:f0:15:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjzkR3QqxQaIT8/OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlNGM4ODEtMDM3Ny00OWY1LTlhZjUtNDEwZDMwZmI1 NTI3MB4XDTI1MDIyMTAyMDAzOVoXDTI1MDUyMjAxMDAzOVowLzEtMCsGA1UEAxMk YWEyZTczYjYtMmIyZS00MmE1LTlhOTItMDhlZDBiZTNmYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4s1jYYKWkes0K2DAOXjpF5jvmrNwo2Wbyaa kqD8SA3gpAe6iRJtMWN4nkMJc/tyUUGVJmq/g/62byXwmh0t8mJcUQmnV2A90G13 CB+ClciwMyKM/L9enx0jrT/fQSANpYknWOVPfBQLgaRVFH/KN9SiFLJR15h5Pjuy hV2Fin1e1tBpyMEcTju2FHv5VkzWQoWlvRr0KqjqfFvG4dBWx/KdzZ+UenRFlkt/ ObSmaPT3Xl9TX3dfO2QxKem9bmm+1yEmnXDY2t4CmTRPPtvsTZAiw4nDHN6wkMpc 7giB4rImH0PMkb1m33xsmbMe0opGrZUGAxQetpU8cQSFLvuDEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaFZE5AQJ+QToofbanzYMOFHyFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0 Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBkMzBmYjU1MjcvZGZmZjM1NGUtMzJkNS0z ZWRjLTlmNTktNjk0MjkxMjhjNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhlNGM4ODEtMDM3Ny00OWY1LTlh ZjUtNDEwZDMwZmI1NTI3L2Q4ZTRjODgxLTAzNzctNDlmNS05YWY1LTQxMGQzMGZi NTUyNy5jcmwwHwYDVR0jBBgwFoAU+GUVnd9PPVYksArZYvT7T4Li004wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBk MzBmYjU1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrztrWGi5CpEHtNhBRZXhPGu40jiNCCWrAAulZhIP5e+4uNqKlRonDw LBt45byqiMm+NdROI2//0/GVO3ol//sbhs8vM3SHGUBbiPhD9zhQ56G9VsSFfomE bA+ZjZzPEzg8VaZo5hYsVarKfol+D482Op3i8xX6GbPvlrVV5IotEwRFm5FrfkCU 1FBmCn9iFb/JIfOKK701YOGeKqtJgcRXx9lDKiHiaFlvnDEmTc4kq467/Y1sbLQP /mtFzkjfH9MoTlZOTLET0uOkeE6V3Dc7Suk85B3iKIY/4RMSWaAABxIT9EqRDsW9 EEhb6jZys+CA4eKuX+Zz9eBgP1PwFT4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:38:49 2025 by rpki-client