$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/0f046c5e-bf90-3da1-89ac-53a67a0d8025.roa File: 0f046c5e-bf90-3da1-89ac-53a67a0d8025.roa (raw, json) Hash identifier: A2ydcIBbUy5+B6Stb89E+Y+N6uweXCuRZQsKT6aOZSQ= Subject key identifier: 56:A1:60:68:91:3D:C4:0F:58:A1:48:74:D9:DB:A1:C9:19:DB:02:E4 Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F432858499F6B382C46CDE59673790A20 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/0f046c5e-bf90-3da1-89ac-53a67a0d8025.roa Signing time: Wed 23 Apr 2025 15:23:23 +0000 ROA not before: Wed 23 Apr 2025 15:23:23 +0000 ROA not after: Tue 22 Jul 2025 15:23:23 +0000 asID: 201106 IP address blocks: 107.191.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:6b:38:2c:46:cd:e5:96:73:79:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Apr 23 15:23:23 2025 GMT Not After : Jul 22 15:23:23 2025 GMT Subject: CN=dd81d0f4-0adc-48ee-8ba5-70664315388a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:de:9a:a7:3e:f3:c3:f1:ae:6d:b9:9e:cc: 50:d5:67:67:a2:d9:8d:e1:5e:e0:e4:cd:e3:a8:25: 77:5b:4b:a7:cc:43:9c:00:95:26:28:64:05:3e:cd: c4:8d:7d:d9:c8:b7:a6:c6:45:91:d2:89:62:c2:f7: 20:89:48:ae:b4:7a:82:19:ee:a4:a2:7e:e4:57:7f: d3:62:91:eb:f9:19:16:fe:9d:2b:d3:07:74:45:17: 56:e4:66:a9:59:25:93:0d:6b:b2:f0:d1:ff:9b:96: 67:2a:2d:2e:90:14:d6:f8:c8:76:3f:31:6c:e9:9e: a7:77:a2:49:05:e6:94:4e:27:47:37:30:50:4a:4c: 88:eb:2f:bb:1d:9a:23:b5:bc:ee:8a:69:b7:2a:08: b9:88:d3:e8:3b:af:af:f9:c7:a8:a7:c0:06:ce:43: 6c:c6:97:73:5f:96:59:12:d3:a6:23:dc:ec:28:04: bc:c7:6a:11:22:9a:b5:6f:fa:97:4a:e2:33:d6:f2: 23:ba:90:50:c8:e5:1a:8f:ea:18:a4:b5:0f:ed:2c: 49:2c:99:2f:93:4b:26:2b:33:e9:08:7e:02:ea:8a: 3b:17:e8:0e:11:c6:0f:d3:5d:78:58:d7:6f:48:5f: 60:f3:58:da:6c:55:97:5c:04:c2:ce:0e:f1:a4:ad: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A1:60:68:91:3D:C4:0F:58:A1:48:74:D9:DB:A1:C9:19:DB:02:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/0f046c5e-bf90-3da1-89ac-53a67a0d8025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 107.191.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a1:94:79:49:3a:4e:be:d1:14:30:65:33:d7:57:57:7b:7c: ee:23:14:84:fc:51:ba:17:f0:48:31:0f:c9:8c:83:cf:23:8f: 9a:20:59:94:b1:7e:ff:c3:f8:e5:d7:41:d7:71:ec:9b:fc:a3: ad:f8:ea:b1:9f:f5:ce:7b:46:e4:e9:b2:5d:08:9a:c5:0c:07: c9:a7:4d:1c:5c:eb:c7:82:9f:5e:5b:33:12:bb:1c:59:df:80: 3e:7c:f2:2b:d7:78:d6:2b:3c:60:84:c3:ce:d0:a5:2f:64:a6: fd:7e:64:ee:18:0b:4d:6d:74:32:56:f9:b3:24:8b:e8:17:7e: cc:4b:e1:9f:8e:87:72:c8:33:04:4b:41:97:c4:62:c6:26:29: 37:3a:32:09:88:71:c2:02:79:81:69:8b:47:e8:09:8b:fe:54: 84:9d:ee:8c:64:ef:4e:b6:64:4d:67:d5:01:f0:1c:d4:3b:21: 55:4c:eb:40:f5:54:a2:2f:b4:c9:76:bc:9b:03:44:5b:0b:80: d0:5a:78:40:e0:3f:29:38:41:19:7e:4a:d0:2f:9c:23:e7:4f: 2b:9c:ce:02:a2:f7:d0:a1:46:46:b7:1e:e1:c6:f5:c2:07:f0: aa:cb:0d:1d:76:79:7d:30:97:60:90:3a:f3:68:63:13:c2:78: 9b:48:8c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfazgsRs3llnN5CiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI1MDQyMzE1MjMyM1oXDTI1MDcyMjE1MjMyM1owLzEtMCsGA1UEAxMk ZGQ4MWQwZjQtMGFkYy00OGVlLThiYTUtNzA2NjQzMTUzODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOnemqc+88Pxrm25nsxQ1WdnotmN4V7g5M3j qCV3W0unzEOcAJUmKGQFPs3EjX3ZyLemxkWR0oliwvcgiUiutHqCGe6kon7kV3/T YpHr+RkW/p0r0wd0RRdW5GapWSWTDWuy8NH/m5ZnKi0ukBTW+Mh2PzFs6Z6nd6JJ BeaUTidHNzBQSkyI6y+7HZojtbzuimm3Kgi5iNPoO6+v+ceop8AGzkNsxpdzX5ZZ EtOmI9zsKAS8x2oRIpq1b/qXSuIz1vIjupBQyOUaj+oYpLUP7SxJLJkvk0smKzPp CH4C6oo7F+gOEcYP0114WNdvSF9g81jabFWXXATCzg7xpK2SiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFahYGiRPcQPWKFIdNnbockZ2wLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvMGYwNDZjNWUtYmY5MC0z ZGExLTg5YWMtNTNhNjdhMGQ4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqhlHlJOk6+0RQwZTPXV1d7fO4jFIT8UboX8EgxD8mMg88jj5ogWZSx fv/D+OXXQddx7Jv8o6346rGf9c57RuTpsl0ImsUMB8mnTRxc68eCn15bMxK7HFnf gD588ivXeNYrPGCEw87QpS9kpv1+ZO4YC01tdDJW+bMki+gXfsxL4Z+Oh3LIMwRL QZfEYsYmKTc6MgmIccICeYFpi0foCYv+VISd7oxk7062ZE1n1QHwHNQ7IVVM60D1 VKIvtMl2vJsDRFsLgNBaeEDgPyk4QRl+StAvnCPnTyuczgKi99ChRka3HuHG9cIH 8KrLDR12eX0wl2CQOvNoYxPCeJtIjLs= -----END CERTIFICATE-----Generated at Mon May 12 16:08:23 2025 by rpki-client