$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/7a5a97f7-5c55-36bc-9680-902b92b0ce3b.roa File: 7a5a97f7-5c55-36bc-9680-902b92b0ce3b.roa (raw, json) Hash identifier: nMaFG6KyIW0X7if9mA4wKWAf1ohOy2XZOKNucVvwr8A= Subject key identifier: 0E:EE:62:26:ED:72:99:DA:CE:05:D8:4B:EB:C2:A8:24:BA:1F:B7:35 Certificate issuer: /CN=480e68d2-5883-4233-9f17-992a2ca71e2b Certificate serial: 010D0C9F43285849B1636EC0F01FBA1FBCCFEF00 Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/7a5a97f7-5c55-36bc-9680-902b92b0ce3b.roa Signing time: Wed 30 Apr 2025 01:52:15 +0000 ROA not before: Wed 30 Apr 2025 01:52:15 +0000 ROA not after: Tue 29 Jul 2025 01:52:15 +0000 asID: 33559 IP address blocks: 107.155.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:63:6e:c0:f0:1f:ba:1f:bc:cf:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b Validity Not Before: Apr 30 01:52:15 2025 GMT Not After : Jul 29 01:52:15 2025 GMT Subject: CN=41d9be80-0fc7-4b18-b1cd-aaa495eff60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:ad:37:19:4a:59:a1:98:f5:42:24:dd:a1: cc:22:a6:d7:f8:7b:cf:80:6f:16:c1:07:95:bf:40: ce:81:da:38:20:ab:10:0b:b9:02:29:16:0e:40:0c: 38:a1:70:64:ec:f0:81:e6:5d:d8:e8:dd:39:ab:e9: a0:7d:c0:cb:f5:06:71:ad:a6:cf:e5:5b:b3:96:94: 42:1b:48:d6:14:e5:fa:fc:d4:61:2f:89:61:21:6a: 9d:13:26:ee:7d:52:e9:ec:5e:4d:18:ff:de:24:fc: b5:21:c9:00:e2:0b:9f:38:1d:bc:2e:e9:00:79:a5: 94:4b:86:de:40:83:29:5f:35:23:7a:14:e3:33:a2: a0:5c:d3:d5:c6:97:d7:53:c7:88:78:f9:19:69:8d: ba:42:23:43:90:bf:13:e1:8c:bb:d0:33:61:53:07: 3d:de:f8:67:15:cd:a1:f7:07:64:09:47:55:dd:73: 41:4b:e3:fa:41:d9:bb:24:50:b6:3f:b1:58:1c:ca: 62:55:06:29:f3:89:e3:72:00:ad:18:0d:04:2c:9e: 62:a5:32:35:30:76:e6:c6:c8:67:32:7f:d2:05:d5: 13:8e:e9:f6:3e:dd:ca:7c:8f:4c:f4:44:42:ed:a9: e3:44:bd:ef:ce:52:63:e4:6d:a3:50:c5:a7:3d:70: 3b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EE:62:26:ED:72:99:DA:CE:05:D8:4B:EB:C2:A8:24:BA:1F:B7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/7a5a97f7-5c55-36bc-9680-902b92b0ce3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl X509v3 Authority Key Identifier: keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer sbgp-ipAddrBlock: critical IPv4: 107.155.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:0b:c7:a4:06:2d:77:e2:f7:a0:83:4e:0e:20:6f:c5:3f:6e: f6:0b:c6:b9:6e:04:90:c4:ba:cf:2e:6c:96:fd:8c:d5:dc:da: c5:87:63:2b:33:59:c4:54:11:60:f2:0e:85:ec:69:61:13:a7: 33:1e:61:11:38:e0:18:91:c9:d9:54:c5:83:ac:a6:08:77:af: c6:83:83:7a:fd:69:ea:db:89:3b:88:ab:c6:10:0e:90:50:02: 95:0e:76:1f:ba:73:51:dc:09:9c:d0:8c:e6:b2:13:b0:ec:7a: 30:7e:4e:32:c0:e0:2f:0e:4c:37:bf:73:dc:cf:a7:02:c9:4f: 8f:f9:bc:5a:7c:d6:76:d3:16:aa:67:1e:90:85:cb:2d:0f:68: 1e:07:c3:0b:72:89:d5:f0:75:09:21:3c:35:55:a9:89:30:38: 7c:e8:58:79:24:11:97:b3:06:6f:65:e0:94:27:e8:c1:bf:e1: 0c:4b:66:0d:73:7a:05:ff:ef:e9:42:77:b2:09:e2:b7:e3:b1: 35:e9:ed:c3:57:a8:bb:0a:dc:55:54:cd:d9:1e:42:f3:a9:fc: cc:ad:00:1f:70:b6:59:c1:bf:cf:70:30:7a:86:90:63:54:78: 44:ee:1e:a4:42:79:f3:e3:8e:19:0f:45:13:e1:95:18:2d:2e: c4:d7:5f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxY27A8B+6H7zP7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgwZTY4ZDItNTg4My00MjMzLTlmMTctOTkyYTJjYTcx ZTJiMB4XDTI1MDQzMDAxNTIxNVoXDTI1MDcyOTAxNTIxNVowLzEtMCsGA1UEAxMk NDFkOWJlODAtMGZjNy00YjE4LWIxY2QtYWFhNDk1ZWZmNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6utNxlKWaGY9UIk3aHMIqbX+HvPgG8WwQeV v0DOgdo4IKsQC7kCKRYOQAw4oXBk7PCB5l3Y6N05q+mgfcDL9QZxrabP5VuzlpRC G0jWFOX6/NRhL4lhIWqdEybufVLp7F5NGP/eJPy1IckA4gufOB28LukAeaWUS4be QIMpXzUjehTjM6KgXNPVxpfXU8eIePkZaY26QiNDkL8T4Yy70DNhUwc93vhnFc2h 9wdkCUdV3XNBS+P6Qdm7JFC2P7FYHMpiVQYp84njcgCtGA0ELJ5ipTI1MHbmxshn Mn/SBdUTjun2Pt3KfI9M9ERC7anjRL3vzlJj5G2jUMWnPXA7zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7uYibtcpnazgXYS+vCqCS6H7c1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBl NjhkMi01ODgzLTQyMzMtOWYxNy05OTJhMmNhNzFlMmIvN2E1YTk3ZjctNWM1NS0z NmJjLTk2ODAtOTAyYjkyYjBjZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgwZTY4ZDItNTg4My00MjMzLTlm MTctOTkyYTJjYTcxZTJiLzQ4MGU2OGQyLTU4ODMtNDIzMy05ZjE3LTk5MmEyY2E3 MWUyYi5jcmwwHwYDVR0jBBgwFoAUJpseaAPDCWnjiuWVpz8zM2aKXwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBlNjhkMi01ODgzLTQyMzMtOWYxNy05OTJh MmNhNzFlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5uCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwLx6QGLXfi96CDTg4gb8U/bvYLxrluBJDEus8ubJb9jNXc2sWHYysz WcRUEWDyDoXsaWETpzMeYRE44BiRydlUxYOspgh3r8aDg3r9aerbiTuIq8YQDpBQ ApUOdh+6c1HcCZzQjOayE7DsejB+TjLA4C8OTDe/c9zPpwLJT4/5vFp81nbTFqpn HpCFyy0PaB4HwwtyidXwdQkhPDVVqYkwOHzoWHkkEZezBm9l4JQn6MG/4QxLZg1z egX/7+lCd7IJ4rfjsTXp7cNXqLsK3FVUzdkeQvOp/MytAB9wtlnBv89wMHqGkGNU eETuHqRCefPjjhkPRRPhlRgtLsTXX1U= -----END CERTIFICATE-----Generated at Fri May 9 10:46:47 2025 by rpki-client