$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa File: 983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa (raw, json) Hash identifier: /ZeH+FLUVcusq5Y5PHvA1eXoU9ksHQDBANb3c21ewaI= Subject key identifier: 5B:BC:D6:55:95:0D:22:D0:C9:AF:7B:17:1C:12:4C:0C:DD:32:C5:26 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849AD1A0FA99623C8D390787500 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 137547 IP address blocks: 107.151.238.0/24 maxlen: 24 107.151.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0f:a9:96:23:c8:d3:90:78:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b62e4da1-1a26-415a-98f4-cbaa6824f512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:ed:1d:4f:31:39:9e:4c:87:05:b3:13:74: c5:36:94:09:f3:9b:a2:93:50:71:b6:49:b2:55:65: 33:20:39:4a:d3:c3:4b:a9:53:a1:d5:3d:72:f3:b5: 23:fa:05:81:c0:2b:6d:7f:cc:93:e1:70:1c:c8:c8: 5a:65:99:96:f3:84:a0:07:24:3e:86:1d:4d:30:e7: 8c:9e:48:93:1d:a6:2b:39:c7:d3:8b:04:e4:49:bc: 89:54:fe:c8:8e:a6:de:50:9d:c0:0e:40:0f:a6:b2: 40:b0:71:e7:55:12:37:be:cb:44:f3:27:5c:3a:9a: 82:8d:b1:d1:f0:1f:ee:ba:19:cd:7e:04:59:84:d2: 00:8c:4c:df:6a:0a:2e:c6:93:da:fe:29:37:99:e8: d1:54:8c:21:82:7f:50:5a:25:73:25:61:2a:e0:a0: bf:3a:41:35:07:30:43:98:ce:e4:06:4c:3f:a9:53: 30:7d:82:c4:a4:5f:22:54:be:0f:78:95:62:60:07: 0f:f4:60:d4:0c:d9:4a:16:61:d9:e5:8a:01:50:87: cb:b8:4e:48:20:8c:69:7d:ca:ce:56:c5:09:d0:c8: 6e:54:91:c5:37:b2:74:1b:cd:2d:c6:70:8d:45:a6: aa:88:7b:e8:0e:63:db:ec:b7:be:8d:5a:1b:5f:03: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:D6:55:95:0D:22:D0:C9:AF:7B:17:1C:12:4C:0C:DD:32:C5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/983e1c21-3ae0-3a43-b270-f4b2e4f53dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:62:fe:54:4f:4a:49:a8:52:91:63:4a:04:05:5b:05:e2:84: 44:37:e5:b1:f0:72:8a:02:a4:85:59:6d:a7:69:2a:7c:7b:35: 50:8a:91:ae:95:0a:69:19:81:a1:06:09:e4:f3:02:64:db:b4: 26:fc:a7:d4:a5:36:83:2a:46:84:02:c4:51:78:a5:08:d1:14: 1e:09:53:28:a8:e7:d8:37:b7:4e:ed:07:ff:9d:03:36:2b:20: 0c:d0:de:a6:42:10:6a:98:ea:99:0c:5c:ea:bd:e8:5d:2d:50: 7f:24:cd:f8:1e:a0:04:96:a5:30:07:53:0c:a3:57:2c:e0:14: 09:0e:db:b7:34:1b:22:e6:16:f3:3d:1a:ca:19:23:d7:81:8e: 65:bd:68:3f:e1:a2:fb:67:47:74:a3:82:e4:9b:2e:25:59:57: aa:f6:67:58:43:15:7b:5a:f8:ac:57:d7:4d:44:f0:2c:b2:95: 4b:21:6c:a0:8e:ce:bd:3f:9a:b5:4c:ad:d1:0e:65:75:c0:63: 15:94:2f:dd:b9:05:a4:a7:cc:04:8b:90:49:ce:da:82:e9:90: d2:ab:ad:4f:35:36:c1:b3:10:6b:ec:f2:3d:ca:8a:c8:39:b8: 30:61:26:01:1f:c2:9b:0c:8b:53:5a:71:d0:3a:b0:c7:3e:94: 4f:c0:9e:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGg+pliPI05B4dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjYyZTRkYTEtMWEyNi00MTVhLTk4ZjQtY2JhYTY4MjRmNTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozvtHU8xOZ5MhwWzE3TFNpQJ85uik1Bxtkmy VWUzIDlK08NLqVOh1T1y87Uj+gWBwCttf8yT4XAcyMhaZZmW84SgByQ+hh1NMOeM nkiTHaYrOcfTiwTkSbyJVP7IjqbeUJ3ADkAPprJAsHHnVRI3vstE8ydcOpqCjbHR 8B/uuhnNfgRZhNIAjEzfagouxpPa/ik3mejRVIwhgn9QWiVzJWEq4KC/OkE1BzBD mM7kBkw/qVMwfYLEpF8iVL4PeJViYAcP9GDUDNlKFmHZ5YoBUIfLuE5IIIxpfcrO VsUJ0MhuVJHFN7J0G80txnCNRaaqiHvoDmPb7Le+jVobXwPBLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu81lWVDSLQya97FxwSTAzdMsUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvOTgzZTFjMjEtM2FlMC0z YTQzLWIyNzAtZjRiMmU0ZjUzZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhi/lRPSkmoUpFjSgQFWwXihEQ35bHwcooCpIVZbadpKnx7NVCKka6V CmkZgaEGCeTzAmTbtCb8p9SlNoMqRoQCxFF4pQjRFB4JUyio59g3t07tB/+dAzYr IAzQ3qZCEGqY6pkMXOq96F0tUH8kzfgeoASWpTAHUwyjVyzgFAkO27c0GyLmFvM9 GsoZI9eBjmW9aD/hovtnR3SjguSbLiVZV6r2Z1hDFXta+KxX101E8CyylUshbKCO zr0/mrVMrdEOZXXAYxWUL925BaSnzASLkEnO2oLpkNKrrU81NsGzEGvs8j3Kisg5 uDBhJgEfwpsMi1NacdA6sMc+lE/AniM= -----END CERTIFICATE-----Generated at Sun May 11 16:51:57 2025 by rpki-client