$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa File: f9afc641-80e9-35b5-a87c-dd68d73febac.roa (raw, json) Hash identifier: b5my8VC6Kw+yGrHjKnax0WtGW5pVgfsKqS72WFsQ3M4= Subject key identifier: C4:C6:AB:E5:94:68:2C:7F:ED:E9:0C:A6:C3:7E:33:11:8A:DA:CD:D3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849C904F04DF4BEA25DC4904098 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 137443 IP address blocks: 107.151.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f0:4d:f4:be:a2:5d:c4:90:40:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=392cc595-3991-43ae-86d3-e3d134a06e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:32:a7:cd:af:e2:19:af:3d:69:ec:72:55: d6:be:4b:fe:33:9d:79:f2:fc:cc:62:3c:e4:46:e5: be:01:43:da:d9:60:6b:79:96:23:0c:3e:4a:33:1f: 53:06:3c:5d:0e:f2:2e:46:71:24:f8:be:b6:da:43: 26:13:54:09:50:5a:4c:4a:8c:8b:4e:26:66:00:85: fb:16:00:98:a4:84:43:ca:4f:1d:fe:bf:d1:f1:3e: 83:c4:d4:59:f4:90:fe:cd:ac:23:1e:84:cb:51:04: bc:fc:c4:4d:60:a6:2f:eb:85:a9:e7:23:2d:64:90: 3a:ce:d3:79:43:bd:dd:88:ef:a4:84:60:97:99:f9: 2a:0d:af:aa:8b:f6:e5:0d:b6:5a:f3:dd:3a:72:e2: c5:e9:ff:5d:f3:fe:a0:ec:21:a1:5c:8a:66:8b:01: 8e:19:bb:71:5f:5a:4f:a4:87:0f:f2:a0:5c:0f:cf: b8:ff:2f:77:f7:f0:fd:03:3e:0b:3f:29:ea:77:84: 92:bd:55:af:7e:94:8f:4a:97:a3:22:9c:2e:14:1c: 7b:08:2c:95:87:b6:3e:15:b9:2d:e3:8a:17:8d:d1: 2e:96:a2:68:b1:63:88:64:5b:84:dd:cd:44:ed:75: cf:7d:4a:4a:2b:4d:5a:22:b1:bf:f4:f7:2a:47:0f: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C6:AB:E5:94:68:2C:7F:ED:E9:0C:A6:C3:7E:33:11:8A:DA:CD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f9afc641-80e9-35b5-a87c-dd68d73febac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ac:4a:e6:96:7b:ab:b5:52:45:0b:c5:a2:3e:d5:87:d2:64: 19:54:92:26:03:40:37:df:07:68:5d:f8:c1:50:f4:d5:ca:0b: 40:cc:60:62:9c:44:f8:76:1d:42:b2:0a:6b:22:3c:6e:ee:d3: fc:08:df:3b:4a:11:60:f5:98:20:3d:34:c4:17:52:5a:5e:57: c8:18:1d:a5:8a:2a:77:56:af:93:e6:36:92:35:40:31:b2:5e: 5a:af:ee:0e:dd:2e:99:98:17:4c:37:6c:18:0a:21:eb:d9:a7: 70:8d:ee:c7:a6:b3:4a:9b:4f:c0:6f:f6:ae:f2:ab:47:73:4d: 06:45:8d:0a:2d:ca:94:be:8b:dc:c7:17:be:50:c6:4e:29:03: 8b:46:1d:6b:96:25:d8:df:0c:55:16:f8:e4:eb:0d:5a:fa:9a: ee:13:dc:d3:d4:52:9d:22:8a:6a:ed:7d:4b:28:f3:ed:b7:ec: 4d:fa:7b:e3:7b:3e:b3:7e:2a:fe:d7:23:67:a6:6d:f7:94:f7: 83:0d:d4:77:80:55:21:09:04:54:9f:05:6c:4e:cf:32:d2:52: 0b:ce:ed:2e:ff:b2:56:ae:43:06:49:fe:59:2f:98:09:3d:50: 31:8c:d1:0a:40:8e:36:0f:8f:1b:7e:5c:a0:59:1b:8a:e8:c0: f6:0e:fe:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPBN9L6iXcSQQJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MzkyY2M1OTUtMzk5MS00M2FlLTg2ZDMtZTNkMTM0YTA2ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh64yp82v4hmvPWnsclXWvkv+M5158vzMYjzk RuW+AUPa2WBreZYjDD5KMx9TBjxdDvIuRnEk+L622kMmE1QJUFpMSoyLTiZmAIX7 FgCYpIRDyk8d/r/R8T6DxNRZ9JD+zawjHoTLUQS8/MRNYKYv64Wp5yMtZJA6ztN5 Q73diO+khGCXmfkqDa+qi/blDbZa8906cuLF6f9d8/6g7CGhXIpmiwGOGbtxX1pP pIcP8qBcD8+4/y939/D9Az4LPynqd4SSvVWvfpSPSpejIpwuFBx7CCyVh7Y+Fbkt 44oXjdEulqJosWOIZFuE3c1E7XXPfUpKK01aIrG/9PcqRw+vRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTGq+WUaCx/7ekMpsN+MxGK2s3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZjlhZmM2NDEtODBlOS0z NWI1LWE4N2MtZGQ2OGQ3M2ZlYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5fHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqsSuaWe6u1UkULxaI+1YfSZBlUkiYDQDffB2hd+MFQ9NXKC0DMYGKc RPh2HUKyCmsiPG7u0/wI3ztKEWD1mCA9NMQXUlpeV8gYHaWKKndWr5PmNpI1QDGy Xlqv7g7dLpmYF0w3bBgKIevZp3CN7sems0qbT8Bv9q7yq0dzTQZFjQotypS+i9zH F75Qxk4pA4tGHWuWJdjfDFUW+OTrDVr6mu4T3NPUUp0iimrtfUso8+237E36e+N7 PrN+Kv7XI2embfeU94MN1HeAVSEJBFSfBWxOzzLSUgvO7S7/slauQwZJ/lkvmAk9 UDGM0QpAjjYPjxt+XKBZG4rowPYO/tc= -----END CERTIFICATE-----Generated at Mon May 12 11:07:38 2025 by rpki-client