$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa File: fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa (raw, json) Hash identifier: rVGM0Cz2trhWU6BX2q5V3rjfjtV8y+W8Tv4tAP3hVz4= Subject key identifier: 5C:50:6B:A8:53:BC:19:23:7F:E1:D9:2B:22:EC:F3:AE:9D:1A:48:53 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F43285849C0A4EE18F822728A74785B80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 134365 IP address blocks: 107.151.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ee:18:f8:22:72:8a:74:78:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=b1abd7d1-bca9-4c85-aeb1-122742a358a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:58:39:56:cb:53:cc:ce:81:fe:33:c5:1b:9b: 11:94:3c:65:8b:e3:ab:3a:28:a2:ed:76:b7:dc:c9: 0c:4c:dd:d7:3e:c0:3a:dd:d5:c2:4c:e7:58:b0:9f: 32:f5:c0:5d:d1:45:0d:61:db:57:25:2c:c2:2f:03: 46:5a:0d:20:af:08:a3:81:e8:63:91:19:a4:90:c4: 43:43:60:f7:1c:d8:fe:97:84:55:04:6d:52:de:18: 0b:ea:f8:40:d8:ff:54:bc:92:43:66:2a:1a:ce:6b: 07:4a:2a:ff:85:e7:03:fd:c7:c6:27:4a:2d:c2:ea: 7d:c0:bf:95:44:e5:97:0e:6f:3d:35:5e:d3:e3:d7: 3f:a5:f4:28:ae:f4:5b:8f:16:4a:86:b6:23:13:44: a6:b9:a4:df:97:b2:41:c2:0c:3a:ea:16:8e:43:88: 58:b9:3e:52:26:df:89:64:47:a4:88:80:d7:85:51: bc:46:7d:cb:da:39:1f:98:37:25:71:b4:be:35:b9: ce:9f:75:73:54:0d:9f:9b:db:ad:38:28:eb:20:3b: 2e:cd:3c:3d:c0:64:9d:ec:f8:1a:93:8b:08:6f:74: 08:7c:c2:49:a2:6c:17:f2:9e:46:5f:d5:0e:0b:37: b3:94:76:67:31:4b:11:c3:8a:a0:ad:32:db:af:22: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:50:6B:A8:53:BC:19:23:7F:E1:D9:2B:22:EC:F3:AE:9D:1A:48:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fc93fe7b-dc7f-3da9-96b6-1838a9fe858c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:34:a0:a4:ee:b4:cf:00:75:47:e2:57:4f:36:d2:59:9d: ea:c9:e5:21:11:1d:8b:2f:0c:a9:ad:a8:91:4c:5b:6f:4f:d2: 1c:c7:1a:64:d1:a4:b1:6f:98:4a:7e:ca:a0:59:f2:48:03:e9: 0c:4d:d1:c5:6d:78:5e:9d:49:aa:68:b0:bc:b0:90:96:70:bf: 79:11:1c:d6:22:98:15:ab:f1:5d:7e:d9:80:c9:f8:f7:56:16: 84:d1:ec:91:f1:ce:8c:05:a6:1a:61:cf:06:1a:93:81:d9:aa: f2:77:91:72:51:17:e0:ee:ca:df:17:ad:f9:41:0e:38:e7:63: 03:45:cb:27:82:9a:1f:f8:07:b1:bf:54:24:de:40:66:1b:9a: fc:fb:0b:a0:40:06:5d:d0:4d:03:ea:8f:96:19:78:7e:1f:2c: d5:e2:dd:b5:fc:9b:4f:9b:a3:ba:fa:d9:02:81:db:84:98:40: 5a:db:6c:d6:20:a8:4f:35:6f:c5:7a:ea:93:fb:1c:12:66:13: 56:2c:0d:f3:04:6a:66:4b:53:58:64:d4:c0:15:e9:fb:b2:ba: 79:33:23:a7:72:d8:7b:02:54:51:3d:88:75:bd:d4:33:a3:c6: 50:a3:b5:9a:b4:a2:39:0b:66:fe:33:a6:b9:4e:3e:65:1f:54: 24:6d:47:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApO4Y+CJyinR4W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk YjFhYmQ3ZDEtYmNhOS00Yzg1LWFlYjEtMTIyNzQyYTM1OGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fg5VstTzM6B/jPFG5sRlDxli+OrOiii7Xa3 3MkMTN3XPsA63dXCTOdYsJ8y9cBd0UUNYdtXJSzCLwNGWg0grwijgehjkRmkkMRD Q2D3HNj+l4RVBG1S3hgL6vhA2P9UvJJDZioazmsHSir/hecD/cfGJ0otwup9wL+V ROWXDm89NV7T49c/pfQorvRbjxZKhrYjE0SmuaTfl7JBwgw66haOQ4hYuT5SJt+J ZEekiIDXhVG8Rn3L2jkfmDclcbS+NbnOn3VzVA2fm9utOCjrIDsuzTw9wGSd7Pga k4sIb3QIfMJJomwX8p5GX9UOCzezlHZnMUsRw4qgrTLbryL5nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxQa6hTvBkjf+HZKyLs866dGkhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZmM5M2ZlN2ItZGM3Zi0z ZGE5LTk2YjYtMTgzOGE5ZmU4NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOPNKCk7rTPAHVH4ldPNtJZnerJ5SERHYsvDKmtqJFMW29P0hzHGmTR pLFvmEp+yqBZ8kgD6QxN0cVteF6dSaposLywkJZwv3kRHNYimBWr8V1+2YDJ+PdW FoTR7JHxzowFphphzwYak4HZqvJ3kXJRF+Duyt8XrflBDjjnYwNFyyeCmh/4B7G/ VCTeQGYbmvz7C6BABl3QTQPqj5YZeH4fLNXi3bX8m0+bo7r62QKB24SYQFrbbNYg qE81b8V66pP7HBJmE1YsDfMEamZLU1hk1MAV6fuyunkzI6dy2HsCVFE9iHW91DOj xlCjtZq0ojkLZv4zprlOPmUfVCRtR5c= -----END CERTIFICATE-----Generated at Tue May 6 13:19:07 2025 by rpki-client