$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa File: a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json) Hash identifier: VenNgxiWxHgFal3LpHm8KAxKRzkniaOQvQN4BVKNpTo= Subject key identifier: 19:7B:77:36:BA:9E:4A:F2:80:17:DD:55:2D:39:98:1C:1E:02:73:A0 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584981D45F6CDC7DE814B7645740 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 399195 IP address blocks: 107.149.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:5f:6c:dc:7d:e8:14:b7:64:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=4c3cb0d0-6b21-4402-be8a-61928eb60f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:8a:33:96:c0:3d:0d:2f:d9:42:62:08:26: 3f:89:a2:92:68:2d:77:a9:7f:37:4d:1d:dd:73:36: d4:cf:69:8c:87:8d:31:85:7e:cb:fe:74:d8:b3:72: 46:b4:28:92:75:46:ce:0a:ea:15:53:28:39:aa:8f: 09:f6:3c:28:d1:86:f3:cf:b5:a0:16:a6:86:e9:e2: 9c:39:81:7a:64:64:45:ff:0d:60:38:31:73:89:02: 42:65:d8:fd:78:05:7b:9e:9b:85:33:b2:86:0e:d2: 18:d2:ab:30:2f:ba:20:06:6a:74:64:bc:ec:8d:db: e9:c1:8f:fd:ab:75:ed:e3:8e:ef:0c:df:cb:9b:08: 6a:66:db:1a:2e:ca:4f:8f:13:2e:28:ce:a4:fd:f4: bb:f5:52:96:cc:d6:e0:5c:56:80:42:7d:9f:b0:4c: 54:ef:1b:c5:37:6e:72:8d:87:91:95:bf:c3:66:33: 25:47:57:66:a4:6e:98:51:8b:5f:23:a9:e4:53:dd: a3:0f:2f:97:9c:3d:bc:3b:e1:c1:1c:33:68:87:3f: 2c:99:17:56:26:d8:99:0a:fe:bf:ba:c1:db:c2:a1: 2e:f6:bc:40:45:f3:76:79:65:36:0a:be:be:02:cb: e2:0d:48:74:b0:ec:33:b2:4c:1e:3f:71:f3:5b:a3: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:77:36:BA:9E:4A:F2:80:17:DD:55:2D:39:98:1C:1E:02:73:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ac:11:dd:ad:8b:1c:52:19:0a:e6:6c:25:af:23:4e:fd:a3: 07:9a:3c:e2:bc:ec:82:83:64:7d:0c:d8:b8:69:9b:b9:67:80: 05:22:78:31:e0:d1:fd:8a:ad:03:e1:30:03:eb:78:21:89:07: 56:59:a7:98:8b:57:9c:56:56:f7:1e:81:8e:3b:94:8a:4a:4a: da:de:11:d5:27:72:59:a1:62:07:38:37:f4:5e:07:7e:00:03: b1:bb:be:c0:47:5e:84:99:9f:24:fb:29:c6:35:75:fc:35:2c: c0:c0:64:bd:0a:7c:3b:b9:96:54:c0:fd:36:c3:07:cf:5e:16: fb:c6:55:a3:40:e5:57:9e:3d:00:8c:0b:99:55:15:da:21:e2: a0:33:74:4a:87:3a:59:25:e7:8e:46:64:15:de:d5:23:8b:86: d2:a9:6b:af:13:1d:18:dc:41:1c:98:db:93:bd:e0:32:8b:4d: 42:62:3f:1e:78:ec:ef:39:f6:db:d5:ac:b2:23:ba:7d:45:24: 5a:78:43:f9:17:61:99:25:70:87:5c:ca:22:70:a8:97:fd:89: af:41:43:02:5c:15:3d:e0:2f:3c:99:ac:13:a9:93:8e:26:a9: 77:b5:65:9b:ae:a9:c8:a6:bc:71:2a:49:2f:70:23:88:33:e3: b6:a0:88:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1F9s3H3oFLdkV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NGMzY2IwZDAtNmIyMS00NDAyLWJlOGEtNjE5MjhlYjYwZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9mKM5bAPQ0v2UJiCCY/iaKSaC13qX83TR3d czbUz2mMh40xhX7L/nTYs3JGtCiSdUbOCuoVUyg5qo8J9jwo0Ybzz7WgFqaG6eKc OYF6ZGRF/w1gODFziQJCZdj9eAV7npuFM7KGDtIY0qswL7ogBmp0ZLzsjdvpwY/9 q3Xt447vDN/LmwhqZtsaLspPjxMuKM6k/fS79VKWzNbgXFaAQn2fsExU7xvFN25y jYeRlb/DZjMlR1dmpG6YUYtfI6nkU92jDy+XnD28O+HBHDNohz8smRdWJtiZCv6/ usHbwqEu9rxARfN2eWU2Cr6+AsviDUh0sOwzskweP3HzW6OQFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl7dza6nkrygBfdVS05mBweAnOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTNhY2M4NzUtYTUwOS0z YjdhLWIxYmYtOTk2ZDM2MmUyZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKsEd2tixxSGQrmbCWvI079oweaPOK87IKDZH0M2Lhpm7lngAUieDHg 0f2KrQPhMAPreCGJB1ZZp5iLV5xWVvcegY47lIpKStreEdUnclmhYgc4N/ReB34A A7G7vsBHXoSZnyT7KcY1dfw1LMDAZL0KfDu5llTA/TbDB89eFvvGVaNA5VeePQCM C5lVFdoh4qAzdEqHOlkl545GZBXe1SOLhtKpa68THRjcQRyY25O94DKLTUJiPx54 7O859tvVrLIjun1FJFp4Q/kXYZklcIdcyiJwqJf9ia9BQwJcFT3gLzyZrBOpk44m qXe1ZZuuqcimvHEqSS9wI4gz47agiLY= -----END CERTIFICATE-----Generated at Sat May 10 19:45:19 2025 by rpki-client