$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa File: eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa (raw, json) Hash identifier: CkFPKEtjYPKdn5R3giVzWzcpgGSWvhKYV7zq88SfjKs= Subject key identifier: C3:36:18:8F:D7:CC:9D:68:CD:90:01:D9:89:EF:25:75:34:FC:79:48 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F432858499DBF383D21F66B66EF384D80 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 54905 IP address blocks: 23.250.128.0/17 maxlen: 17 107.166.128.0/17 maxlen: 17 162.220.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:38:3d:21:f6:6b:66:ef:38:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=2fbf48dd-a58d-4d11-852d-f42c76c04b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:26:38:c1:df:5a:95:28:3f:a2:70:f2:2a: 93:79:1a:ef:eb:60:da:dc:60:c3:c1:8e:7e:da:3f: 7e:d8:ee:17:c7:b2:44:0c:95:45:00:d5:09:71:80: 0a:c4:7d:06:a6:2d:3b:77:30:83:b4:2d:d5:0d:39: 22:a7:df:19:5c:73:3d:07:2f:85:6c:c6:0b:2e:d0: 7d:fb:9e:9d:7b:84:aa:4e:6b:b0:b4:98:35:7e:2e: d7:3b:f4:22:99:7e:2b:f6:f6:e1:ff:5a:f1:b6:8b: 02:87:21:1e:7f:69:ec:a0:7b:58:f5:de:6f:21:9c: 18:51:7f:12:84:19:a8:9f:c4:d5:67:a6:53:b7:d7: 81:ea:46:78:55:d0:50:da:77:db:ff:eb:84:7d:da: 01:f2:d5:fd:1a:43:ac:67:40:8d:36:d8:5e:f1:ec: 2c:1a:e3:53:7b:a3:06:a1:e8:21:1d:2a:6c:56:11: 77:44:14:54:96:55:61:65:34:86:73:3c:1b:8a:0f: f3:11:c7:64:21:2e:8e:b4:c0:92:c0:00:48:45:62: 50:d4:a8:b8:80:2b:d4:10:f9:0f:ac:7a:04:28:4a: be:d9:4b:e5:98:f3:30:03:0f:f6:8b:4e:98:68:d8: 98:8e:89:3d:be:a9:b3:7e:cf:50:b8:d4:c0:b0:d0: a1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:18:8F:D7:CC:9D:68:CD:90:01:D9:89:EF:25:75:34:FC:79:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/eda1bc41-e93e-31b7-b42d-0b8dff9ad8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.250.128.0/17 107.166.128.0/17 162.220.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:96:35:ea:d9:c2:30:31:a8:1e:5a:b2:11:ab:9b:e5:88:c8: 3f:14:d0:4d:24:8a:fe:ef:5b:da:9c:0a:2f:e2:81:2b:5d:53: 16:34:4d:18:04:3a:db:8f:6b:af:5f:6e:53:f5:4c:e1:b8:6d: 16:d3:d3:fe:01:d0:d4:9f:bf:24:11:d4:a7:1a:36:f0:6d:61: fc:dd:7e:5a:6f:65:9a:e1:0e:ba:51:75:61:1f:b8:83:a8:5c: 29:cb:37:dc:0b:a8:a7:96:bb:84:b6:d3:03:cd:3e:a6:ee:1e: 15:8e:39:ac:68:a8:58:55:71:c9:1b:c2:31:54:bd:53:10:1d: 3b:70:c3:ed:6a:39:a7:c5:d1:c1:c3:17:02:86:81:6c:aa:71: f0:43:9b:e1:13:04:7b:d3:ee:e2:94:7e:d4:df:56:06:b8:4d: 4a:0b:e1:a2:48:06:7f:8e:f2:f8:20:ec:c2:48:36:61:4d:ca: 21:6b:ac:6c:55:c2:d1:06:68:e5:6c:93:a8:b9:a9:17:a7:57: 35:9f:c3:65:24:8b:c3:1a:aa:33:08:e5:7b:f5:01:44:60:51: 9a:9d:a8:d5:9e:79:10:bf:6f:2e:62:a8:86:1a:4d:1c:6a:86: e9:46:8b:3a:ad:4e:19:5d:cc:75:a4:c2:f6:a8:dc:8d:48:97: b3:be:fa:70 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmdvzg9IfZrZu84TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MmZiZjQ4ZGQtYTU4ZC00ZDExLTg1MmQtZjQyYzc2YzA0YjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEkmOMHfWpUoP6Jw8iqTeRrv62Da3GDDwY5+ 2j9+2O4Xx7JEDJVFANUJcYAKxH0Gpi07dzCDtC3VDTkip98ZXHM9By+FbMYLLtB9 +56de4SqTmuwtJg1fi7XO/QimX4r9vbh/1rxtosChyEef2nsoHtY9d5vIZwYUX8S hBmon8TVZ6ZTt9eB6kZ4VdBQ2nfb/+uEfdoB8tX9GkOsZ0CNNthe8ewsGuNTe6MG oeghHSpsVhF3RBRUllVhZTSGczwbig/zEcdkIS6OtMCSwABIRWJQ1Ki4gCvUEPkP rHoEKEq+2UvlmPMwAw/2i06YaNiYjok9vqmzfs9QuNTAsNChGwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMM2GI/XzJ1ozZAB2YnvJXU0/HlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZWRhMWJjNDEtZTkzZS0z MWI3LWI0MmQtMGI4ZGZmOWFkOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHF/qAAwQH a6aAAwQDotwQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH2WNerZwjAxqB5ashGrm+WIyD8U0E0kiv7vW9qc Ci/igStdUxY0TRgEOtuPa69fblP1TOG4bRbT0/4B0NSfvyQR1KcaNvBtYfzdflpv ZZrhDrpRdWEfuIOoXCnLN9wLqKeWu4S20wPNPqbuHhWOOaxoqFhVcckbwjFUvVMQ HTtww+1qOafF0cHDFwKGgWyqcfBDm+ETBHvT7uKUftTfVga4TUoL4aJIBn+O8vgg 7MJINmFNyiFrrGxVwtEGaOVsk6i5qRenVzWfw2Uki8MaqjMI5Xv1AURgUZqdqNWe eRC/by5iqIYaTRxqhulGizqtThldzHWkwvao3I1Il7O++nA= -----END CERTIFICATE-----Generated at Tue May 6 19:59:27 2025 by rpki-client