$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/eb737e95-e9f1-3d40-9cb0-6d271e945774.roa File: eb737e95-e9f1-3d40-9cb0-6d271e945774.roa (raw, json) Hash identifier: h/MU9YrXnTgVVHWGq8ZmxrYfAEoVR3YBS0YVEFMtC7s= Subject key identifier: 07:2C:B1:80:05:78:63:A5:9C:A6:F4:53:7D:4A:04:EB:1F:34:6E:88 Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F43285849BDDA2BCA997C5AEB27F63200 Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/eb737e95-e9f1-3d40-9cb0-6d271e945774.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 26207 IP address blocks: 107.190.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2b:ca:99:7c:5a:eb:27:f6:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=7a21196c-944b-4bbd-ba75-6d5101995b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:8b:a0:38:1f:9c:91:2f:97:f6:62:8d:f2: 71:30:4d:04:10:60:24:c5:93:d3:1f:7e:2e:cd:e0: e7:de:81:da:08:cd:ce:84:6c:ce:27:5f:3d:8a:19: 4f:0b:f3:8c:3c:8f:3c:4b:6b:af:50:52:43:98:3c: 50:01:c3:e0:5b:d5:5a:d2:26:2f:16:39:00:a9:18: dd:b6:2a:44:f0:17:06:6c:ef:e4:83:43:1d:90:45: 35:f8:b3:ba:66:af:97:e6:13:94:18:f6:38:58:4a: e2:d2:ca:80:b6:0c:fa:ea:b1:78:cc:11:a8:3a:56: f7:57:50:f5:7f:20:bf:3e:b3:cd:7f:f5:63:91:36: fd:fe:a1:03:79:85:7e:45:55:0a:6c:f3:c4:dd:0b: 50:93:71:1e:10:ce:45:43:ee:81:97:dc:1f:33:5a: 4c:76:3b:43:2e:85:1e:ef:fc:ed:f2:be:bc:4a:da: c5:7b:1e:27:b1:68:eb:6b:37:fd:83:5b:d3:6b:e2: 21:c4:e9:e0:12:5c:d3:d6:6a:71:f2:7b:21:c2:3e: c4:60:c7:a7:09:c8:15:d7:69:f4:14:cd:49:1d:87: c8:67:32:d2:b4:b1:4b:59:b7:4b:b7:eb:69:c3:ac: 8b:ce:51:18:ee:c7:ea:b2:98:79:86:f7:d5:1a:16: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2C:B1:80:05:78:63:A5:9C:A6:F4:53:7D:4A:04:EB:1F:34:6E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/eb737e95-e9f1-3d40-9cb0-6d271e945774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: 107.190.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:13:26:a4:ee:6d:8b:62:e7:b5:90:1a:7c:d4:ec:d6:c1:11: ae:f0:19:26:5d:a8:80:a8:a3:0c:55:7d:59:58:a8:c3:ba:39: 10:80:2c:a9:c7:53:ac:b5:39:f0:40:54:62:56:26:2c:10:4c: 60:31:60:fa:aa:b3:e8:b3:e7:13:5d:d2:11:22:33:19:b1:71: 2f:cb:f4:14:5f:39:70:79:0c:b8:78:2b:e5:68:a5:5a:9e:c6: 37:e7:ce:4e:0f:98:4a:8e:b0:c1:f5:ae:e0:0a:11:31:f7:3e: e7:19:a5:0e:c7:f9:17:f7:ba:78:1d:25:94:12:18:b8:75:9e: 12:eb:1b:fc:45:6f:fb:0c:1b:2b:75:fa:8a:18:ac:24:d5:b4: 76:64:f6:71:8d:71:62:a0:35:87:b3:0b:56:3a:41:bf:58:23: 95:f2:7a:44:b7:f1:58:6e:df:47:86:35:57:52:2c:25:10:09: 4d:a7:bf:84:a8:f4:39:e4:a3:16:a1:b7:36:ad:a0:b0:51:62: cd:45:13:1a:96:1b:7e:c2:60:9a:b9:b8:f2:3e:99:f6:3d:4a: a6:61:1c:5c:dd:a3:29:62:de:fd:f5:97:a1:da:d6:08:bc:d7: bf:f5:6f:79:84:36:7f:ed:43:8a:76:df:22:ab:40:d4:48:c3: b0:87:fa:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92ivKmXxa6yf2MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk N2EyMTE5NmMtOTQ0Yi00YmJkLWJhNzUtNmQ1MTAxOTk1YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5iLoDgfnJEvl/ZijfJxME0EEGAkxZPTH34u zeDn3oHaCM3OhGzOJ189ihlPC/OMPI88S2uvUFJDmDxQAcPgW9Va0iYvFjkAqRjd tipE8BcGbO/kg0MdkEU1+LO6Zq+X5hOUGPY4WEri0sqAtgz66rF4zBGoOlb3V1D1 fyC/PrPNf/VjkTb9/qEDeYV+RVUKbPPE3QtQk3EeEM5FQ+6Bl9wfM1pMdjtDLoUe 7/zt8r68StrFex4nsWjrazf9g1vTa+IhxOngElzT1mpx8nshwj7EYMenCcgV12n0 FM1JHYfIZzLStLFLWbdLt+tpw6yLzlEY7sfqsph5hvfVGhZc8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcssYAFeGOlnKb0U31KBOsfNG6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvZWI3MzdlOTUtZTlmMS0z ZDQwLTljYjAtNmQyNzFlOTQ1Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa77gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQTJqTubYti57WQGnzU7NbBEa7wGSZdqICoowxVfVlYqMO6ORCALKnH U6y1OfBAVGJWJiwQTGAxYPqqs+iz5xNd0hEiMxmxcS/L9BRfOXB5DLh4K+VopVqe xjfnzk4PmEqOsMH1ruAKETH3PucZpQ7H+Rf3ungdJZQSGLh1nhLrG/xFb/sMGyt1 +ooYrCTVtHZk9nGNcWKgNYezC1Y6Qb9YI5XyekS38Vhu30eGNVdSLCUQCU2nv4So 9DnkoxahtzatoLBRYs1FExqWG37CYJq5uPI+mfY9SqZhHFzdoyli3v31l6Ha1gi8 17/1b3mENn/tQ4p23yKrQNRIw7CH+po= -----END CERTIFICATE-----Generated at Sat May 10 09:45:38 2025 by rpki-client