$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bc015f38-470c-35a2-a871-e2816ec1eddd.roa File: bc015f38-470c-35a2-a871-e2816ec1eddd.roa (raw, json) Hash identifier: ZXcAQD7aU2VbxT+d4rbShuqkzDbCj4FafOdhvEVu/1M= Subject key identifier: E2:8E:00:78:5F:D1:22:76:E7:45:9C:E7:67:47:7D:58:1A:30:A6:7F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849C90357BFAE562453C07BFBCC Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bc015f38-470c-35a2-a871-e2816ec1eddd.roa Signing time: Thu 08 May 2025 12:58:02 +0000 ROA not before: Thu 08 May 2025 12:58:02 +0000 ROA not after: Wed 06 Aug 2025 12:58:02 +0000 asID: 215595 IP address blocks: 107.158.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:03:57:bf:ae:56:24:53:c0:7b:fb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 8 12:58:02 2025 GMT Not After : Aug 6 12:58:02 2025 GMT Subject: CN=b12fac65-f7b9-4d3f-8585-24872e09c01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:ae:5d:af:4a:ec:4a:bc:00:53:64:2e:90: 52:fa:b0:1e:e0:96:0e:d7:ed:77:c7:82:1f:90:06: 69:37:87:e7:ff:c0:d7:f1:5e:a8:8c:74:69:80:44: c5:b7:ca:0a:be:74:72:6d:de:e1:30:23:7f:2a:a3: 7b:18:34:2c:28:af:75:a2:5d:63:1e:df:ad:21:44: 52:f2:33:cf:85:69:55:92:33:ed:d2:1f:15:ad:a3: 5b:08:2b:50:54:24:63:b9:46:da:fe:ca:8b:d5:43: ca:71:18:6f:1f:ec:d0:f7:47:d1:a7:91:ba:24:7f: 3e:1e:02:94:55:c2:ba:b8:dd:fb:58:cc:8f:c8:36: c9:15:a4:0e:16:ea:76:a9:b9:ed:e1:7a:fb:81:3a: 73:bd:09:0d:0b:dd:0c:9d:32:56:7f:e0:84:b9:00: c9:1f:64:79:f6:c5:8c:4f:4e:d4:6f:d8:d7:44:5e: de:7f:d9:80:ec:17:6b:ac:0b:11:3d:ee:b0:82:57: 93:da:06:ee:9b:c1:92:e0:49:f6:7d:02:22:8c:1a: 9e:4b:b8:77:1d:d5:53:fc:7d:a6:2a:e2:e9:1c:1a: 4a:59:1a:f3:64:84:e5:6a:bb:d6:2b:20:92:13:fc: 21:6c:b9:35:81:c2:92:2f:45:17:e4:bb:4e:92:a8: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8E:00:78:5F:D1:22:76:E7:45:9C:E7:67:47:7D:58:1A:30:A6:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bc015f38-470c-35a2-a871-e2816ec1eddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c4:4a:bf:a7:55:26:3d:98:88:cf:2b:50:25:48:aa:5a:e6: 62:61:6a:62:da:a4:f2:ba:30:82:71:0d:75:a2:f0:f2:97:46: 73:1c:48:d1:b6:0f:f4:f3:32:86:a3:a5:16:ba:2c:a7:ba:9e: a0:4c:63:9e:e0:a1:f1:c9:40:78:b0:9f:7b:b3:bd:20:01:1f: 3c:24:df:26:cb:76:ba:12:d0:fd:7b:52:67:0d:2c:36:bf:fb: 3e:43:0d:04:39:68:be:4f:bd:26:e1:ea:9f:5e:e2:c3:eb:e2: f9:90:51:30:b6:4c:1c:16:b7:b1:2b:ba:1a:02:56:97:a8:0e: 32:7b:27:f0:dc:a0:a0:a4:f1:4e:49:13:9b:e3:6c:31:fb:00: 0c:10:da:a0:b8:77:6d:0f:06:09:f9:f8:59:5c:91:04:f1:b1: b1:48:40:d0:47:c0:0e:43:d5:1c:99:e5:c7:5e:ec:e5:42:1d: 25:d1:a8:2c:7a:ba:54:76:9a:a4:38:55:ac:75:35:58:d0:16: cb:68:91:59:8a:e3:0c:29:6f:c3:29:3b:12:38:c9:cb:05:78: c7:be:b1:d7:4e:3c:11:5d:08:bf:bd:77:5f:48:af:0e:ac:0e: cd:d0:d9:e9:c0:92:50:c9:b2:33:83:6b:54:56:0f:55:ff:2a: 61:ac:44:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJA1e/rlYkU8B7+8wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUwODEyNTgwMloXDTI1MDgwNjEyNTgwMlowLzEtMCsGA1UEAxMk YjEyZmFjNjUtZjdiOS00ZDNmLTg1ODUtMjQ4NzJlMDljMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFOuXa9K7Eq8AFNkLpBS+rAe4JYO1+13x4If kAZpN4fn/8DX8V6ojHRpgETFt8oKvnRybd7hMCN/KqN7GDQsKK91ol1jHt+tIURS 8jPPhWlVkjPt0h8VraNbCCtQVCRjuUba/sqL1UPKcRhvH+zQ90fRp5G6JH8+HgKU VcK6uN37WMyPyDbJFaQOFup2qbnt4Xr7gTpzvQkNC90MnTJWf+CEuQDJH2R59sWM T07Ub9jXRF7ef9mA7BdrrAsRPe6wgleT2gbum8GS4En2fQIijBqeS7h3HdVT/H2m KuLpHBpKWRrzZITlarvWKyCSE/whbLk1gcKSL0UX5LtOkqgdiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKOAHhf0SJ250Wc52dHfVgaMKZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmMwMTVmMzgtNDcwYy0z NWEyLWE4NzEtZTI4MTZlYzFlZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa55UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjESr+nVSY9mIjPK1AlSKpa5mJhamLapPK6MIJxDXWi8PKXRnMcSNG2 D/TzMoajpRa6LKe6nqBMY57gofHJQHiwn3uzvSABHzwk3ybLdroS0P17UmcNLDa/ +z5DDQQ5aL5PvSbh6p9e4sPr4vmQUTC2TBwWt7EruhoCVpeoDjJ7J/DcoKCk8U5J E5vjbDH7AAwQ2qC4d20PBgn5+FlckQTxsbFIQNBHwA5D1RyZ5cde7OVCHSXRqCx6 ulR2mqQ4Vax1NVjQFstokVmK4wwpb8MpOxI4ycsFeMe+sddOPBFdCL+9d19Irw6s Ds3Q2enAklDJsjODa1RWD1X/KmGsRGE= -----END CERTIFICATE-----Generated at Mon May 12 08:18:37 2025 by rpki-client