$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa File: 86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa (raw, json) Hash identifier: n+1UA/sf7GjlqSparVNIKuV/2NgAFdAIifXG1famNmE= Subject key identifier: 1D:5B:07:5E:B9:EF:E4:E0:05:C6:23:A6:62:7C:65:C5:34:2F:3A:0F Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584944693747D0C0EB515917CF40 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 36231 IP address blocks: 104.152.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:37:47:d0:c0:eb:51:59:17:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=534855ac-3aa6-4bc4-9127-e631a0b4921c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:65:cb:25:25:d2:27:84:8e:77:d7:9d:c1: 2a:1a:39:41:d1:37:5e:27:16:a2:6c:7f:fb:ac:bc: b4:6c:69:63:54:de:3c:c7:e7:5d:d0:32:44:16:bc: db:e3:ae:76:58:1e:54:e8:46:9f:08:f1:58:98:64: ea:ea:25:42:c1:db:30:9a:31:75:34:59:ef:0c:e1: ef:07:a2:a1:7e:7d:e3:35:e2:e0:7e:28:3a:20:a0: 6c:87:d3:1e:14:86:9e:d0:87:45:a2:aa:56:d4:c2: cc:ae:06:d4:18:c9:d6:3c:ec:fd:24:10:2d:11:94: da:85:45:d1:58:30:a0:65:cb:36:ad:67:ca:74:2f: 6f:61:b6:58:77:08:cc:e7:a4:9a:38:62:4b:7a:54: 1f:f7:dd:6e:90:4c:4a:b0:30:7f:20:97:69:2e:63: b6:68:94:a7:84:80:45:e9:39:b3:83:7f:c9:55:fe: 54:4e:06:39:03:40:9d:d7:9e:1c:20:fc:f2:7b:df: 51:ee:e2:28:ab:30:74:91:ec:c5:2e:a6:e3:33:67: 9d:15:67:09:4e:0f:e9:7b:34:88:e0:c9:8c:82:76: 99:20:26:52:ef:51:66:e3:f5:95:83:ad:63:3b:36: 53:56:d0:75:d1:35:a3:b5:e3:b2:f3:d5:a0:d0:32: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5B:07:5E:B9:EF:E4:E0:05:C6:23:A6:62:7C:65:C5:34:2F:3A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/86ad645c-c4cc-3a7f-bf6d-7dbfcba0b9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv4: 104.152.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c8:92:2d:b5:d6:72:e7:82:f8:52:63:eb:93:02:f3:e4:2d: bf:2e:4a:20:47:8d:45:d8:d6:ff:31:ea:39:cb:a4:73:c3:39: fa:90:4a:ab:76:aa:29:94:7e:70:f5:63:d9:85:84:1c:2f:dc: a5:5d:c2:26:32:8a:6c:69:10:51:7e:41:ae:44:2e:82:09:16: 2c:f6:ee:be:3b:82:a4:c4:bd:9c:25:db:f6:72:9f:8e:98:b4: eb:5c:3c:b6:ac:0f:10:bf:14:62:a6:57:df:4d:ed:bc:9a:bd: a1:12:ae:43:cc:8f:37:a0:b8:84:db:39:47:a7:b0:d1:3d:a2: 04:bf:76:01:b6:e5:f4:41:f6:3c:99:8c:af:d9:ac:a5:a1:e0: 69:ac:49:b2:e6:e7:43:60:c3:2a:69:ac:88:71:ed:40:27:06: b5:39:6f:bc:30:0a:2e:fe:67:39:0d:bc:8c:fe:e9:c0:e7:2e: 25:49:72:8f:3c:eb:da:b4:3a:3c:9e:a3:82:1b:74:1e:33:52: c9:7e:2f:fe:11:dd:98:8b:98:9e:c5:76:c7:b4:ce:a0:6b:dc: c9:91:20:b7:6a:d1:3b:c8:33:95:f8:75:bc:a8:38:19:92:50: 0d:c0:06:0e:62:ab:08:9c:e4:9a:48:e2:65:9c:09:44:14:99: e4:95:94:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTdH0MDrUVkXz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NTM0ODU1YWMtM2FhNi00YmM0LTkxMjctZTYzMWEwYjQ5MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc1lyyUl0ieEjnfXncEqGjlB0TdeJxaibH/7 rLy0bGljVN48x+dd0DJEFrzb4652WB5U6EafCPFYmGTq6iVCwdswmjF1NFnvDOHv B6Khfn3jNeLgfig6IKBsh9MeFIae0IdFoqpW1MLMrgbUGMnWPOz9JBAtEZTahUXR WDCgZcs2rWfKdC9vYbZYdwjM56SaOGJLelQf991ukExKsDB/IJdpLmO2aJSnhIBF 6Tmzg3/JVf5UTgY5A0Cd154cIPzye99R7uIoqzB0kezFLqbjM2edFWcJTg/pezSI 4MmMgnaZICZS71Fm4/WVg61jOzZTVtB10TWjteOy89Wg0DLPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1bB1657+TgBcYjpmJ8ZcU0LzoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvODZhZDY0NWMtYzRjYy0z YTdmLWJmNmQtN2RiZmNiYTBiOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLIki211nLngvhSY+uTAvPkLb8uSiBHjUXY1v8x6jnLpHPDOfqQSqt2 qimUfnD1Y9mFhBwv3KVdwiYyimxpEFF+Qa5ELoIJFiz27r47gqTEvZwl2/Zyn46Y tOtcPLasDxC/FGKmV99N7byavaESrkPMjzeguITbOUensNE9ogS/dgG25fRB9jyZ jK/ZrKWh4GmsSbLm50NgwypprIhx7UAnBrU5b7wwCi7+ZzkNvIz+6cDnLiVJco88 69q0Ojyeo4IbdB4zUsl+L/4R3ZiLmJ7Fdse0zqBr3MmRILdq0TvIM5X4dbyoOBmS UA3ABg5iqwic5JpI4mWcCUQUmeSVlA4= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:35 2025 by rpki-client