$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa File: 6f4a6b21-cbf1-3592-9a20-d35603db1871.roa (raw, json) Hash identifier: ubUcsQKbEY/NM86HULUeHBBiFmKd6I1gj4WrxvcO7Fs= Subject key identifier: D7:00:7F:CB:96:99:8C:6B:95:80:28:B5:CB:85:9B:1D:17:D2:3B:F1 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F43285849071BF3E461122FD5CD269C80 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 16789 IP address blocks: 104.156.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f3:e4:61:12:2f:d5:cd:26:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=1abbd33a-a89e-42da-a7df-a4d6a9da0d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:f6:ed:44:64:94:cd:80:79:e5:c9:15:bc: 2c:14:a8:9d:49:1c:f8:de:9b:d4:fe:95:34:4b:fb: 08:2f:e1:b5:cc:6a:d1:18:45:6b:44:f4:95:47:6d: dd:17:eb:27:25:ac:51:ee:ef:b0:15:88:7c:1c:a1: ea:3d:d4:9e:84:c2:2f:20:9a:62:1e:cc:fc:bf:05: 51:2f:3a:27:ed:62:5b:a9:b1:03:a9:50:07:6e:bc: 3b:de:90:e0:9f:6e:c0:da:d4:b2:ee:ef:7f:5d:2d: 03:f7:fd:a1:5d:ab:54:af:3b:38:c9:6d:49:bb:f9: 67:95:b0:3c:f1:34:e7:96:fc:b7:5d:8f:28:9d:cc: 79:99:22:2d:49:00:97:f0:fe:0d:86:5a:07:6a:47: 0f:39:a5:44:0c:33:42:6b:ee:f1:ee:39:c2:64:dd: 5e:f3:4d:e7:7f:c3:36:72:f6:79:94:d3:14:12:52: 8b:6e:68:0c:29:09:27:01:fc:67:37:73:1d:5d:b4: 58:8a:66:db:24:3e:d4:cc:b4:53:6e:af:c2:30:97: c0:07:12:c1:d7:ca:97:e1:4a:ed:28:8b:60:09:a7: 90:a7:63:e6:8e:14:be:d0:27:f0:f9:f6:ed:d3:88: cd:9c:3d:fa:cb:47:94:7a:4a:dd:85:03:42:0f:e9: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:00:7F:CB:96:99:8C:6B:95:80:28:B5:CB:85:9B:1D:17:D2:3B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/6f4a6b21-cbf1-3592-9a20-d35603db1871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e9:b9:db:a7:24:5e:d7:24:f6:51:ee:a1:73:b8:34:d5:2c: 13:0f:84:2a:99:30:65:32:73:d8:43:fe:79:76:5d:60:d2:b7: 8f:4d:1f:d7:34:c9:d5:eb:bd:bc:8d:e5:0c:e4:b3:f5:c3:15: 28:89:fb:60:46:33:99:49:00:a7:9f:ab:c4:bd:7c:5d:5c:42: e7:2d:ec:03:cf:35:46:47:e2:24:bb:3c:9d:ff:4b:84:6c:7a: 24:9e:34:a3:80:41:db:8f:b2:00:81:b0:07:45:e6:a8:11:3e: b5:68:ff:35:87:49:77:25:56:20:53:dd:2d:86:0b:5f:04:e1: f5:99:4d:26:0b:c8:4c:92:04:49:78:d5:70:e5:db:8e:69:93: e4:24:26:8e:3e:75:72:91:15:01:e8:64:38:6b:1f:d4:27:3f: 17:61:29:19:85:1a:c0:3d:09:3f:be:32:8b:5d:e8:23:c5:3a: ca:a0:04:0b:be:ff:29:c6:61:ba:d9:e3:14:22:53:6b:9f:d8: 7c:c9:5c:39:d5:9b:31:3e:85:22:66:7a:7e:fd:ad:43:7e:33: 7d:d6:46:7a:ae:91:2f:74:17:68:0e:d1:c0:4c:f2:56:8c:53: d9:99:04:f9:01:28:a6:a8:f7:f0:97:32:1c:94:e2:a6:90:83: 3d:d6:62:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/PkYRIv1c0mnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk MWFiYmQzM2EtYTg5ZS00MmRhLWE3ZGYtYTRkNmE5ZGEwZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymD27URklM2AeeXJFbwsFKidSRz43pvU/pU0 S/sIL+G1zGrRGEVrRPSVR23dF+snJaxR7u+wFYh8HKHqPdSehMIvIJpiHsz8vwVR Lzon7WJbqbEDqVAHbrw73pDgn27A2tSy7u9/XS0D9/2hXatUrzs4yW1Ju/lnlbA8 8TTnlvy3XY8oncx5mSItSQCX8P4NhloHakcPOaVEDDNCa+7x7jnCZN1e803nf8M2 cvZ5lNMUElKLbmgMKQknAfxnN3MdXbRYimbbJD7UzLRTbq/CMJfABxLB18qX4Urt KItgCaeQp2PmjhS+0Cfw+fbt04jNnD36y0eUekrdhQNCD+kCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcAf8uWmYxrlYAotcuFmx0X0jvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNmY0YTZiMjEtY2JmMS0z NTkyLTlhMjAtZDM1NjAzZGIxODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvpudunJF7XJPZR7qFzuDTVLBMPhCqZMGUyc9hD/nl2XWDSt49NH9c0 ydXrvbyN5Qzks/XDFSiJ+2BGM5lJAKefq8S9fF1cQuct7APPNUZH4iS7PJ3/S4Rs eiSeNKOAQduPsgCBsAdF5qgRPrVo/zWHSXclViBT3S2GC18E4fWZTSYLyEySBEl4 1XDl245pk+QkJo4+dXKRFQHoZDhrH9QnPxdhKRmFGsA9CT++Motd6CPFOsqgBAu+ /ynGYbrZ4xQiU2uf2HzJXDnVmzE+hSJmen79rUN+M33WRnqukS90F2gO0cBM8laM U9mZBPkBKKao9/CXMhyU4qaQgz3WYk4= -----END CERTIFICATE-----Generated at Sat Apr 5 00:35:44 2025 by rpki-client