$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa File: 7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa (raw, json) Hash identifier: NX5rsLzgMc9dNrvKLzNizgS9arr0c1BEjFXoB5C5Kkw= Subject key identifier: 6C:A4:71:DA:2A:9F:B2:51:3A:73:5A:9C:A3:5D:50:68:37:B7:B7:F2 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F43285849071BF2CCA62073B5E25C58C0 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 16789 IP address blocks: 104.156.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:f2:cc:a6:20:73:b5:e2:5c:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=ff56b33a-3267-4231-8805-169060041a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:95:a8:bd:be:48:41:86:4f:41:c8:e1:1c: aa:ed:3f:76:e3:db:d8:b2:6a:77:18:55:45:0a:e1: bf:e8:58:34:64:c8:a2:6d:ce:04:dd:28:8c:5a:e9: 23:21:45:bb:0b:53:1e:65:58:13:70:12:d5:58:6e: 7a:aa:e2:3a:77:1c:20:a1:42:a4:4e:01:7d:56:98: ad:76:b1:7f:f1:a6:71:96:60:59:da:4d:1b:96:aa: cd:98:69:0f:cd:33:81:44:30:98:02:3f:99:47:0c: 00:03:bf:3f:12:2d:60:23:78:17:31:33:13:1e:79: db:35:a9:ca:8d:fe:27:01:52:38:48:69:00:d0:fd: d7:d5:a5:38:b5:ff:ac:6f:7b:38:7d:9f:f6:9b:11: 0c:c3:24:00:9a:54:7e:26:57:89:52:16:22:a5:d0: 27:7f:89:7e:35:b4:00:39:47:52:58:37:61:ad:f5: 96:5f:f8:00:ca:d6:de:68:c2:7f:ec:ae:25:02:ed: d6:bd:f4:84:00:f8:68:a7:8c:3a:38:28:56:4e:66: c8:64:42:76:a3:f7:3d:d6:dc:55:d9:eb:85:39:ac: 12:2e:6e:82:bc:57:96:7d:5b:ab:99:27:85:55:16: 97:11:ac:ef:27:e3:b2:8e:29:20:be:33:3f:38:ec: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A4:71:DA:2A:9F:B2:51:3A:73:5A:9C:A3:5D:50:68:37:B7:B7:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7574a35d-7774-3228-a4f8-c2bdd9c99db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a8:2b:4c:31:31:47:14:64:7a:c0:05:53:2e:2c:5f:9c:e4: 77:49:68:c8:8d:1c:79:5f:2c:dc:84:7b:fb:f5:53:4c:c3:ba: 18:dc:20:38:bd:4e:79:50:28:58:fb:d0:94:0e:86:d0:54:2c: ff:1b:26:c0:84:6b:f7:09:8e:63:e1:f8:7e:ab:0f:57:bb:80: 15:05:9a:65:a0:0c:14:2a:50:ee:25:31:f5:10:00:06:b0:7d: f1:f2:ba:35:f1:ff:f5:29:ce:9d:e1:47:70:0a:bf:4c:51:85: b8:0d:2a:d0:36:2f:d1:30:70:3a:c7:41:ce:10:a0:a2:1c:60: 6e:71:16:02:ba:d2:a8:11:43:3f:9c:ab:55:c9:85:72:bc:98: c4:63:d7:4c:7f:e0:0a:cb:a1:1f:2c:09:d4:3c:42:f0:0e:1c: 3c:f2:06:84:9c:84:31:e1:9f:b2:49:11:68:49:b8:46:23:38: 74:c5:2e:7b:4c:24:f9:d7:93:22:b8:53:7f:fa:7e:bb:be:da: 00:d4:ed:e8:e0:ea:87:84:55:52:ac:29:c5:88:85:55:da:5f: 86:db:98:70:bb:ce:aa:58:ed:7d:48:9b:d8:37:9b:2c:1a:af: 83:02:86:2e:6c:60:3c:63:d5:b9:87:e2:98:44:c3:d3:5f:81: f9:94:5a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/LMpiBzteJcWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZmY1NmIzM2EtMzI2Ny00MjMxLTg4MDUtMTY5MDYwMDQxYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCqVqL2+SEGGT0HI4Ryq7T9249vYsmp3GFVF CuG/6Fg0ZMiibc4E3SiMWukjIUW7C1MeZVgTcBLVWG56quI6dxwgoUKkTgF9Vpit drF/8aZxlmBZ2k0blqrNmGkPzTOBRDCYAj+ZRwwAA78/Ei1gI3gXMTMTHnnbNanK jf4nAVI4SGkA0P3X1aU4tf+sb3s4fZ/2mxEMwyQAmlR+JleJUhYipdAnf4l+NbQA OUdSWDdhrfWWX/gAytbeaMJ/7K4lAu3WvfSEAPhop4w6OChWTmbIZEJ2o/c91txV 2euFOawSLm6CvFeWfVurmSeFVRaXEazvJ+OyjikgvjM/OOxdywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGykcdoqn7JROnNanKNdUGg3t7fyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvNzU3NGEzNWQtNzc3NC0z MjI4LWE0ZjgtYzJiZGQ5Yzk5ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJy8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaoK0wxMUcUZHrABVMuLF+c5HdJaMiNHHlfLNyEe/v1U0zDuhjcIDi9 TnlQKFj70JQOhtBULP8bJsCEa/cJjmPh+H6rD1e7gBUFmmWgDBQqUO4lMfUQAAaw ffHyujXx//Upzp3hR3AKv0xRhbgNKtA2L9EwcDrHQc4QoKIcYG5xFgK60qgRQz+c q1XJhXK8mMRj10x/4ArLoR8sCdQ8QvAOHDzyBoSchDHhn7JJEWhJuEYjOHTFLntM JPnXkyK4U3/6fru+2gDU7ejg6oeEVVKsKcWIhVXaX4bbmHC7zqpY7X1Im9g3mywa r4MChi5sYDxj1bmH4phEw9NfgfmUWu0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:41:56 2025 by rpki-client