$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa File: 4387142e-4988-3933-b813-eafd0736b9a3.roa (raw, json) Hash identifier: p7/l5uxrx4kRlzwi8Sqw+Qbafnr7rdfRSeSgM9lyQiI= Subject key identifier: 85:B1:98:18:AD:9D:3E:1E:6E:6E:D4:19:59:83:34:BB:7C:A4:7C:9D Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858495D8966D867D0E3B0C37D1C00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 104.156.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:66:d8:67:d0:e3:b0:c3:7d:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=f14a8a54-a3ee-4234-9076-fd38533535ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:08:50:6d:83:a1:40:19:c5:ae:08:88:09: 5d:47:23:ab:bf:fa:ca:b7:f0:4e:97:ca:e7:95:f7: 16:46:ac:28:48:d7:86:e5:36:ce:ee:b8:33:49:eb: 9f:8a:dd:db:ed:ab:12:ee:68:77:f5:34:1e:35:29: 85:be:8f:e8:6f:4c:39:af:4b:0f:e7:f0:1d:39:58: 58:43:e6:20:2d:c4:ff:2a:88:cb:89:69:dd:cd:84: 42:60:20:37:b8:b0:b4:66:1d:60:75:52:0f:53:fa: d8:bb:3c:2f:22:d6:22:d4:2c:10:78:0b:94:48:d9: cd:2e:d1:a9:f0:d6:0e:71:7d:79:84:8a:10:54:23: 64:36:18:f4:d7:d3:55:d8:11:0e:c4:23:cd:c9:2b: d6:c6:67:be:a6:b9:94:d4:71:1a:68:89:a5:fb:6c: bd:2a:4c:4d:83:82:47:7f:02:0d:8e:94:04:bb:ff: 52:88:41:5b:47:c6:2d:f0:ae:cf:6e:24:94:e0:e5: f8:e9:b4:4b:c9:49:d8:e6:d3:00:4c:4a:a8:d2:af: 7d:b2:4d:28:33:c6:58:c8:de:04:7f:30:da:78:4d: 4e:64:2a:87:4e:65:da:06:22:0f:f6:58:3d:85:0b: 87:dd:86:a2:3b:29:8d:56:cc:93:83:1d:52:cc:38: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:98:18:AD:9D:3E:1E:6E:6E:D4:19:59:83:34:BB:7C:A4:7C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4387142e-4988-3933-b813-eafd0736b9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 104.156.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8d:a4:f2:33:9c:07:c2:60:9c:59:ca:da:29:3f:3e:e0:89: 77:c2:41:d8:c4:92:48:30:b1:79:6d:61:b4:84:06:a3:23:db: 13:12:24:24:32:61:55:1f:fe:da:01:32:da:d0:b2:7f:0b:f5: da:91:85:80:e9:6f:d1:3b:9a:29:1c:39:bd:0f:6b:b9:fb:97: 78:0d:3e:7c:24:ba:e8:76:05:f3:7f:9d:b1:8d:01:d6:07:3d: 7a:cd:0e:64:35:d5:6b:b2:ad:04:1a:b8:9a:ac:03:1b:48:42: 1b:03:33:ca:c2:fc:32:41:39:e0:6f:a2:2a:07:d8:af:1f:0a: 53:31:e9:86:3c:51:b3:e7:70:f3:e3:9b:a6:42:24:3b:a7:e7: 81:c2:d7:94:35:86:18:98:13:23:fd:87:13:9c:b2:73:8c:6b: 64:cf:91:b2:7b:0b:70:b9:50:57:6d:7d:c1:5b:65:ed:e8:87: c6:02:76:03:a3:c5:93:50:cd:7b:eb:19:3c:a1:14:60:37:94: 2f:34:33:84:a8:53:48:81:60:6f:64:5a:50:58:db:e9:20:01: 67:34:0e:eb:40:3b:49:2e:ae:95:1b:b5:d9:5c:8a:ca:c6:36: df:d2:37:d1:e4:7f:68:2a:d9:6b:00:56:96:8d:d9:ac:3c:ef: b9:b3:46:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWbYZ9DjsMN9HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjE0YThhNTQtYTNlZS00MjM0LTkwNzYtZmQzODUzMzUzNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNcIUG2DoUAZxa4IiAldRyOrv/rKt/BOl8rn lfcWRqwoSNeG5TbO7rgzSeufit3b7asS7mh39TQeNSmFvo/ob0w5r0sP5/AdOVhY Q+YgLcT/KojLiWndzYRCYCA3uLC0Zh1gdVIPU/rYuzwvItYi1CwQeAuUSNnNLtGp 8NYOcX15hIoQVCNkNhj019NV2BEOxCPNySvWxme+prmU1HEaaIml+2y9KkxNg4JH fwINjpQEu/9SiEFbR8Yt8K7PbiSU4OX46bRLyUnY5tMATEqo0q99sk0oM8ZYyN4E fzDaeE1OZCqHTmXaBiIP9lg9hQuH3YaiOymNVsyTgx1SzDjTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWxmBitnT4ebm7UGVmDNLt8pHydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDM4NzE0MmUtNDk4OC0z OTMzLWI4MTMtZWFmZDA3MzZiOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECNpPIznAfCYJxZytopPz7giXfCQdjEkkgwsXltYbSEBqMj2xMSJCQy YVUf/toBMtrQsn8L9dqRhYDpb9E7mikcOb0Pa7n7l3gNPnwkuuh2BfN/nbGNAdYH PXrNDmQ11WuyrQQauJqsAxtIQhsDM8rC/DJBOeBvoioH2K8fClMx6YY8UbPncPPj m6ZCJDun54HC15Q1hhiYEyP9hxOcsnOMa2TPkbJ7C3C5UFdtfcFbZe3oh8YCdgOj xZNQzXvrGTyhFGA3lC80M4SoU0iBYG9kWlBY2+kgAWc0DutAO0kurpUbtdlcisrG Nt/SN9Hkf2gq2WsAVpaN2aw877mzRpo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:33:39 2025 by rpki-client