$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/76915693-9a7e-3600-ab02-7314ad415a56.roa File: 76915693-9a7e-3600-ab02-7314ad415a56.roa (raw, json) Hash identifier: AOxhANhf40pYqjCvwj5cHkkXGPFGTd67HbwFYBbfMeQ= Subject key identifier: 5B:BD:E3:98:BA:49:86:D7:70:A1:54:6D:E1:F8:EB:2C:91:0E:1E:0B Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858495D8966C70F9DEB9E00854580 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/76915693-9a7e-3600-ab02-7314ad415a56.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 33256 IP address blocks: 104.156.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:66:c7:0f:9d:eb:9e:00:85:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=017a089a-e2d8-4073-ad27-4b486b95025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:7e:6b:25:44:5f:eb:33:63:46:a7:7c:27: 7e:e8:6e:fe:61:42:b0:71:28:55:92:25:e4:98:4b: 65:cd:88:bd:f8:e1:2e:58:36:e3:2e:81:af:9e:c4: 13:1b:20:25:40:6d:7a:1f:4f:1a:00:1c:50:c0:0a: 70:bc:ed:29:97:c3:a1:98:bc:96:e8:7f:57:2d:82: 82:cb:06:40:6b:2d:db:d3:fa:77:53:46:9b:f3:d7: f2:0a:e9:a7:62:4e:7c:b6:f5:38:97:d1:28:4a:63: 7a:3e:f3:ec:97:98:70:90:c9:87:7f:58:11:8f:1b: 17:b9:53:0d:33:d6:1c:31:50:f1:41:0d:1c:c2:5a: d1:cd:48:7f:41:9a:b0:df:03:59:88:af:59:42:a4: 82:f6:3c:c4:b0:1b:36:93:e5:15:1d:90:60:6d:51: f7:ff:c9:8f:15:14:f7:af:1a:c2:6b:08:e0:d0:2a: 33:ed:58:cf:c7:f0:97:e2:7d:b0:e3:71:f1:05:de: e3:05:a4:88:26:a1:e2:a5:22:8e:9a:97:8d:07:47: 3c:fa:d0:92:0f:6a:0f:42:c8:4a:c2:c9:58:69:f5: 8f:b9:09:fa:e2:5b:63:36:08:17:b5:82:a0:21:4e: 23:76:0b:de:e2:c4:96:9e:34:eb:af:c0:e4:66:f4: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:E3:98:BA:49:86:D7:70:A1:54:6D:E1:F8:EB:2C:91:0E:1E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/76915693-9a7e-3600-ab02-7314ad415a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 104.156.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:90:77:ba:ca:2c:0b:a0:97:14:84:79:c1:90:33:62:f0:14: 11:f4:85:4d:df:d3:fe:03:e7:08:42:80:b4:c8:77:e5:d2:b1: 88:d0:d9:47:15:5a:33:17:0f:ed:36:bd:95:e3:ed:9a:a8:cf: c0:9c:f0:1c:00:bd:b9:47:2c:a0:f0:04:26:a4:74:54:3e:b2: 71:35:d2:4b:36:a3:2a:1a:0f:67:94:49:be:75:5f:a6:d7:bd: 26:58:b9:a3:61:94:27:f3:54:fe:71:69:df:19:2a:43:18:b6: 5e:e9:0d:9f:a3:00:6a:6c:a2:f8:ef:c6:18:5d:d3:28:7b:e0: 6d:a3:cb:ee:da:df:f5:62:30:85:6a:16:e2:7a:b5:e8:bf:cd: 72:19:f1:7e:2c:59:cf:e3:b3:b1:cd:ee:23:f8:cf:ce:1a:91: 1a:6b:ea:ef:79:e6:ad:d1:33:46:97:b2:b9:db:79:3a:90:e5: c1:6d:d7:c7:48:0f:e5:0b:6a:d7:b0:ff:e4:42:b4:0d:19:3a: 24:53:92:de:06:76:4f:42:7e:5b:c3:af:5d:ee:31:6e:37:ce: 71:c5:29:75:e3:e5:97:91:38:12:64:e9:4a:f3:e2:00:d9:1e: 5e:2d:37:1c:90:3e:47:74:4a:6a:c3:eb:e5:e1:31:b0:16:6f: 95:32:05:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWbHD53rngCFRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDE3YTA4OWEtZTJkOC00MDczLWFkMjctNGI0ODZiOTUwMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhB+ayVEX+szY0anfCd+6G7+YUKwcShVkiXk mEtlzYi9+OEuWDbjLoGvnsQTGyAlQG16H08aABxQwApwvO0pl8OhmLyW6H9XLYKC ywZAay3b0/p3U0ab89fyCumnYk58tvU4l9EoSmN6PvPsl5hwkMmHf1gRjxsXuVMN M9YcMVDxQQ0cwlrRzUh/QZqw3wNZiK9ZQqSC9jzEsBs2k+UVHZBgbVH3/8mPFRT3 rxrCawjg0Coz7VjPx/CX4n2w43HxBd7jBaSIJqHipSKOmpeNB0c8+tCSD2oPQshK wslYafWPuQn64ltjNggXtYKgIU4jdgve4sSWnjTrr8DkZvQ0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu945i6SYbXcKFUbeH46yyRDh4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNzY5MTU2OTMtOWE3ZS0z NjAwLWFiMDItNzMxNGFkNDE1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaQd7rKLAuglxSEecGQM2LwFBH0hU3f0/4D5whCgLTId+XSsYjQ2UcV WjMXD+02vZXj7Zqoz8Cc8BwAvblHLKDwBCakdFQ+snE10ks2oyoaD2eUSb51X6bX vSZYuaNhlCfzVP5xad8ZKkMYtl7pDZ+jAGpsovjvxhhd0yh74G2jy+7a3/ViMIVq FuJ6tei/zXIZ8X4sWc/js7HN7iP4z84akRpr6u955q3RM0aXsrnbeTqQ5cFt18dI D+ULatew/+RCtA0ZOiRTkt4Gdk9CflvDr13uMW43znHFKXXj5ZeROBJk6Urz4gDZ Hl4tNxyQPkd0SmrD6+XhMbAWb5UyBZQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:32:45 2025 by rpki-client