$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa File: 4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa (raw, json) Hash identifier: KrTmOP7OxFFF2GZfB5236mft2aTdlG1oQxe8QqQfEdw= Subject key identifier: CE:72:39:34:66:AB:5D:AF:93:64:30:4A:6C:D5:D5:E7:CC:48:EB:62 Certificate issuer: /CN=0215b589-0229-401c-98ef-53194fd5e2a5 Certificate serial: 010D0C9F4328584913AC38E58008571305D09380 Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 46294 IP address blocks: 104.255.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:38:e5:80:08:57:13:05:d0:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=46c3ee09-e416-48b3-b55c-d1193f344afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:23:8c:a6:0b:fd:ea:1c:89:1d:33:16:7e: 4a:8a:d2:4b:37:8c:62:d5:cb:f7:72:38:32:f3:82: 2a:45:d4:56:61:0c:c8:89:50:fc:6a:89:3d:18:61: 3e:d8:f0:48:32:5d:c7:1c:92:c1:d9:e3:48:c6:71: 46:a4:70:b1:f6:b1:9d:9c:6e:63:cf:f8:49:cd:b4: a9:c4:e8:6e:8e:dc:ca:a2:c5:a9:ad:e5:5b:8e:fd: fb:1c:02:37:71:1b:95:03:f4:3a:b3:55:6d:78:dc: b0:ad:26:af:3f:d3:0f:68:bd:16:c2:48:12:75:d8: 52:c5:bc:87:d3:9d:45:36:0f:ba:76:51:8a:f9:f4: 54:13:5c:86:4e:aa:8b:d3:2f:4b:aa:c8:dc:10:6d: 89:7c:e5:cd:2b:5e:06:e4:94:11:8b:4d:9c:b5:e9: 1f:14:f5:cd:1f:1e:85:c0:48:c0:eb:34:e7:7d:24: 33:69:b3:ec:f5:75:79:ea:d2:23:86:cc:dd:f5:fe: b2:a7:5f:42:71:a9:8d:ca:90:db:69:d2:96:65:2f: 1a:01:f4:8e:56:29:f5:b2:70:d5:29:7e:81:0c:f6: 6d:73:0c:81:c5:ca:99:15:d5:c7:31:ca:5c:3b:cd: e3:6f:69:8e:a6:44:53:b6:89:57:4f:10:af:07:8a: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:72:39:34:66:AB:5D:AF:93:64:30:4A:6C:D5:D5:E7:CC:48:EB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/4fd53c22-fcae-3c7f-b739-9a2bf4f97f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl X509v3 Authority Key Identifier: keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer sbgp-ipAddrBlock: critical IPv4: 104.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:33:02:42:6d:98:3c:60:82:ed:31:8d:3b:d7:40:19:8f:88: f7:4c:29:1a:0f:a5:f9:77:8b:04:d5:5f:34:5e:f2:bc:e5:1e: 9e:60:ce:ac:8a:15:4e:44:ae:b6:f1:5a:7d:5a:4a:72:ea:c1: 1f:a2:4b:e6:a3:10:79:50:d1:7b:f7:8f:4f:0b:75:ad:cf:47: fc:a6:f4:aa:2d:32:d0:a3:1b:50:e7:f2:fc:d7:29:92:39:a4: 60:a0:77:2a:bc:dd:07:b9:49:9d:69:97:96:16:42:7f:6a:16: f1:16:3f:36:80:e8:26:fd:c4:60:23:54:3e:ad:bb:01:7a:03: a4:79:1b:ec:0f:ce:d0:f7:55:39:90:e9:e8:30:82:1e:df:46: f0:0a:0f:c3:38:0e:32:97:33:3a:59:37:02:5e:9a:e3:a0:b1: 69:f9:01:a6:0a:24:60:ff:af:2d:34:e1:1a:d6:23:ec:93:c1: e7:5d:21:83:4d:60:c0:8d:2d:49:6c:33:ea:48:73:e4:5a:50: bd:00:38:31:0e:a7:a2:cc:2a:f2:64:53:5f:9d:eb:b3:7e:c9: 6d:aa:f7:50:8b:1a:d0:79:1c:53:6c:2f:5f:32:bc:d9:b2:62: a9:d6:7b:29:f0:75:72:b3:8d:a2:bb:90:e5:03:32:e1:f3:7b: 42:c4:b1:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDjlgAhXEwXQk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIxNWI1ODktMDIyOS00MDFjLTk4ZWYtNTMxOTRmZDVl MmE1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NDZjM2VlMDktZTQxNi00OGIzLWI1NWMtZDExOTNmMzQ0YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIYjjKYL/eociR0zFn5KitJLN4xi1cv3cjgy 84IqRdRWYQzIiVD8aok9GGE+2PBIMl3HHJLB2eNIxnFGpHCx9rGdnG5jz/hJzbSp xOhujtzKosWpreVbjv37HAI3cRuVA/Q6s1VteNywrSavP9MPaL0WwkgSddhSxbyH 051FNg+6dlGK+fRUE1yGTqqL0y9LqsjcEG2JfOXNK14G5JQRi02ctekfFPXNHx6F wEjA6zTnfSQzabPs9XV56tIjhszd9f6yp19CcamNypDbadKWZS8aAfSOVin1snDV KX6BDPZtcwyBxcqZFdXHMcpcO83jb2mOpkRTtolXTxCvB4pW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5yOTRmq12vk2QwSmzV1efMSOtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1 YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5NGZkNWUyYTUvNGZkNTNjMjItZmNhZS0z YzdmLWI3MzktOWEyYmY0Zjk3ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDIxNWI1ODktMDIyOS00MDFjLTk4 ZWYtNTMxOTRmZDVlMmE1LzAyMTViNTg5LTAyMjktNDAxYy05OGVmLTUzMTk0ZmQ1 ZTJhNS5jcmwwHwYDVR0jBBgwFoAUe8gz7ChQSd7f4d559jko4CRIuAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5 NGZkNWUyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8zAkJtmDxggu0xjTvXQBmPiPdMKRoPpfl3iwTVXzRe8rzlHp5gzqyK FU5ErrbxWn1aSnLqwR+iS+ajEHlQ0Xv3j08Lda3PR/ym9KotMtCjG1Dn8vzXKZI5 pGCgdyq83Qe5SZ1pl5YWQn9qFvEWPzaA6Cb9xGAjVD6tuwF6A6R5G+wPztD3VTmQ 6egwgh7fRvAKD8M4DjKXMzpZNwJemuOgsWn5AaYKJGD/ry004RrWI+yTweddIYNN YMCNLUlsM+pIc+RaUL0AODEOp6LMKvJkU1+d67N+yW2q91CLGtB5HFNsL18yvNmy YqnWeynwdXKzjaK7kOUDMuHze0LEsQY= -----END CERTIFICATE-----Generated at Tue Apr 15 11:17:57 2025 by rpki-client