$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa File: 2e5e5f22-1769-3091-9940-b1c8c063a660.roa (raw, json) Hash identifier: BjHRZlHGPV0QeoGvbwaPb1S9XBqDrSbU1qekMs1EWlE= Subject key identifier: BC:E8:33:8D:49:1B:1E:AE:89:17:4A:19:02:5E:C3:C1:D2:9B:0D:38 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A0C0546BAD9D3D70BDDD22600 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36352 IP address blocks: 104.143.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:46:ba:d9:d3:d7:0b:dd:d2:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=150449df-9b1a-4d4a-94fe-71186055de14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:a3:99:cb:5a:fd:6b:0a:2c:bf:f5:a0:ad: 22:f7:8f:72:03:f3:63:8f:b5:51:81:e8:c0:fc:27: 56:96:24:26:70:33:94:00:58:47:94:c0:1b:30:f3: 49:ab:2d:e0:b6:17:85:01:3a:da:36:02:e3:79:a7: 10:5e:df:dd:28:15:c4:36:b7:3c:7d:72:ff:c8:bc: 6a:9d:fd:f0:f1:61:2d:8d:88:02:9c:40:25:30:10: d1:2b:54:cf:69:31:12:5c:49:a8:f9:30:8c:70:b7: 76:1b:16:1e:09:df:8a:8e:11:61:4b:9b:14:27:69: 5d:fc:b4:39:be:a6:73:a3:3b:29:f1:5f:8a:b3:df: 4b:fe:22:89:13:b9:6a:31:5b:1d:3c:b3:5a:85:fa: a1:b5:bd:5d:f8:16:c2:4d:a1:6c:8d:3c:c5:d6:ea: 29:c3:7d:55:37:99:01:93:97:86:80:f8:f2:ab:52: a8:fe:e7:25:fa:d3:e8:b7:ee:76:19:45:63:5f:9f: 3b:92:92:bc:ac:e1:e0:23:6d:12:77:70:29:de:16: 78:7a:29:07:fa:84:b0:a4:eb:7b:a0:c2:22:3e:e9: 69:00:ec:5b:6c:05:61:7b:ae:ea:96:de:95:2f:80: 88:9b:58:8d:59:f4:bb:b9:29:92:b9:15:cc:64:53: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:33:8D:49:1B:1E:AE:89:17:4A:19:02:5E:C3:C1:D2:9B:0D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2e5e5f22-1769-3091-9940-b1c8c063a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b5:ba:a4:0b:b5:27:2d:73:b3:02:b8:cb:88:32:7d:94:5e: 52:49:ad:1a:c7:34:b2:0d:92:bf:81:dd:7d:49:d4:c6:05:b2: bc:ed:86:71:e7:56:8b:59:cc:13:f9:fe:a0:5b:6f:6b:52:48: dd:4a:7d:e6:d5:e4:48:90:a9:5a:08:99:7a:7d:5c:2d:70:9f: ce:f7:cb:98:c2:d8:0b:64:0e:03:74:dd:02:fb:29:2d:de:a1: 38:b4:7e:6e:e9:7d:24:65:f4:e9:a4:6f:68:7b:87:f9:57:84: 54:08:9b:4a:65:56:d7:7d:f0:7e:61:3b:cc:3e:a5:40:db:c4: 18:92:06:9d:c8:25:7e:c6:1d:0d:ad:d2:7f:17:4f:12:b1:5f: a9:75:43:f4:0c:59:32:50:00:28:d8:e3:f3:a6:86:fc:ba:74: 1c:fc:72:1b:50:7a:89:5b:0d:fd:ef:df:1c:71:88:a2:a3:09: 62:c2:d6:1a:70:81:87:ab:bd:86:ec:8f:79:80:02:d6:91:89: 80:f2:d6:7f:7e:d3:2c:64:dd:ab:7d:e4:0f:cd:5e:95:b8:01: a6:63:2a:dc:56:f8:13:85:2c:55:b4:f8:93:b2:14:72:f9:7c: 20:ba:a7:c5:82:a4:b1:b7:84:34:98:fb:bb:bb:83:e4:2b:7a: a1:d5:c0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUa62dPXC93SJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTUwNDQ5ZGYtOWIxYS00ZDRhLTk0ZmUtNzExODYwNTVkZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqmjmcta/WsKLL/1oK0i949yA/Njj7VRgejA /CdWliQmcDOUAFhHlMAbMPNJqy3gtheFATraNgLjeacQXt/dKBXENrc8fXL/yLxq nf3w8WEtjYgCnEAlMBDRK1TPaTESXEmo+TCMcLd2GxYeCd+KjhFhS5sUJ2ld/LQ5 vqZzozsp8V+Ks99L/iKJE7lqMVsdPLNahfqhtb1d+BbCTaFsjTzF1uopw31VN5kB k5eGgPjyq1Ko/ucl+tPot+52GUVjX587kpK8rOHgI20Sd3Ap3hZ4eikH+oSwpOt7 oMIiPulpAOxbbAVhe67qlt6VL4CIm1iNWfS7uSmSuRXMZFMZ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzoM41JGx6uiRdKGQJew8HSmw04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmU1ZTVmMjItMTc2OS0z MDkxLTk5NDAtYjFjOGMwNjNhNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG1uqQLtSctc7MCuMuIMn2UXlJJrRrHNLINkr+B3X1J1MYFsrzthnHn VotZzBP5/qBbb2tSSN1KfebV5EiQqVoImXp9XC1wn873y5jC2AtkDgN03QL7KS3e oTi0fm7pfSRl9Omkb2h7h/lXhFQIm0plVtd98H5hO8w+pUDbxBiSBp3IJX7GHQ2t 0n8XTxKxX6l1Q/QMWTJQACjY4/Omhvy6dBz8chtQeolbDf3v3xxxiKKjCWLC1hpw gYervYbsj3mAAtaRiYDy1n9+0yxk3at95A/NXpW4AaZjKtxW+BOFLFW0+JOyFHL5 fCC6p8WCpLG3hDSY+7u7g+QreqHVwLM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:32:41 2025 by rpki-client