$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa File: 699655ff-aa2d-39e7-955c-544e3645c5e8.roa (raw, json) Hash identifier: deh4SHt4NO9994woaghVWk4+31VqT7SP0+NHgjlNj8U= Subject key identifier: AA:AA:51:16:AB:F2:C6:D0:B4:BD:73:60:2E:63:D9:0A:CD:48:97:4B Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858492C51B047C7E06BCA353B3E00 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa Signing time: Thu 13 Mar 2025 09:53:59 +0000 ROA not before: Thu 13 Mar 2025 09:53:59 +0000 ROA not after: Wed 11 Jun 2025 09:53:59 +0000 asID: 36352 IP address blocks: 104.143.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:51:b0:47:c7:e0:6b:ca:35:3b:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 13 09:53:59 2025 GMT Not After : Jun 11 09:53:59 2025 GMT Subject: CN=9316734b-bd69-4101-a4b4-0be777fe4d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:52:b0:4e:45:93:7d:22:a2:fc:c9:66:b8: 1e:e8:f7:2f:53:63:87:20:a2:29:e4:47:97:19:12: b8:ab:7e:9b:db:08:41:8f:42:f8:1e:9f:63:99:17: aa:ed:94:52:94:99:9b:49:0a:60:6d:f2:ea:bf:c1: 5f:fd:e1:05:ab:40:11:7e:73:f1:4b:f0:6a:bd:4c: 4e:16:2f:d8:6a:8e:25:44:f9:07:c7:4a:c3:8b:49: 3d:37:b8:6b:49:32:ff:0e:b6:ec:97:e5:96:5a:6a: fe:d5:ec:a3:bd:99:92:d3:9f:18:b6:ea:40:2f:b2: 41:86:96:6b:02:90:14:df:bc:db:b8:00:50:6a:e8: fd:fc:68:3f:64:27:ba:e1:87:28:c4:55:87:4f:29: 31:a4:81:4f:ab:cb:96:53:04:02:ed:17:bd:cb:7e: 19:92:62:91:2b:4e:9b:87:2a:c7:0c:b3:f7:40:2e: 28:3c:9e:db:ca:fd:1a:f8:50:a2:0d:fc:47:a2:ac: da:b8:af:11:17:4f:9b:05:22:2e:5c:f0:c5:83:b2: 36:f5:13:93:d1:1e:3a:af:b0:c4:65:2c:aa:76:a1: 89:a0:9f:73:37:b1:17:18:d1:24:77:0b:dd:ae:36: 9f:d8:a6:13:7b:a9:0a:4b:75:b6:f2:c6:9c:ac:b1: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AA:51:16:AB:F2:C6:D0:B4:BD:73:60:2E:63:D9:0A:CD:48:97:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:38:e4:37:7c:ec:3b:c2:a1:76:2f:ac:c5:c2:50:a2:65:e8: 3e:c6:9a:11:c2:b9:8b:f8:e3:af:b0:8a:4c:41:51:a8:cf:62: 98:9d:75:85:7a:4f:e0:a4:48:c2:3a:5d:33:90:6c:c1:28:c6: b5:ab:0c:fa:2e:8c:6c:30:19:2c:9a:43:99:3c:ce:58:0b:df: 70:f7:8a:46:f7:ea:11:47:e6:32:74:ce:a8:1e:e7:bd:92:8d: 5f:75:1c:c7:23:e5:d9:18:6a:04:2f:c0:ed:2a:2a:ba:dc:66: a0:4c:eb:0c:c6:34:0e:86:8e:6c:ae:bc:6b:46:bb:36:23:84: 7a:ba:34:bd:2b:93:da:d8:5d:6e:c4:40:5d:42:b0:a7:0a:b0: 45:a2:b4:da:6b:10:d1:19:99:f9:5d:7e:39:e7:17:f9:bc:b6: 74:9c:80:c4:66:af:cc:6c:91:e4:e1:79:1b:0e:c1:ba:51:d1: ae:17:20:74:cb:07:c9:4d:3c:d3:41:2d:42:ca:3f:d5:92:6d: 3a:76:24:74:1f:b7:e4:21:80:3e:a0:c4:79:1e:d0:66:62:15: 35:f5:d1:e8:8b:ef:19:4c:a8:92:18:b7:0f:f6:a4:93:0e:30: 07:99:f7:3c:9e:5b:43:3c:cf:0f:9c:06:e6:42:45:11:22:a3: 9b:b5:01:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksUbBHx+BryjU7PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMzA5NTM1OVoXDTI1MDYxMTA5NTM1OVowLzEtMCsGA1UEAxMk OTMxNjczNGItYmQ2OS00MTAxLWE0YjQtMGJlNzc3ZmU0ZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H9SsE5Fk30iovzJZrge6PcvU2OHIKIp5EeX GRK4q36b2whBj0L4Hp9jmReq7ZRSlJmbSQpgbfLqv8Ff/eEFq0ARfnPxS/BqvUxO Fi/Yao4lRPkHx0rDi0k9N7hrSTL/Drbsl+WWWmr+1eyjvZmS058YtupAL7JBhpZr ApAU37zbuABQauj9/Gg/ZCe64YcoxFWHTykxpIFPq8uWUwQC7Re9y34ZkmKRK06b hyrHDLP3QC4oPJ7byv0a+FCiDfxHoqzauK8RF0+bBSIuXPDFg7I29ROT0R46r7DE ZSyqdqGJoJ9zN7EXGNEkdwvdrjaf2KYTe6kKS3W28sacrLE80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqqURar8sbQtL1zYC5j2QrNSJdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNjk5NjU1ZmYtYWEyZC0z OWU3LTk1NWMtNTQ0ZTM2NDVjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk45Dd87DvCoXYvrMXCUKJl6D7GmhHCuYv446+wikxBUajPYpiddYV6 T+CkSMI6XTOQbMEoxrWrDPoujGwwGSyaQ5k8zlgL33D3ikb36hFH5jJ0zqge572S jV91HMcj5dkYagQvwO0qKrrcZqBM6wzGNA6GjmyuvGtGuzYjhHq6NL0rk9rYXW7E QF1CsKcKsEWitNprENEZmfldfjnnF/m8tnScgMRmr8xskeTheRsOwbpR0a4XIHTL B8lNPNNBLULKP9WSbTp2JHQft+QhgD6gxHke0GZiFTX10eiL7xlMqJIYtw/2pJMO MAeZ9zyeW0M8zw+cBuZCRREio5u1Ad4= -----END CERTIFICATE-----Generated at Sat Apr 5 09:44:59 2025 by rpki-client