$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa File: 6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa (raw, json) Hash identifier: SULv6vCDo+0A1fz2q21Bo2HNzHylMB+5D/UlTHKjeAc= Subject key identifier: 89:81:D4:65:AE:FE:4E:B8:8D:CB:B6:9D:3C:73:76:7D:A5:5A:71:0E Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858492C4E70894B202F68CE2FCA80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa Signing time: Thu 13 Mar 2025 09:47:26 +0000 ROA not before: Thu 13 Mar 2025 09:47:26 +0000 ROA not after: Wed 11 Jun 2025 09:47:26 +0000 asID: 36352 IP address blocks: 104.143.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:4e:70:89:4b:20:2f:68:ce:2f:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 13 09:47:26 2025 GMT Not After : Jun 11 09:47:26 2025 GMT Subject: CN=4dadc535-6d18-46d4-a547-ddae306ab7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7e:d8:c9:d6:91:76:00:9e:96:fe:73:13:53: 7d:f9:b1:71:bd:30:4b:45:f3:f1:70:d7:a7:7d:3c: 2d:c1:9f:50:17:e9:d1:7e:ec:20:1f:40:b2:2c:45: 88:f0:47:7e:40:20:cf:a1:52:26:55:1b:17:22:87: 09:de:bc:d2:85:33:9b:58:f0:c4:36:44:b0:c5:77: bf:f8:fa:3f:f7:21:08:ac:13:f7:b5:7c:a8:dc:c1: c9:d1:0c:05:c8:36:e7:05:ca:f7:a7:9f:b2:43:be: b7:05:45:8a:a8:67:35:7a:09:d2:a6:7d:b3:55:56: 55:f6:ca:9b:3f:23:ab:e1:e3:95:39:8c:88:cc:26: 65:c5:05:e4:e3:d3:c3:5a:ad:95:6a:87:c4:57:ae: d1:50:70:3d:90:aa:3e:f0:fd:cc:24:13:d6:75:e0: dd:94:62:18:f5:82:5b:ca:6f:2e:b0:b7:6c:35:3f: b0:16:e4:03:0c:65:65:98:ec:53:26:b6:4f:60:be: 58:da:46:68:a5:c6:95:9c:a9:a3:62:85:ce:65:f4: bd:2e:f0:84:2a:4e:45:13:b2:af:e8:0f:72:0a:19: a4:81:7d:ff:ff:52:d2:bc:3f:d4:c2:f4:d5:ff:5f: 31:51:7e:18:0e:f4:5b:80:14:b2:49:eb:12:4d:0e: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:81:D4:65:AE:FE:4E:B8:8D:CB:B6:9D:3C:73:76:7D:A5:5A:71:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3d:af:e6:eb:81:13:1a:d2:86:50:67:a4:37:c7:49:48:a4: 00:43:ea:01:71:25:9f:72:c6:7a:a3:2b:b8:9b:21:55:69:c5: 05:35:f6:a8:28:d8:30:25:e1:81:3a:f1:fc:e6:e6:84:6a:8a: 5e:3a:5f:24:05:c0:df:5c:db:b3:4b:ed:e2:4b:54:9d:3b:7f: db:d1:34:64:4e:d3:d3:80:7a:0e:61:df:5c:e7:69:d0:8c:14: 88:5d:03:92:c6:ce:5e:6c:12:cb:71:d7:47:85:ef:0e:05:7a: 8f:9d:0b:29:f3:0c:a8:bd:63:f7:91:b6:c3:9d:23:c9:0f:85: f7:ab:4a:bc:0f:9f:ae:c8:85:30:87:b4:b5:87:4f:58:62:1a: bd:73:65:45:bd:c5:9b:74:2c:47:dd:9e:93:ac:1b:ec:9e:a2: ef:7d:10:c6:34:a7:0c:fa:86:b0:53:63:67:23:e6:f4:e0:71: 25:1a:35:a7:50:e0:64:cf:9b:37:57:3a:b5:0a:c3:c2:04:45: b0:23:59:5e:d3:8f:3f:69:ab:85:62:81:fa:47:9c:28:3e:96: 0d:54:04:76:94:c1:56:f2:3f:c7:22:e5:3e:3b:c2:eb:61:e9: b8:68:3b:2a:3f:3e:d5:02:07:5d:28:38:b0:14:b7:43:9b:3d: 7b:ce:7f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksTnCJSyAvaM4vyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMzA5NDcyNloXDTI1MDYxMTA5NDcyNlowLzEtMCsGA1UEAxMk NGRhZGM1MzUtNmQxOC00NmQ0LWE1NDctZGRhZTMwNmFiN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH7YydaRdgCelv5zE1N9+bFxvTBLRfPxcNen fTwtwZ9QF+nRfuwgH0CyLEWI8Ed+QCDPoVImVRsXIocJ3rzShTObWPDENkSwxXe/ +Po/9yEIrBP3tXyo3MHJ0QwFyDbnBcr3p5+yQ763BUWKqGc1egnSpn2zVVZV9sqb PyOr4eOVOYyIzCZlxQXk49PDWq2VaofEV67RUHA9kKo+8P3MJBPWdeDdlGIY9YJb ym8usLdsNT+wFuQDDGVlmOxTJrZPYL5Y2kZopcaVnKmjYoXOZfS9LvCEKk5FE7Kv 6A9yChmkgX3//1LSvD/UwvTV/18xUX4YDvRbgBSySesSTQ6y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImB1GWu/k64jcu2nTxzdn2lWnEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNmY3MTJlMjMtMGJlNS0z ZmQyLTljYjctZGM4M2RlY2ZiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE9r+brgRMa0oZQZ6Q3x0lIpABD6gFxJZ9yxnqjK7ibIVVpxQU19qgo 2DAl4YE68fzm5oRqil46XyQFwN9c27NL7eJLVJ07f9vRNGRO09OAeg5h31znadCM FIhdA5LGzl5sEstx10eF7w4Feo+dCynzDKi9Y/eRtsOdI8kPhferSrwPn67IhTCH tLWHT1hiGr1zZUW9xZt0LEfdnpOsG+yeou99EMY0pwz6hrBTY2cj5vTgcSUaNadQ 4GTPmzdXOrUKw8IERbAjWV7Tjz9pq4VigfpHnCg+lg1UBHaUwVbyP8ci5T47wuth 6bhoOyo/PtUCB10oOLAUt0ObPXvOfzw= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:30 2025 by rpki-client