$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa File: cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa (raw, json) Hash identifier: K70NK9gioriWj81TGPBMJP4IPutS7FH8B9CsJebAltE= Subject key identifier: 35:20:A5:E9:E4:B4:8B:19:92:33:0C:B8:06:01:8F:E4:E3:D5:2C:2C Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858492C4FE7EE3E719F604B7AE928 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa Signing time: Thu 13 Mar 2025 09:50:24 +0000 ROA not before: Thu 13 Mar 2025 09:50:24 +0000 ROA not after: Wed 11 Jun 2025 09:50:24 +0000 asID: 36352 IP address blocks: 104.143.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:4f:e7:ee:3e:71:9f:60:4b:7a:e9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 13 09:50:24 2025 GMT Not After : Jun 11 09:50:24 2025 GMT Subject: CN=757e7a6a-1f74-45b7-b26d-88a32eeb3f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:7e:b2:0e:39:7b:a6:3b:23:99:6d:9c:ad: ee:0e:f9:1e:64:9c:62:c2:9b:78:82:28:aa:3c:75: 13:91:69:29:2a:2c:cf:d7:87:d0:72:a3:c0:88:18: a4:a5:f9:de:9f:25:ee:9f:d8:2a:2b:3e:76:dc:16: 0d:7a:0d:47:26:4b:3a:bf:d1:f4:9c:79:1d:c7:aa: ca:8c:11:90:e8:34:f1:f8:5f:1e:c6:ca:70:09:f8: db:53:f3:a1:67:37:ed:b7:24:74:aa:b2:e6:af:52: 10:4a:2a:fc:09:3e:5f:9d:3a:7c:1d:dd:da:1c:21: 8b:7d:95:c2:7d:ca:b9:f0:a0:4e:70:5d:ad:3e:ed: 23:9d:b8:06:de:ed:da:51:f3:e5:35:0b:08:69:64: b5:a2:e9:47:ed:dc:76:d0:e5:02:05:2c:a3:34:e5: 93:fa:cf:88:1c:7c:74:f5:77:57:ad:bd:76:17:7d: 63:23:f5:35:db:75:34:ec:c5:62:7d:39:77:7b:3f: 52:d9:a7:af:a8:5a:92:bb:c5:0d:39:63:de:31:3f: 91:a0:66:ac:ba:4d:3d:5e:73:a0:43:bb:39:a8:ad: f5:f6:50:5e:4d:c2:f0:2f:54:80:cd:82:2e:be:d1: bf:8e:a1:1f:77:e7:a8:10:2f:05:2a:4f:9f:d3:ed: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:A5:E9:E4:B4:8B:19:92:33:0C:B8:06:01:8F:E4:E3:D5:2C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/cd74b2d5-ac04-3fa6-b26b-b0addd7636db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a6:ae:73:86:28:fd:37:d6:e4:ad:5b:f4:a3:86:51:eb:c6: 8f:aa:a2:34:cc:ba:27:09:27:ed:d4:62:ac:11:ef:f4:23:95: 39:16:ed:df:0f:6a:38:c2:25:9a:51:45:17:bb:9d:3c:66:af: 8b:20:a6:9c:2c:81:bd:08:03:28:8b:c5:4d:f3:61:d1:a3:ac: 00:ff:c3:d6:9a:41:e4:af:8a:53:1f:bb:ec:90:39:f7:84:d5: 43:e2:a9:82:60:16:c0:63:b7:ca:32:e0:9c:fd:b3:67:56:89: 05:df:93:ec:9c:a5:b6:f2:50:ef:1b:4b:f2:ef:bd:af:cb:8b: 51:5d:d1:f3:4b:b9:8e:19:22:e0:bf:43:34:19:e1:73:27:60: 39:e0:cf:2e:31:37:75:67:43:d9:32:fb:44:d2:b2:a9:a2:94: c5:48:d4:a7:48:e5:d5:4e:a1:1f:93:47:a0:97:bb:ea:55:18: 61:60:16:0d:19:9f:d6:a9:89:85:2d:9f:84:fd:ab:fd:56:26: c5:d7:5c:0e:e7:6c:ed:f6:02:0d:68:7d:75:6b:b7:90:1e:ff: 5c:27:4b:ac:be:3f:e4:4b:99:fb:d0:7f:49:ef:42:1e:5a:fa: 9d:c9:b3:d2:45:6c:b3:84:39:53:8f:0a:55:92:47:23:6c:31: 8e:aa:be:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksT+fuPnGfYEt66SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMzA5NTAyNFoXDTI1MDYxMTA5NTAyNFowLzEtMCsGA1UEAxMk NzU3ZTdhNmEtMWY3NC00NWI3LWIyNmQtODhhMzJlZWIzZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf1+sg45e6Y7I5ltnK3uDvkeZJxiwpt4giiq PHUTkWkpKizP14fQcqPAiBikpfnenyXun9gqKz523BYNeg1HJks6v9H0nHkdx6rK jBGQ6DTx+F8exspwCfjbU/OhZzfttyR0qrLmr1IQSir8CT5fnTp8Hd3aHCGLfZXC fcq58KBOcF2tPu0jnbgG3u3aUfPlNQsIaWS1oulH7dx20OUCBSyjNOWT+s+IHHx0 9XdXrb12F31jI/U123U07MVifTl3ez9S2aevqFqSu8UNOWPeMT+RoGasuk09XnOg Q7s5qK319lBeTcLwL1SAzYIuvtG/jqEfd+eoEC8FKk+f0+3iDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUgpenktIsZkjMMuAYBj+Tj1SwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvY2Q3NGIyZDUtYWMwNC0z ZmE2LWIyNmItYjBhZGRkNzYzNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACmrnOGKP031uStW/SjhlHrxo+qojTMuicJJ+3UYqwR7/QjlTkW7d8P ajjCJZpRRRe7nTxmr4sgppwsgb0IAyiLxU3zYdGjrAD/w9aaQeSvilMfu+yQOfeE 1UPiqYJgFsBjt8oy4Jz9s2dWiQXfk+ycpbbyUO8bS/Lvva/Li1Fd0fNLuY4ZIuC/ QzQZ4XMnYDngzy4xN3VnQ9ky+0TSsqmilMVI1KdI5dVOoR+TR6CXu+pVGGFgFg0Z n9apiYUtn4T9q/1WJsXXXA7nbO32Ag1ofXVrt5Ae/1wnS6y+P+RLmfvQf0nvQh5a +p3Js9JFbLOEOVOPClWSRyNsMY6qvvs= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:27 2025 by rpki-client