$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/aabc5d96-0daf-3067-b09f-0660862c00b1.roa File: aabc5d96-0daf-3067-b09f-0660862c00b1.roa (raw, json) Hash identifier: XSDUl21Z4Ebaz0jy/4iNi8c1RPV/c3w9JeGhvUa772s= Subject key identifier: 8B:A9:D2:6B:0A:D7:15:DB:50:A6:D0:E7:B2:66:43:86:8E:E0:9B:07 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F432858496FAF1608D887FFD3DDF3B740 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/aabc5d96-0daf-3067-b09f-0660862c00b1.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 16904 IP address blocks: 104.153.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:16:08:d8:87:ff:d3:dd:f3:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=e4a93504-793c-41a4-8cd0-2c0f467af07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:44:a3:c5:61:fd:4f:08:54:72:9e:4e:a4: fb:4f:d2:f2:14:11:6c:ee:85:da:10:80:89:2e:22: e0:2e:ca:9a:6c:4e:5a:c8:83:38:e1:62:88:11:9a: 0f:18:0e:57:79:5b:81:d2:41:34:f8:53:42:88:75: e4:16:12:ca:e5:19:7e:5b:a3:0c:69:ff:e9:4e:90: 1f:29:74:0d:e9:80:72:18:25:49:a1:57:38:f5:a2: 34:cf:1d:9e:a5:f7:0a:8f:17:3b:8d:a8:4b:5c:9a: d1:d0:1c:19:f8:a5:d7:50:13:26:17:ca:25:38:76: b7:23:bf:c6:23:64:7a:76:7d:88:f8:3b:8f:02:3f: b5:e5:48:eb:99:ad:f5:cc:89:14:11:e3:c5:2f:94: 04:ae:9b:21:51:e4:06:f3:aa:76:57:ae:af:ae:8c: 95:f0:ad:a7:5a:b0:69:0a:08:23:45:82:2b:c3:ea: f7:2c:b5:94:6b:46:95:37:52:b4:e5:49:f0:69:fa: 0e:58:08:40:15:5e:a9:4e:f1:f6:fa:9b:3a:73:0d: 9f:ad:b9:7b:7b:13:f3:b9:32:b0:24:54:22:dd:ba: a4:21:59:1b:4e:54:24:fa:dc:dd:7a:29:20:5d:9d: 58:8d:47:77:06:00:7f:e0:e5:e1:42:59:e1:ef:71: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:D2:6B:0A:D7:15:DB:50:A6:D0:E7:B2:66:43:86:8E:E0:9B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/aabc5d96-0daf-3067-b09f-0660862c00b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 104.153.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6b:66:32:8a:a5:2a:e8:e9:ee:60:74:86:0e:35:99:80:bb: ae:11:84:a0:c0:8f:eb:51:c1:e2:2b:9a:ef:60:60:fe:4c:8c: 68:16:40:74:79:8a:90:f1:90:b3:8a:4b:f4:5d:3c:19:44:e9: 06:ea:bc:0c:e0:83:55:49:5f:c2:82:0d:d1:9f:41:0c:81:43: de:ac:b1:7d:a0:5c:1e:11:aa:57:b2:81:b8:b1:05:67:19:79: ac:f7:a9:f3:1d:6c:a0:81:07:e6:83:6c:62:db:df:31:86:43: e8:f5:09:80:84:b6:c3:c1:54:7c:01:27:b6:f2:c2:1c:9c:7a: 78:46:b5:c2:0e:25:fa:3d:87:c0:0b:4d:a3:9e:ac:d2:7f:48: 4c:8e:cd:49:d4:83:88:55:2e:68:e5:56:1b:3a:f7:62:a4:81: 06:bb:3b:06:4c:4b:79:44:20:fe:13:5d:74:54:ae:52:3e:a1: 43:b6:c3:23:b4:35:d6:d3:af:1f:b2:28:0c:2c:51:76:03:cf: 55:a3:58:25:6b:1b:57:32:d1:2c:67:8a:a1:74:e8:a8:02:40: 67:fd:28:9f:f3:04:3b:cd:9d:97:8e:c9:2e:03:35:3c:8a:fe: 87:7e:7a:2d:ea:4e:b8:8c:d2:91:3d:11:99:80:24:01:06:d1: 4e:a0:ce:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxYI2If/093zt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTRhOTM1MDQtNzkzYy00MWE0LThjZDAtMmMwZjQ2N2FmMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAontEo8Vh/U8IVHKeTqT7T9LyFBFs7oXaEICJ LiLgLsqabE5ayIM44WKIEZoPGA5XeVuB0kE0+FNCiHXkFhLK5Rl+W6MMaf/pTpAf KXQN6YByGCVJoVc49aI0zx2epfcKjxc7jahLXJrR0BwZ+KXXUBMmF8olOHa3I7/G I2R6dn2I+DuPAj+15Ujrma31zIkUEePFL5QErpshUeQG86p2V66vroyV8K2nWrBp CggjRYIrw+r3LLWUa0aVN1K05UnwafoOWAhAFV6pTvH2+ps6cw2frbl7exPzuTKw JFQi3bqkIVkbTlQk+tzdeikgXZ1YjUd3BgB/4OXhQlnh73ELlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIup0msK1xXbUKbQ57JmQ4aO4JsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYWFiYzVkOTYtMGRhZi0z MDY3LWIwOWYtMDY2MDg2MmMwMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9rZjKKpSro6e5gdIYONZmAu64RhKDAj+tRweIrmu9gYP5MjGgWQHR5 ipDxkLOKS/RdPBlE6QbqvAzgg1VJX8KCDdGfQQyBQ96ssX2gXB4RqleygbixBWcZ eaz3qfMdbKCBB+aDbGLb3zGGQ+j1CYCEtsPBVHwBJ7bywhycenhGtcIOJfo9h8AL TaOerNJ/SEyOzUnUg4hVLmjlVhs692KkgQa7OwZMS3lEIP4TXXRUrlI+oUO2wyO0 NdbTrx+yKAwsUXYDz1WjWCVrG1cy0SxniqF06KgCQGf9KJ/zBDvNnZeOyS4DNTyK /od+ei3qTriM0pE9EZmAJAEG0U6gzms= -----END CERTIFICATE-----Generated at Sat Apr 12 14:58:27 2025 by rpki-client