$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa File: 0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa (raw, json) Hash identifier: yHNRWwj5rP4XtQhFdJmnQL6zSNIuVEJ+L16g5gzuN68= Subject key identifier: 05:70:F4:E1:6D:CB:62:18:48:48:53:34:11:1C:B1:E1:CD:60:C0:81 Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8 Certificate serial: 010D0C9F432858491D715D48270B74D30AD1DB40 Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 6461 IP address blocks: 104.156.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5d:48:27:0b:74:d3:0a:d1:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=c8c8176e-36d1-42ea-98c8-d8216c7a91c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:a4:3b:b4:9e:6c:4d:7f:80:49:dc:c4:0f: 59:de:dc:0c:ee:f3:83:2f:43:e2:47:7c:77:93:2b: 5a:ed:76:ef:31:31:b3:c8:79:0c:9f:8f:dd:85:1e: a6:5b:82:69:92:87:f8:14:cf:1d:44:55:3c:f1:62: fc:39:c3:3e:c6:0c:00:5b:94:d4:0a:1c:b7:29:11: 54:07:18:3b:4e:a2:09:dc:fa:99:da:61:76:14:57: 07:0e:cb:30:da:a3:ae:97:39:74:7c:3e:87:b2:40: cc:3f:9a:fc:f6:b6:ff:28:4b:c4:70:44:6d:b9:f3: b0:00:90:42:fd:00:6d:a1:0b:51:68:56:bb:ef:ee: 7d:8e:e4:6b:16:08:86:ad:4a:58:04:3a:04:1f:05: d5:97:46:8c:0e:fb:a4:ea:23:74:c6:4d:16:b2:46: 25:0d:2a:7e:e6:b4:45:ed:66:33:94:f2:38:e7:25: 45:51:75:9c:19:5c:61:2a:de:06:f7:8f:d3:a9:0c: d5:72:5e:e6:5d:c1:3d:97:de:eb:86:b2:78:16:f1: 85:24:a2:f2:34:a9:91:26:5b:50:3e:ba:bc:48:7c: b6:ca:c2:c3:7b:59:79:fd:d6:bc:dd:bd:b9:28:fa: d0:e0:c8:72:e1:e2:f0:36:9b:ca:b3:8d:07:c8:6a: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:70:F4:E1:6D:CB:62:18:48:48:53:34:11:1C:B1:E1:CD:60:C0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/0cf8d5d2-a839-3763-915a-6d05e4fb4f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl X509v3 Authority Key Identifier: keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer sbgp-ipAddrBlock: critical IPv4: 104.156.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a0:1b:aa:11:5a:c9:e8:8e:69:1d:a8:fd:71:db:0d:03:88: 7e:64:89:f9:6a:8f:b6:10:1d:d0:4d:aa:dc:b8:20:f6:5f:36: 2d:9f:6a:73:51:7f:e9:59:fc:b4:d8:f5:76:0b:e4:f5:83:9c: be:ec:c6:31:5a:7f:94:bb:0b:63:29:d2:80:c1:f0:45:ab:36: f5:df:16:32:7e:d8:0d:4a:3e:34:79:42:33:36:ea:cf:dc:c1: 73:17:a8:58:9d:12:cd:7c:e5:93:6c:17:24:f4:0b:92:43:bb: af:c7:ad:13:2f:15:2b:e4:6f:dd:45:d2:d6:fd:e7:4d:a1:dc: 31:b4:2a:1f:60:90:76:52:86:a6:ec:a8:b7:8e:fe:ce:47:69: d2:2f:65:42:37:51:3f:d1:c0:5d:bd:37:9e:1b:b1:13:5d:a4: 7c:57:a8:69:07:83:69:39:af:5d:05:67:2c:b3:6f:ab:0d:a9: cd:67:fa:b7:b4:74:b5:29:44:02:bc:96:0a:5b:9c:aa:66:fc: 2f:a1:66:ae:bb:10:5f:38:04:0a:1f:70:28:5c:c9:56:f0:5c: b4:43:a6:51:f2:77:f9:f0:a6:64:62:7e:89:bd:a8:09:60:63: 8c:08:9e:9e:29:45:3c:c9:96:de:5c:c7:0c:89:67:7e:a3:89: 73:00:c6:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV1IJwt00wrR20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJlNDI3ZWEtYTZiMC00YzA5LTgzMzAtNmNiZDVmNTgx NmE4MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzhjODE3NmUtMzZkMS00MmVhLTk4YzgtZDgyMTZjN2E5MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCikO7SebE1/gEncxA9Z3twM7vODL0PiR3x3 kyta7XbvMTGzyHkMn4/dhR6mW4Jpkof4FM8dRFU88WL8OcM+xgwAW5TUChy3KRFU Bxg7TqIJ3PqZ2mF2FFcHDssw2qOulzl0fD6HskDMP5r89rb/KEvEcERtufOwAJBC /QBtoQtRaFa77+59juRrFgiGrUpYBDoEHwXVl0aMDvuk6iN0xk0WskYlDSp+5rRF 7WYzlPI45yVFUXWcGVxhKt4G94/TqQzVcl7mXcE9l97rhrJ4FvGFJKLyNKmRJltQ Prq8SHy2ysLDe1l5/da83b25KPrQ4Mhy4eLwNpvKs40HyGqWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVw9OFty2IYSEhTNBEcseHNYMCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU0 MjdlYS1hNmIwLTRjMDktODMzMC02Y2JkNWY1ODE2YTgvMGNmOGQ1ZDItYTgzOS0z NzYzLTkxNWEtNmQwNWU0ZmI0ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJlNDI3ZWEtYTZiMC00YzA5LTgz MzAtNmNiZDVmNTgxNmE4LzAyZTQyN2VhLWE2YjAtNGMwOS04MzMwLTZjYmQ1ZjU4 MTZhOC5jcmwwHwYDVR0jBBgwFoAUdkVKr1RdGBmiR0Mcxjwo6YHXe3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU0MjdlYS1hNmIwLTRjMDktODMzMC02Y2Jk NWY1ODE2YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACgG6oRWsnojmkdqP1x2w0DiH5kiflqj7YQHdBNqty4IPZfNi2fanNR f+lZ/LTY9XYL5PWDnL7sxjFaf5S7C2Mp0oDB8EWrNvXfFjJ+2A1KPjR5QjM26s/c wXMXqFidEs185ZNsFyT0C5JDu6/HrRMvFSvkb91F0tb9502h3DG0Kh9gkHZShqbs qLeO/s5HadIvZUI3UT/RwF29N54bsRNdpHxXqGkHg2k5r10FZyyzb6sNqc1n+re0 dLUpRAK8lgpbnKpm/C+hZq67EF84BAofcChcyVbwXLRDplHyd/nwpmRifom9qAlg Y4wInp4pRTzJlt5cxwyJZ36jiXMAxgY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:38 2025 by rpki-client