$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/44993fae-49b0-321b-9fe0-7943ead9ac68.roa File: 44993fae-49b0-321b-9fe0-7943ead9ac68.roa (raw, json) Hash identifier: Lgjgpc13evcXI0A7ow83erOg+yl8XnonV3bm04IFHBI= Subject key identifier: 4D:CD:09:D4:65:49:C7:31:E5:4C:05:63:88:D3:F7:4B:6B:92:A7:07 Certificate issuer: /CN=2bba1c62-4281-43ad-84cd-d29f817dd3d2 Certificate serial: 010D0C9F43285849244E87CF761EC191913D6300 Authority key identifier: C6:9F:9F:D0:98:75:26:19:EE:BC:1E:E9:16:62:D8:33:36:CB:28:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/44993fae-49b0-321b-9fe0-7943ead9ac68.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 32391 IP address blocks: 104.156.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/2bba1c62-4281-43ad-84cd-d29f817dd3d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/2bba1c62-4281-43ad-84cd-d29f817dd3d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:87:cf:76:1e:c1:91:91:3d:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bba1c62-4281-43ad-84cd-d29f817dd3d2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=54d01f69-aa90-4446-bd94-dbec0a200a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:8a:99:d3:9d:0b:3e:5c:08:55:72:b3:18: 00:a0:bb:ec:3e:bf:78:4d:9f:54:21:a3:a7:b9:b6: 7a:d1:e6:c7:23:21:81:44:2c:67:73:75:03:c3:d8: a5:54:f2:c4:d2:b1:1e:1a:65:21:df:01:34:20:07: 2b:21:7b:30:d5:21:8a:9c:cf:c4:e2:42:5b:e0:33: 79:84:37:97:22:57:2a:e1:33:19:07:87:1b:99:b9: 74:f2:fa:e5:6e:5d:60:8e:db:f9:58:56:7a:ce:b6: bf:a3:2a:4b:03:02:ad:4d:b3:1b:7c:a3:c8:ce:b0: cd:d0:64:dd:aa:d3:a1:9e:91:d8:45:34:23:46:f7: 1f:68:da:a5:1e:9c:0d:eb:05:b2:57:46:9a:8e:00: ea:1c:fd:f2:66:9c:85:a0:61:03:c4:2b:7f:79:79: a3:82:c5:8b:54:b9:24:53:5e:fa:19:e3:91:09:34: 57:1d:b3:f8:48:17:8b:45:fd:5d:a8:5c:f8:56:8f: ed:c7:1c:bd:05:11:e0:0d:5d:c4:50:7f:0b:92:15: 7e:ab:39:28:0a:b9:a2:05:a3:98:bc:df:b5:f6:86: 9c:da:d8:a3:f8:0d:c0:7e:5b:20:eb:75:43:03:ba: 88:3c:05:39:25:81:84:fa:b1:0c:eb:4c:1f:e4:a0: d1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CD:09:D4:65:49:C7:31:E5:4C:05:63:88:D3:F7:4B:6B:92:A7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/44993fae-49b0-321b-9fe0-7943ead9ac68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2/2bba1c62-4281-43ad-84cd-d29f817dd3d2.crl X509v3 Authority Key Identifier: keyid:C6:9F:9F:D0:98:75:26:19:EE:BC:1E:E9:16:62:D8:33:36:CB:28:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2bba1c62-4281-43ad-84cd-d29f817dd3d2.cer sbgp-ipAddrBlock: critical IPv4: 104.156.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4b:cc:10:f3:1a:80:09:18:e4:4b:68:01:e6:76:df:b4:3e: 12:c3:48:de:b7:03:15:9c:6c:23:af:09:1d:50:8e:a4:68:a8: 91:ad:e2:5d:ca:6b:2a:46:ef:43:ca:95:8a:5f:3a:e0:1e:dd: 23:f6:cb:6a:3a:91:de:2e:4d:05:11:69:d0:53:09:f2:a9:a6: c3:6d:f2:f8:50:fd:e8:d1:d9:22:a9:5d:5b:5e:2a:2c:25:de: 81:40:f2:bf:e3:80:c2:ae:a6:23:17:b8:39:89:89:37:a3:2f: 7f:9f:3d:20:11:73:de:96:e4:8a:19:1d:eb:7f:63:cc:1e:e6: 89:ac:b3:ac:df:c1:b1:07:8a:f2:29:f5:6c:62:11:50:ed:c7: d1:58:54:25:83:79:64:c6:56:e6:40:1f:49:2c:c1:d3:4b:33: 07:1c:12:98:03:ae:70:c6:df:69:85:9e:1c:e2:f3:42:d0:96: 92:76:74:89:58:66:a2:b7:99:fd:3e:9e:dd:72:bf:3e:4e:db: fd:34:02:a3:d7:da:a6:73:a8:23:a7:19:15:fa:ba:c9:bf:e0: a8:08:94:05:e0:bb:96:ff:6f:3c:b1:42:97:49:12:81:11:43: a6:d6:9e:b4:43:02:5c:2c:73:5a:82:fa:99:29:71:5e:11:77: a6:ab:e6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTofPdh7BkZE9YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJiYTFjNjItNDI4MS00M2FkLTg0Y2QtZDI5ZjgxN2Rk M2QyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NTRkMDFmNjktYWE5MC00NDQ2LWJkOTQtZGJlYzBhMjAwYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIKKmdOdCz5cCFVysxgAoLvsPr94TZ9UIaOn ubZ60ebHIyGBRCxnc3UDw9ilVPLE0rEeGmUh3wE0IAcrIXsw1SGKnM/E4kJb4DN5 hDeXIlcq4TMZB4cbmbl08vrlbl1gjtv5WFZ6zra/oypLAwKtTbMbfKPIzrDN0GTd qtOhnpHYRTQjRvcfaNqlHpwN6wWyV0aajgDqHP3yZpyFoGEDxCt/eXmjgsWLVLkk U176GeORCTRXHbP4SBeLRf1dqFz4Vo/txxy9BRHgDV3EUH8LkhV+qzkoCrmiBaOY vN+19oac2tij+A3Aflsg63VDA7qIPAU5JYGE+rEM60wf5KDRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3NCdRlSccx5UwFY4jT90trkqcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYmJh MWM2Mi00MjgxLTQzYWQtODRjZC1kMjlmODE3ZGQzZDIvNDQ5OTNmYWUtNDliMC0z MjFiLTlmZTAtNzk0M2VhZDlhYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmJiYTFjNjItNDI4MS00M2FkLTg0 Y2QtZDI5ZjgxN2RkM2QyLzJiYmExYzYyLTQyODEtNDNhZC04NGNkLWQyOWY4MTdk ZDNkMi5jcmwwHwYDVR0jBBgwFoAUxp+f0Jh1JhnuvB7pFmLYMzbLKIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYmJhMWM2Mi00MjgxLTQzYWQtODRjZC1kMjlm ODE3ZGQzZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFLzBDzGoAJGORLaAHmdt+0PhLDSN63AxWcbCOvCR1QjqRoqJGt4l3K aypG70PKlYpfOuAe3SP2y2o6kd4uTQURadBTCfKppsNt8vhQ/ejR2SKpXVteKiwl 3oFA8r/jgMKupiMXuDmJiTejL3+fPSARc96W5IoZHet/Y8we5omss6zfwbEHivIp 9WxiEVDtx9FYVCWDeWTGVuZAH0kswdNLMwccEpgDrnDG32mFnhzi80LQlpJ2dIlY ZqK3mf0+nt1yvz5O2/00AqPX2qZzqCOnGRX6usm/4KgIlAXgu5b/bzyxQpdJEoER Q6bWnrRDAlwsc1qC+pkpcV4Rd6ar5oE= -----END CERTIFICATE-----Generated at Sat Apr 12 16:29:20 2025 by rpki-client