$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa File: a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa (raw, json) Hash identifier: /DQOl1mLJkGt9b9zqbdwJ0kzozA0AnbnzAOy8TVNykA= Subject key identifier: 32:F6:92:65:5B:24:77:BB:3C:A7:C7:EE:B7:DC:C3:92:F9:90:A2:84 Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F43285848FD56ACC48BE1CB595638C540 Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 3801 IP address blocks: 104.156.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ac:c4:8b:e1:cb:59:56:38:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=3405eeea-6bbb-4c65-9dd3-ff65ce890fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:da:63:e8:3d:fb:19:4d:c9:44:12:ef:85: a1:c3:5f:08:f8:fe:3c:be:f4:ba:3f:10:55:ab:f5: 05:c8:97:bc:32:73:86:f7:85:dd:7d:21:ad:15:2d: 24:46:06:bf:bd:3f:db:ea:9d:4c:3b:db:a9:06:7f: d7:89:b1:da:85:ea:fc:0b:64:50:75:9e:a3:1a:c5: 7c:42:59:33:78:3f:f4:8e:da:8c:b3:d5:af:df:11: 56:e2:0c:31:6e:5d:3c:90:48:32:55:32:d6:a5:3b: fe:e2:ed:28:a3:9c:8c:08:64:b2:f4:52:78:da:81: a7:35:6a:60:89:5c:2f:38:df:e9:51:a9:2a:93:4a: bf:62:6a:bd:47:ce:07:c1:20:7e:f4:eb:71:64:4c: f8:00:c7:85:41:be:e2:aa:35:dd:73:4a:fd:22:9c: b3:e0:1b:53:e2:78:69:c4:7e:7d:fb:ec:ed:1b:69: 8d:5d:4b:2b:83:52:9f:2d:75:6f:a4:00:ad:4e:42: 4b:42:9c:91:98:ad:7e:db:60:a5:a8:05:ad:31:87: b0:3d:a1:8c:7e:1d:cf:01:21:49:77:81:98:70:2d: 77:bc:93:56:39:88:42:49:6f:9a:ea:d1:f7:1e:bc: fa:0c:a5:6e:39:22:fe:95:1a:93:91:30:27:0a:e0: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:92:65:5B:24:77:BB:3C:A7:C7:EE:B7:DC:C3:92:F9:90:A2:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 104.156.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:28:f9:9b:73:f2:dc:7f:a3:6b:6a:96:d9:e3:33:ad:6e:c1: 73:1d:50:e7:0c:31:cf:f0:91:7f:4b:89:49:62:7a:bb:1a:3a: 1a:ec:2d:c2:5c:e8:1a:7e:ba:cf:45:c7:0f:5e:66:e5:04:85: 4a:2d:82:de:0f:05:a3:1c:bd:41:5d:41:f6:38:ba:cf:e0:0a: b6:e9:40:58:74:99:f9:17:9b:77:4b:c3:cb:12:32:45:0e:64: 5b:aa:2a:b0:41:1a:5d:f3:37:31:ee:5a:8d:cb:c9:fd:a6:75: ee:6d:e8:06:90:c2:f8:e6:84:2e:d5:72:fe:4e:78:8e:89:ab: 49:77:22:16:14:9a:62:c1:c1:b8:f9:cf:64:b2:2b:b7:ea:8e: 30:57:a9:f8:bb:f9:b0:dd:f5:00:30:24:59:97:4a:7a:c9:01: 51:37:d3:b1:8c:48:d3:09:14:16:95:93:07:13:a3:e5:81:2c: d9:9e:7f:84:5b:ae:8f:98:c4:36:0c:06:fc:bf:89:e7:4d:26: 54:ea:b0:a3:b1:7f:5e:bf:98:4c:9a:42:92:cd:e2:a9:d6:fd: c8:0a:a5:95:5c:07:53:43:a3:6e:ec:20:9c:84:46:be:16:05: 49:82:9f:db:96:ad:56:8e:13:64:7d:88:85:67:39:da:f1:59: bd:96:95:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VqzEi+HLWVY4xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzQwNWVlZWEtNmJiYi00YzY1LTlkZDMtZmY2NWNlODkwZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGHaY+g9+xlNyUQS74Whw18I+P48vvS6PxBV q/UFyJe8MnOG94XdfSGtFS0kRga/vT/b6p1MO9upBn/XibHaher8C2RQdZ6jGsV8 QlkzeD/0jtqMs9Wv3xFW4gwxbl08kEgyVTLWpTv+4u0oo5yMCGSy9FJ42oGnNWpg iVwvON/pUakqk0q/Ymq9R84HwSB+9OtxZEz4AMeFQb7iqjXdc0r9Ipyz4BtT4nhp xH59++ztG2mNXUsrg1KfLXVvpACtTkJLQpyRmK1+22ClqAWtMYewPaGMfh3PASFJ d4GYcC13vJNWOYhCSW+a6tH3Hrz6DKVuOSL+lRqTkTAnCuAyUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL2kmVbJHe7PKfH7rfcw5L5kKKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvYTlkZTRmMTktYjA0Mi0z MWJjLWIwNGEtZGJmZDNmMjhjM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAo+Ztz8tx/o2tqltnjM61uwXMdUOcMMc/wkX9LiUliersaOhrsLcJc 6Bp+us9Fxw9eZuUEhUotgt4PBaMcvUFdQfY4us/gCrbpQFh0mfkXm3dLw8sSMkUO ZFuqKrBBGl3zNzHuWo3Lyf2mde5t6AaQwvjmhC7Vcv5OeI6Jq0l3IhYUmmLBwbj5 z2SyK7fqjjBXqfi7+bDd9QAwJFmXSnrJAVE307GMSNMJFBaVkwcTo+WBLNmef4Rb ro+YxDYMBvy/iedNJlTqsKOxf16/mEyaQpLN4qnW/cgKpZVcB1NDo27sIJyERr4W BUmCn9uWrVaOE2R9iIVnOdrxWb2WlY0= -----END CERTIFICATE-----Generated at Sat Apr 5 05:17:37 2025 by rpki-client