$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa File: ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa (raw, json) Hash identifier: hRWA9b0lieirLlMFImhDtDqgJWvVKFJvZE9i0pwq6pk= Subject key identifier: A4:AB:EF:78:1F:0D:4F:4B:61:1A:61:98:77:D1:FD:1E:21:02:EF:C8 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F43285848DEA12071990158758E97F900 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 197715 IP address blocks: 104.156.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:20:71:99:01:58:75:8e:97:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=f6cbefe1-2eb9-4ebc-adcc-0aae81ecbb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:05:7a:e2:3c:8a:3c:9d:2a:3d:27:ce:b2:ba: 1a:85:60:99:0b:3f:83:a3:9e:77:6a:69:0b:a8:b3: 35:55:0a:a8:61:bc:7a:90:9c:ec:ab:9b:38:e5:2e: ff:c2:64:4c:f2:de:8e:9d:59:7f:01:79:6b:a0:68: f6:6f:f7:d2:08:cb:10:c4:a0:9f:ef:25:0d:2b:43: 45:84:de:ae:95:b9:1f:a0:62:01:37:86:eb:33:9b: fc:ba:57:39:a1:54:be:91:68:eb:43:9c:52:1d:7f: d2:20:49:71:60:62:4a:41:9c:9e:7c:ab:50:b0:d4: 37:cd:cb:4d:46:fd:45:31:0f:56:ad:15:84:56:22: 9f:de:99:43:9b:23:54:d1:25:0b:5c:b8:00:f3:4c: 60:47:08:f0:ee:ac:14:3b:37:e6:3d:e4:e0:41:1a: 9d:85:f7:c5:8e:5d:82:6b:73:80:36:9c:c9:a2:c2: 78:09:c5:b7:d9:a6:df:27:6c:5a:85:d5:ba:d2:e5: b0:1f:15:27:db:c8:21:44:9e:f5:02:22:03:41:05: 5f:12:14:db:3c:34:7a:d0:2f:0b:03:33:9f:6d:02: 2d:e4:33:8d:6c:bc:a4:06:83:02:5e:02:58:64:5d: 6d:6e:68:96:ba:61:7b:20:8e:29:74:78:5a:41:54: 52:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:EF:78:1F:0D:4F:4B:61:1A:61:98:77:D1:FD:1E:21:02:EF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 104.156.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:98:3a:22:b8:e3:15:b3:08:e8:a1:8e:ca:9f:e6:5b:34:24: 19:97:34:5d:2f:09:f4:ea:1f:9d:d5:e6:d1:28:6e:59:2a:2f: 48:37:ad:4e:45:36:5d:23:09:e3:40:31:82:93:0d:f8:48:4a: fa:ed:2b:78:36:5a:56:30:73:11:85:59:64:08:f4:0e:a8:2c: 24:0f:46:0e:aa:de:f8:de:4c:2f:4c:1d:28:38:4e:dc:4b:83: 28:11:8d:f0:6f:e8:12:de:2b:cb:8d:87:b8:44:48:c6:9c:5d: 2d:5f:dd:26:2a:b6:e2:6c:35:2c:12:d6:de:9c:94:d9:62:a5: 2c:49:8a:0f:cf:fa:18:65:17:93:ab:76:37:3a:f1:20:b4:74: f1:be:e7:a5:09:f9:44:79:e1:1a:a4:a5:82:41:ea:d1:92:a5: 10:c3:44:fe:e5:fa:12:5f:6d:90:e7:02:22:9b:6d:80:41:eb: c3:24:ec:6f:05:e6:bc:1f:24:92:c4:45:61:37:83:45:7a:76: 3d:dd:8c:9a:fa:06:54:4a:ae:38:c4:5c:78:12:05:c2:ce:43: 81:62:53:d2:c5:9b:0c:cb:ee:70:74:6f:b3:45:c8:c8:55:5c: 23:b2:f8:e2:a7:90:57:99:72:93:07:07:e9:41:f6:9e:cd:55: a2:fa:29:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSBxmQFYdY6X+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZjZjYmVmZTEtMmViOS00ZWJjLWFkY2MtMGFhZTgxZWNiYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQV64jyKPJ0qPSfOsroahWCZCz+Do553amkL qLM1VQqoYbx6kJzsq5s45S7/wmRM8t6OnVl/AXlroGj2b/fSCMsQxKCf7yUNK0NF hN6ulbkfoGIBN4brM5v8ulc5oVS+kWjrQ5xSHX/SIElxYGJKQZyefKtQsNQ3zctN Rv1FMQ9WrRWEViKf3plDmyNU0SULXLgA80xgRwjw7qwUOzfmPeTgQRqdhffFjl2C a3OANpzJosJ4CcW32abfJ2xahdW60uWwHxUn28ghRJ71AiIDQQVfEhTbPDR60C8L AzOfbQIt5DONbLykBoMCXgJYZF1tbmiWumF7II4pdHhaQVRSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSr73gfDU9LYRphmHfR/R4hAu/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYmE2YjFhNzUtMDg4ZS0z MGI4LWEwZjktNzAwYTIzZDRmNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuYOiK44xWzCOihjsqf5ls0JBmXNF0vCfTqH53V5tEoblkqL0g3rU5F Nl0jCeNAMYKTDfhISvrtK3g2WlYwcxGFWWQI9A6oLCQPRg6q3vjeTC9MHSg4TtxL gygRjfBv6BLeK8uNh7hESMacXS1f3SYqtuJsNSwS1t6clNlipSxJig/P+hhlF5Or djc68SC0dPG+56UJ+UR54RqkpYJB6tGSpRDDRP7l+hJfbZDnAiKbbYBB68Mk7G8F 5rwfJJLERWE3g0V6dj3djJr6BlRKrjjEXHgSBcLOQ4FiU9LFmwzL7nB0b7NFyMhV XCOy+OKnkFeZcpMHB+lB9p7NVaL6KUU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:15 2025 by rpki-client