$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa File: 1504f5da-3087-3949-99ea-e1109e260ad2.roa (raw, json) Hash identifier: pcS1VssRboJ8M7iBl2+EgfxpA1s4Cu1xID/DUvLlWk0= Subject key identifier: 51:01:E3:EC:2F:96:0A:90:9E:E5:FE:96:F1:5F:C8:50:A6:ED:EF:B7 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F43285849D594F2FA56B463934CFD4780 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16789 IP address blocks: 104.156.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f2:fa:56:b4:63:93:4c:fd:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=43ace1ea-4874-4889-84b3-8a80d4bf5ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:88:43:bc:8e:3c:00:aa:b9:0f:2a:d0:a6: 82:e7:4f:c5:d5:e7:d0:59:1c:61:21:c2:2c:be:fb: c1:cb:72:41:a8:19:e5:fa:72:1a:6b:53:36:19:2c: 68:f5:f1:54:32:a9:77:4f:af:1d:f1:fb:f7:27:f5: aa:3e:d8:50:ae:f6:f4:ab:0a:b1:f1:89:b3:34:52: 53:8f:2b:dd:11:52:9c:85:e5:be:05:61:37:91:42: 11:41:1f:97:60:66:03:4f:48:5d:bc:5e:e3:51:67: 11:0d:31:95:51:eb:b8:76:03:b2:30:b9:a2:ad:31: cf:d4:26:36:1d:d0:00:18:ce:3a:f1:6e:1b:96:77: 42:e9:3c:d5:7b:ff:f1:02:0b:4a:65:29:b3:60:38: 04:41:17:66:10:19:52:b2:4f:80:c9:85:39:05:90: 14:b0:ed:ad:c8:2c:f8:d7:5a:ca:81:16:86:62:f6: 90:61:98:24:9d:1e:d0:ce:61:d0:79:32:bf:85:c5: 4e:39:08:00:4f:b7:d0:f4:89:f7:c7:d5:72:89:e4: 61:d3:59:b6:ee:90:c4:ba:61:75:5d:66:9a:7f:19: 3c:32:89:22:72:aa:ca:2d:d9:e8:54:3f:1a:80:c2: 06:04:c8:cc:b4:66:35:03:53:1d:ac:76:7c:d7:f1: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:E3:EC:2F:96:0A:90:9E:E5:FE:96:F1:5F:C8:50:A6:ED:EF:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/1504f5da-3087-3949-99ea-e1109e260ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b8:d9:47:5d:c7:64:d1:e1:88:9f:be:85:43:ad:4f:32:1c: e5:2a:17:55:e2:8d:cf:ab:70:50:18:e2:98:b5:5d:ee:59:d3: f2:94:4d:a7:da:2b:bb:4a:11:3d:f4:17:c7:de:c6:eb:a8:49: 73:56:45:29:33:29:e0:2c:d2:62:c6:52:27:44:62:db:89:48: 99:66:33:a4:25:59:0f:a7:60:5a:ce:3b:de:50:36:7a:31:b4: e5:89:43:68:eb:62:31:85:9a:fc:e6:3b:30:4b:9c:60:da:a5: ef:89:4e:2a:0b:e4:10:c7:86:4b:d0:ce:46:43:ca:5c:17:de: 23:19:67:c7:07:98:8e:bb:4a:93:25:bd:e1:ad:d1:1d:98:0a: a7:68:9e:4a:8d:7c:9f:72:3b:fb:29:f1:0f:0f:e7:9b:e0:ca: e5:2a:ca:a4:31:26:79:55:0c:c1:82:10:58:fa:e9:e7:c7:49: 4b:bf:4c:2d:83:39:44:51:10:6a:c4:8a:5a:96:f5:5f:d1:87: 3a:94:36:61:90:91:f1:16:31:0b:a8:8a:9a:9a:31:0f:68:52: b8:bb:f1:f1:3f:de:80:1e:f7:80:86:b3:96:0f:7b:e5:8f:12: c6:26:4a:1b:f5:d9:70:01:35:38:27:39:9e:15:70:5e:03:30: 5b:5d:0a:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPL6VrRjk0z9R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk NDNhY2UxZWEtNDg3NC00ODg5LTg0YjMtOGE4MGQ0YmY1Y2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDqIQ7yOPACquQ8q0KaC50/F1efQWRxhIcIs vvvBy3JBqBnl+nIaa1M2GSxo9fFUMql3T68d8fv3J/WqPthQrvb0qwqx8YmzNFJT jyvdEVKcheW+BWE3kUIRQR+XYGYDT0hdvF7jUWcRDTGVUeu4dgOyMLmirTHP1CY2 HdAAGM468W4blndC6TzVe//xAgtKZSmzYDgEQRdmEBlSsk+AyYU5BZAUsO2tyCz4 11rKgRaGYvaQYZgknR7QzmHQeTK/hcVOOQgAT7fQ9In3x9VyieRh01m27pDEumF1 XWaafxk8MokicqrKLdnoVD8agMIGBMjMtGY1A1MdrHZ81/G91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEB4+wvlgqQnuX+lvFfyFCm7e+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvMTUwNGY1ZGEtMzA4Ny0z OTQ5LTk5ZWEtZTExMDllMjYwYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK42Uddx2TR4YifvoVDrU8yHOUqF1Xijc+rcFAY4pi1Xe5Z0/KUTafa K7tKET30F8fexuuoSXNWRSkzKeAs0mLGUidEYtuJSJlmM6QlWQ+nYFrOO95QNnox tOWJQ2jrYjGFmvzmOzBLnGDape+JTioL5BDHhkvQzkZDylwX3iMZZ8cHmI67SpMl veGt0R2YCqdonkqNfJ9yO/sp8Q8P55vgyuUqyqQxJnlVDMGCEFj66efHSUu/TC2D OURREGrEilqW9V/RhzqUNmGQkfEWMQuoipqaMQ9oUri78fE/3oAe94CGs5YPe+WP EsYmShv12XABNTgnOZ4VcF4DMFtdCoU= -----END CERTIFICATE-----Generated at Mon Jun 16 15:58:53 2025 by rpki-client