$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa File: 3c866c81-424a-3e1e-ac78-0550da029957.roa (raw, json) Hash identifier: fXEMoAqQqA1V6KhUho7XFhAXzWdkmaqmL/WImB2Rz3A= Subject key identifier: 6E:B6:4F:18:A7:21:05:C2:31:2F:C3:83:09:E0:80:2A:E0:67:8E:9E Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F43285849DB2A2A67820CC434810A4900 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa Signing time: Thu 15 May 2025 01:00:47 +0000 ROA not before: Thu 15 May 2025 01:00:47 +0000 ROA not after: Wed 13 Aug 2025 01:00:47 +0000 asID: 16789 IP address blocks: 104.156.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:2a:2a:67:82:0c:c4:34:81:0a:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: May 15 01:00:47 2025 GMT Not After : Aug 13 01:00:47 2025 GMT Subject: CN=050e7796-beea-44ce-a89d-48060d566b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:8d:a5:9b:9a:4f:20:a1:0d:1c:f8:79:62: 82:75:53:3f:ad:ca:9d:da:ee:20:96:0f:1b:fe:e0: 3d:47:e6:f4:04:e4:7a:2d:f8:57:24:c0:14:62:69: 70:3c:66:20:16:0e:2f:ca:9a:34:08:06:68:fa:b3: aa:15:c2:fa:ca:a0:ad:39:b3:0a:a3:83:90:bc:b0: b3:9a:e0:4e:bd:df:45:b2:df:04:58:cb:ef:97:73: e7:ca:c5:08:0d:15:c9:8a:88:b9:fa:06:65:75:f1: ee:35:5a:88:b2:77:42:51:a9:3e:f3:6e:50:75:a8: b1:00:24:41:c1:14:bd:1e:8d:61:6d:05:1a:a9:a8: 9d:94:a9:6e:28:a0:95:b3:14:2e:20:8c:64:75:14: 55:9e:38:4c:0a:8c:6e:09:05:15:af:0b:ec:b2:ca: 98:c3:bf:41:a2:d1:c4:dd:ef:17:62:f1:ef:0b:cc: 9b:88:bd:2b:5e:e9:56:de:2c:26:d6:50:3b:80:d7: ed:c5:b3:ed:62:24:ad:e5:44:35:54:f2:a0:4f:9b: 1d:e1:2e:9e:78:01:3b:92:12:04:66:7e:eb:8f:33: 3b:ee:0a:20:14:d2:66:10:41:4f:7b:ab:b3:9d:d4: f5:0c:72:c2:cc:c7:cd:52:5d:4a:c4:8e:b2:1e:f0: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B6:4F:18:A7:21:05:C2:31:2F:C3:83:09:E0:80:2A:E0:67:8E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/3c866c81-424a-3e1e-ac78-0550da029957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7c:87:52:fa:09:6a:21:80:7d:40:e0:2b:43:0a:07:30:1f: 68:81:f6:e7:83:9d:22:a5:7f:cc:95:12:34:86:ab:d5:e6:53: 4c:1f:52:1e:7a:95:a2:04:94:bf:34:72:3d:b1:ad:d7:11:90: 66:80:35:36:57:4a:46:3c:16:f2:e4:0c:b4:8b:46:e4:68:e7: 75:d0:6d:fd:65:1f:98:35:82:ee:c4:e0:3c:1f:47:ff:db:49: 61:fb:62:41:e7:4e:e5:e3:3a:0b:05:3e:23:ce:a3:9b:80:c1: 72:0d:9d:b3:ae:31:19:7b:75:54:e9:8c:46:f7:99:18:56:5a: 8c:d8:7f:02:8b:6c:b2:08:1e:55:93:6b:f9:cf:9c:67:0a:07: 55:e2:70:4a:a8:e5:f7:99:6d:66:ff:7f:74:af:40:a4:0d:0c: 71:a3:60:b4:49:66:36:ff:47:18:fc:71:c0:71:ba:1f:f0:45: ac:b2:8e:0a:04:25:c6:cc:bb:85:1d:50:4c:4e:15:57:de:56: 0e:50:1a:39:73:2c:91:bb:cc:96:70:a6:14:db:be:1f:c3:1e: 24:c1:ea:6f:22:4d:15:f3:3c:f3:09:0c:80:b9:c7:1b:a1:82: e0:02:61:b4:86:16:b7:e7:9e:b8:5b:0c:58:c9:60:39:b7:7e: 35:d0:92:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbKipnggzENIEKSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk MDUwZTc3OTYtYmVlYS00NGNlLWE4OWQtNDgwNjBkNTY2YjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzGNpZuaTyChDRz4eWKCdVM/rcqd2u4glg8b /uA9R+b0BOR6LfhXJMAUYmlwPGYgFg4vypo0CAZo+rOqFcL6yqCtObMKo4OQvLCz muBOvd9Fst8EWMvvl3PnysUIDRXJioi5+gZldfHuNVqIsndCUak+825QdaixACRB wRS9Ho1hbQUaqaidlKluKKCVsxQuIIxkdRRVnjhMCoxuCQUVrwvsssqYw79BotHE 3e8XYvHvC8ybiL0rXulW3iwm1lA7gNftxbPtYiSt5UQ1VPKgT5sd4S6eeAE7khIE Zn7rjzM77gogFNJmEEFPe6uzndT1DHLCzMfNUl1KxI6yHvD4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG62TxinIQXCMS/DgwnggCrgZ46eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvM2M4NjZjODEtNDI0YS0z ZTFlLWFjNzgtMDU1MGRhMDI5OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJynMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh8h1L6CWohgH1A4CtDCgcwH2iB9ueDnSKlf8yVEjSGq9XmU0wfUh56 laIElL80cj2xrdcRkGaANTZXSkY8FvLkDLSLRuRo53XQbf1lH5g1gu7E4DwfR//b SWH7YkHnTuXjOgsFPiPOo5uAwXINnbOuMRl7dVTpjEb3mRhWWozYfwKLbLIIHlWT a/nPnGcKB1XicEqo5feZbWb/f3SvQKQNDHGjYLRJZjb/Rxj8ccBxuh/wRayyjgoE JcbMu4UdUExOFVfeVg5QGjlzLJG7zJZwphTbvh/DHiTB6m8iTRXzPPMJDIC5xxuh guACYbSGFrfnnrhbDFjJYDm3fjXQkjs= -----END CERTIFICATE-----Generated at Mon Jun 16 15:58:30 2025 by rpki-client