$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa File: 7b17f2ba-c1a4-345f-b510-6da4763a4694.roa (raw, json) Hash identifier: 4Kv2xYv5ITG/+QateYmKth9bWm8lB1sHfBo6+4MAsnw= Subject key identifier: 99:3A:50:D9:E0:0E:42:CE:14:D0:EF:66:E4:48:9B:86:19:75:2A:3C Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F43285848FEBBD73BFAB32C449A4DA780 Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa Signing time: Tue 25 Feb 2025 02:00:39 +0000 ROA not before: Tue 25 Feb 2025 02:00:39 +0000 ROA not after: Mon 26 May 2025 01:00:39 +0000 asID: 16789 IP address blocks: 104.156.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:bb:d7:3b:fa:b3:2c:44:9a:4d:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Feb 25 02:00:39 2025 GMT Not After : May 26 01:00:39 2025 GMT Subject: CN=42926c0c-5fd3-4891-a048-9b9a8569e31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:fe:3a:1e:9e:9a:d6:36:6f:5e:99:6b:59: 41:64:0f:ec:4c:9e:89:27:62:db:ae:5a:0b:94:d1: 9c:00:c7:fd:10:1a:71:bd:45:8b:a4:bd:4b:ab:99: ec:8f:a4:80:1a:ba:1f:2e:28:c8:f9:54:38:49:6d: a3:77:df:af:54:d8:35:31:6b:79:d1:63:94:5f:5c: d0:77:46:9a:82:fe:9a:ec:57:47:ad:e0:eb:42:c2: c9:9e:b9:a3:b9:86:a4:d6:5a:8b:2f:8a:d9:3f:17: fb:2d:61:bb:00:1f:11:4c:d6:df:8a:77:f1:01:8d: 38:98:12:47:8a:7d:d8:c4:84:57:50:57:1a:e5:56: 34:68:d1:73:c0:75:ed:fc:d4:de:21:ef:52:ad:6d: 53:55:3c:8e:c9:7c:69:6a:a2:d0:d6:f7:6b:2f:c3: c4:a5:35:76:c3:51:8a:fe:7b:0d:b7:1b:48:32:64: c4:85:43:44:56:84:ad:21:1f:d3:31:13:5d:36:1e: a5:5b:2f:8e:26:64:de:b6:c9:6c:cd:2d:fa:e5:8a: 48:23:43:a8:1f:ea:13:2d:25:bc:6b:95:7e:13:95: 42:60:59:ee:8e:6c:3d:4c:be:f0:a2:36:30:e2:d6: 36:27:a5:e8:e7:0d:4a:94:78:6d:a2:07:c7:c0:bf: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3A:50:D9:E0:0E:42:CE:14:D0:EF:66:E4:48:9B:86:19:75:2A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/7b17f2ba-c1a4-345f-b510-6da4763a4694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f6:d7:69:8c:1e:01:74:ff:43:91:08:3c:9f:00:40:62:26: b2:52:6f:e5:e4:bd:05:f3:b2:52:cb:c7:67:95:e9:7f:27:31: f0:6c:4f:09:70:6b:11:18:79:7c:34:85:47:a9:e0:ed:77:ff: a5:0d:32:52:5f:63:54:d4:4c:e8:c1:a3:48:02:c3:a7:71:2f: 73:c0:1e:2a:e9:7e:46:64:97:ee:f2:cf:6f:18:2e:75:3e:68: 69:3b:cf:57:82:ce:7c:3f:0d:3d:cd:94:d7:f8:78:4d:e8:1f: fb:fc:b6:9a:6b:db:90:a1:88:c2:a2:3b:c1:69:cc:40:23:df: bd:f5:dd:2b:bf:6a:2a:dd:91:c4:6e:54:4d:c8:e7:25:28:0d: fd:01:ca:f2:e9:94:59:78:e9:e1:fa:25:55:d4:b0:9b:4f:a2: 69:2c:59:6b:78:03:a7:f7:a1:c8:a3:6e:bd:16:c3:c4:c2:40: 88:8d:95:2d:f1:7e:9f:57:64:45:8d:10:e3:dc:8a:d4:08:c6: 71:71:03:87:24:f7:13:ed:6e:31:89:09:21:08:e1:66:dd:c6: d6:06:bb:bc:cf:20:b8:f9:b0:58:dc:44:50:4c:54:ea:bc:69: 5c:ef:8f:d5:80:fd:6f:d0:b3:25:11:13:e4:17:5f:06:d9:98: 10:40:cb:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+u9c7+rMsRJpNp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk NDI5MjZjMGMtNWZkMy00ODkxLWEwNDgtOWI5YTg1NjllMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN/+Oh6emtY2b16Za1lBZA/sTJ6JJ2LbrloL lNGcAMf9EBpxvUWLpL1Lq5nsj6SAGrofLijI+VQ4SW2jd9+vVNg1MWt50WOUX1zQ d0aagv6a7FdHreDrQsLJnrmjuYak1lqLL4rZPxf7LWG7AB8RTNbfinfxAY04mBJH in3YxIRXUFca5VY0aNFzwHXt/NTeIe9SrW1TVTyOyXxpaqLQ1vdrL8PEpTV2w1GK /nsNtxtIMmTEhUNEVoStIR/TMRNdNh6lWy+OJmTetslszS365YpII0OoH+oTLSW8 a5V+E5VCYFnujmw9TL7wojYw4tY2J6Xo5w1KlHhtogfHwL9nxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk6UNngDkLOFNDvZuRIm4YZdSo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvN2IxN2YyYmEtYzFhNC0z NDVmLWI1MTAtNmRhNDc2M2E0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL212mMHgF0/0ORCDyfAEBiJrJSb+XkvQXzslLLx2eV6X8nMfBsTwlw axEYeXw0hUep4O13/6UNMlJfY1TUTOjBo0gCw6dxL3PAHirpfkZkl+7yz28YLnU+ aGk7z1eCznw/DT3NlNf4eE3oH/v8tppr25ChiMKiO8FpzEAj37313Su/airdkcRu VE3I5yUoDf0ByvLplFl46eH6JVXUsJtPomksWWt4A6f3ocijbr0Ww8TCQIiNlS3x fp9XZEWNEOPcitQIxnFxA4ck9xPtbjGJCSEI4WbdxtYGu7zPILj5sFjcRFBMVOq8 aVzvj9WA/W/QsyURE+QXXwbZmBBAyws= -----END CERTIFICATE-----Generated at Sun Apr 27 01:27:28 2025 by rpki-client