$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/d03c23b9-75e6-3bfc-a24b-58d212e2e887.roa File: d03c23b9-75e6-3bfc-a24b-58d212e2e887.roa (raw, json) Hash identifier: u+zBnwiEJNHhG8jfGfSFAxsOXPa6vCXUUUKHQ76U1uE= Subject key identifier: 82:2A:C3:34:45:86:36:B5:57:A2:95:81:3E:F9:0B:C8:BC:FF:E8:71 Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F432858499CC4173D0C41A5E99E148CCC Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/d03c23b9-75e6-3bfc-a24b-58d212e2e887.roa Signing time: Tue 22 Apr 2025 16:35:02 +0000 ROA not before: Tue 22 Apr 2025 16:35:02 +0000 ROA not after: Mon 21 Jul 2025 16:35:02 +0000 asID: 13335 IP address blocks: 104.156.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:c4:17:3d:0c:41:a5:e9:9e:14:8c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Apr 22 16:35:02 2025 GMT Not After : Jul 21 16:35:02 2025 GMT Subject: CN=75d51d3c-da4a-4854-8840-029698c54214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:ea:b6:e0:fc:2e:16:87:c2:eb:85:d0:fb: 16:57:2d:59:17:42:f2:ed:15:fa:5d:7a:33:5b:4c: 0b:e5:14:63:1e:f7:bd:15:85:4e:9f:06:7e:e9:8d: 05:d9:91:ae:fe:da:63:ac:ab:a9:be:07:b3:d3:be: 2c:2e:92:10:16:d7:13:c9:ff:82:94:78:07:a3:8b: e4:de:06:f6:e4:15:0f:02:ea:43:3e:b4:40:a8:fb: 65:21:a0:c2:76:13:c8:f3:29:54:e2:f2:2e:c9:30: ab:18:be:ba:2e:19:dd:56:0b:9c:11:f7:bd:1b:8c: 7d:96:70:06:ab:19:bb:8d:6c:3d:f0:77:22:da:b8: 74:dc:58:fd:5c:5f:52:fc:97:81:e3:dc:19:4b:cc: 8e:f0:d1:e9:34:f2:44:67:93:d8:f6:04:83:91:b2: 79:23:ed:af:3e:42:cc:4d:15:bf:df:3b:45:5d:87: 4a:26:ec:a2:1b:3c:46:95:2c:46:52:8f:3e:83:67: 94:2c:a5:55:1b:a6:ce:b9:84:5d:da:36:12:a6:3a: 2b:14:52:55:69:73:66:ce:d8:75:ed:e9:58:55:91: 93:61:f9:8f:95:cf:4a:8a:e8:fc:1b:f1:99:ca:48: 05:74:21:4b:1a:5e:2d:e4:6b:44:bc:34:e0:0c:08: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2A:C3:34:45:86:36:B5:57:A2:95:81:3E:F9:0B:C8:BC:FF:E8:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/d03c23b9-75e6-3bfc-a24b-58d212e2e887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: 104.156.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:00:a9:9e:f2:24:fa:5e:f6:e4:be:b5:a1:00:b6:63:f3:01: fb:f0:a7:62:c3:ef:cb:a5:7c:5a:0b:06:a7:a0:87:87:2d:37: 98:f9:17:be:cf:f8:4a:1f:6a:02:4b:dc:ca:b4:a6:ac:a2:69: de:eb:e7:c2:7e:d7:9a:e9:55:f7:d1:c6:ac:e4:48:e0:ea:64: 2f:a0:82:f8:84:a9:ec:bb:c2:55:2a:b2:d4:bd:fe:32:50:4a: 6b:ef:8c:08:74:32:24:f2:4a:6f:28:03:98:33:82:f9:b1:bc: e1:c2:cc:d7:59:2d:9c:0a:d2:1a:fa:58:44:fd:22:95:d3:c3: f8:90:f4:0f:d0:e9:1a:c3:e6:a7:59:55:f0:da:67:92:70:78: 9a:7a:1d:55:4f:60:4b:b2:ff:12:18:5b:86:f5:b5:40:90:2c: 42:f7:14:71:8a:8d:44:0f:85:45:fb:dc:4d:74:66:36:17:77: 8a:5f:64:da:6e:bb:34:04:88:0a:97:79:b5:ec:6b:aa:6a:1f: 2e:3f:7b:d6:5b:0e:7d:80:85:c7:61:cf:80:23:03:2b:a6:cc: 34:45:92:72:b0:13:36:59:72:f0:8d:f9:5e:af:36:24:a6:95: ee:f1:cf:54:10:12:1c:87:ce:fd:23:04:48:b4:4a:3f:4f:24: c3:4b:8c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcxBc9DEGl6Z4UjMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI1MDQyMjE2MzUwMloXDTI1MDcyMTE2MzUwMlowLzEtMCsGA1UEAxMk NzVkNTFkM2MtZGE0YS00ODU0LTg4NDAtMDI5Njk4YzU0MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAnqtuD8LhaHwuuF0PsWVy1ZF0Ly7RX6XXoz W0wL5RRjHve9FYVOnwZ+6Y0F2ZGu/tpjrKupvgez074sLpIQFtcTyf+ClHgHo4vk 3gb25BUPAupDPrRAqPtlIaDCdhPI8ylU4vIuyTCrGL66LhndVgucEfe9G4x9lnAG qxm7jWw98Hci2rh03Fj9XF9S/JeB49wZS8yO8NHpNPJEZ5PY9gSDkbJ5I+2vPkLM TRW/3ztFXYdKJuyiGzxGlSxGUo8+g2eULKVVG6bOuYRd2jYSpjorFFJVaXNmzth1 7elYVZGTYfmPlc9Kiuj8G/GZykgFdCFLGl4t5GtEvDTgDAgpPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIqwzRFhja1V6KVgT75C8i8/+hxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvZDAzYzIzYjktNzVlNi0z YmZjLWEyNGItNThkMjEyZTJlODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0AqZ7yJPpe9uS+taEAtmPzAfvwp2LD78ulfFoLBqegh4ctN5j5F77P +EofagJL3Mq0pqyiad7r58J+15rpVffRxqzkSODqZC+ggviEqey7wlUqstS9/jJQ SmvvjAh0MiTySm8oA5gzgvmxvOHCzNdZLZwK0hr6WET9IpXTw/iQ9A/Q6RrD5qdZ VfDaZ5JweJp6HVVPYEuy/xIYW4b1tUCQLEL3FHGKjUQPhUX73E10ZjYXd4pfZNpu uzQEiAqXebXsa6pqHy4/e9ZbDn2Ahcdhz4AjAyumzDRFknKwEzZZcvCN+V6vNiSm le7xz1QQEhyHzv0jBEi0Sj9PJMNLjBc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:45 2025 by rpki-client