$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa File: d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa (raw, json) Hash identifier: Jua9c0Rarq1iqU3CXkPyzRGIlNAyGnpUpYswMerufKA= Subject key identifier: 21:4B:27:1A:0D:B3:23:95:E5:46:C7:3B:FD:62:D4:74:D5:B8:67:FC Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F43285849806F274F98A16A835D6C9180 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 26658 IP address blocks: 104.243.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:27:4f:98:a1:6a:83:5d:6c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=90d1b957-22ea-4a82-b257-cdf1a2b58ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b9:ac:77:ff:89:ce:57:78:f3:13:5c:1d:e2: 56:08:0a:bd:1f:a8:e0:cb:59:2c:84:fd:f0:78:5a: ff:f4:fa:8b:29:b8:8c:80:bc:8f:41:ff:39:cb:77: 8a:bc:5b:d3:da:6f:f0:2b:a7:1a:14:94:51:d2:62: d0:1f:05:9d:3e:a0:f2:9d:79:43:ae:2b:ed:f2:56: 5f:9d:b1:1c:0f:48:66:56:80:0d:28:84:fd:cb:69: 42:52:51:ea:ca:b7:b7:14:0d:16:f2:76:48:f7:f9: 93:ee:5c:ae:af:73:cc:63:50:6c:30:07:18:a8:a8: 11:3b:b4:67:6c:32:5b:6e:95:3a:00:29:f7:bc:e9: 2d:12:bb:a6:57:34:d7:09:89:33:be:b3:fd:63:14: 0b:2f:26:a2:c5:bc:18:f0:97:d7:83:6f:62:89:ea: 19:68:3a:5a:c2:c8:81:b5:23:35:9a:00:36:37:ac: 55:59:0f:bf:2f:31:37:11:9a:3a:80:44:61:04:ec: b3:9c:4e:90:b9:06:2e:61:48:c3:5e:f7:bf:51:c4: 10:a1:1c:4e:a7:ff:eb:ec:d9:9f:c6:e6:04:02:18: 8f:10:ba:3e:3d:e0:16:66:58:ce:d0:17:c6:02:ec: 58:6b:fd:3b:fc:3d:36:6e:09:56:09:61:b1:d9:90: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:27:1A:0D:B3:23:95:E5:46:C7:3B:FD:62:D4:74:D5:B8:67:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/d03b5d04-e0b9-31e5-a735-6907c06cf94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a8:82:75:44:5b:37:5a:e4:80:aa:74:d6:25:53:17:9a:45: 7a:6b:7c:c2:6d:96:3a:59:2f:59:bb:48:69:71:48:6d:82:8a: 76:5b:71:13:3c:d1:a0:fd:f3:6c:bd:f9:57:2a:bd:b4:51:e4: 16:43:42:b0:28:f8:9c:92:6f:8f:c6:b2:00:68:8a:86:bf:f3: fb:3c:2a:de:36:68:3d:49:97:20:48:31:1b:1a:31:9e:7a:50: 66:37:69:3d:3c:f2:ee:fc:8f:2a:43:50:4e:b8:70:ae:32:f8: d2:b0:ac:8f:b9:00:2e:fc:a9:72:49:38:0f:ef:19:b8:da:5f: 6b:86:ac:cc:74:dc:55:fd:a7:c8:89:da:85:ca:80:29:09:7f: 21:3f:e9:1d:2f:37:20:dd:aa:38:dc:be:23:86:ee:6c:9b:12: 99:51:eb:b8:8b:82:c5:ae:3c:b2:ca:26:3f:85:3c:18:63:62: 9a:be:6e:1d:af:d0:28:30:4b:b6:42:bd:bf:de:ce:91:d0:bf: 99:27:7c:35:af:16:00:cd:5d:d3:ad:ec:51:d8:ea:b6:b8:4e: 56:86:3d:eb:05:ea:2f:22:e4:75:be:e3:58:4a:1b:b0:ed:67: 1b:16:50:03:43:3d:7d:e0:18:8e:25:33:de:4c:30:1a:d4:d8: 46:d8:bd:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbydPmKFqg11skYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk OTBkMWI5NTctMjJlYS00YTgyLWIyNTctY2RmMWEyYjU4Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7msd/+Jzld48xNcHeJWCAq9H6jgy1kshP3w eFr/9PqLKbiMgLyPQf85y3eKvFvT2m/wK6caFJRR0mLQHwWdPqDynXlDrivt8lZf nbEcD0hmVoANKIT9y2lCUlHqyre3FA0W8nZI9/mT7lyur3PMY1BsMAcYqKgRO7Rn bDJbbpU6ACn3vOktErumVzTXCYkzvrP9YxQLLyaixbwY8JfXg29iieoZaDpawsiB tSM1mgA2N6xVWQ+/LzE3EZo6gERhBOyznE6QuQYuYUjDXve/UcQQoRxOp//r7Nmf xuYEAhiPELo+PeAWZljO0BfGAuxYa/07/D02bglWCWGx2ZBzDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFLJxoNsyOV5UbHO/1i1HTVuGf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvZDAzYjVkMDQtZTBiOS0z MWU1LWE3MzUtNjkwN2MwNmNmOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWognVEWzda5ICqdNYlUxeaRXprfMJtljpZL1m7SGlxSG2CinZbcRM8 0aD982y9+VcqvbRR5BZDQrAo+JySb4/GsgBoioa/8/s8Kt42aD1JlyBIMRsaMZ56 UGY3aT088u78jypDUE64cK4y+NKwrI+5AC78qXJJOA/vGbjaX2uGrMx03FX9p8iJ 2oXKgCkJfyE/6R0vNyDdqjjcviOG7mybEplR67iLgsWuPLLKJj+FPBhjYpq+bh2v 0CgwS7ZCvb/ezpHQv5knfDWvFgDNXdOt7FHY6ra4TlaGPesF6i8i5HW+41hKG7Dt ZxsWUANDPX3gGI4lM95MMBrU2EbYvfM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:08 2025 by rpki-client