$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json) Hash identifier: FUA+qrxllH+q3RaQ8EU+6NBsmTLa1f7y+Vh7EfEp49U= Subject key identifier: C2:61:09:D4:AC:88:BF:8E:AB:25:11:B7:61:BE:A3:C4:BE:94:BA:FF Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858492C4EB45E6FCC86E63E258080 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa Signing time: Thu 13 Mar 2025 09:47:58 +0000 ROA not before: Thu 13 Mar 2025 09:47:58 +0000 ROA not after: Wed 11 Jun 2025 09:47:58 +0000 asID: 36352 IP address blocks: 104.143.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:4e:b4:5e:6f:cc:86:e6:3e:25:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 13 09:47:58 2025 GMT Not After : Jun 11 09:47:58 2025 GMT Subject: CN=e0835d64-e626-4b52-83c5-3c487f81f489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:37:ad:cb:0b:29:7d:32:01:ea:c4:71:56: db:e9:9e:5c:b9:e4:42:c2:5e:53:8e:d8:93:76:44: 93:52:fe:09:55:65:fb:3f:92:11:fc:ce:0b:79:52: 87:5e:b2:70:f1:c8:7f:7e:92:80:f9:a5:08:f7:d9: f3:e9:7e:42:02:c5:66:f9:52:29:37:0c:4b:bd:05: f9:d8:29:c0:c0:e5:87:2d:86:a5:1f:30:8f:75:57: ad:98:70:23:2a:07:bb:0c:84:a4:09:0e:08:b6:49: 02:7f:66:e5:64:b0:cd:9c:f4:e0:b7:e8:44:75:df: cd:dc:4b:42:ae:b4:94:09:e4:f3:4e:a1:1e:42:0d: f0:3f:69:71:7a:cf:75:e6:0e:0b:8b:e6:ec:35:94: 59:3b:61:0f:0c:89:e0:d7:84:5d:c9:68:5f:fb:c4: 66:f8:61:fd:d9:7e:f0:0e:2f:a0:9f:7a:72:02:c4: 04:73:68:f4:cc:75:a2:4d:9d:ea:de:80:ad:f6:a2: e3:5c:3b:fc:73:df:47:eb:99:8d:e7:78:0b:fd:cb: 59:92:63:b0:3c:7e:90:74:51:f2:7d:c5:1f:57:42: 56:13:40:5e:6e:0d:1b:07:c5:f1:7c:81:7f:ab:70: 87:18:4b:38:09:b7:61:fb:c6:ac:63:6c:1e:d4:ff: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:61:09:D4:AC:88:BF:8E:AB:25:11:B7:61:BE:A3:C4:BE:94:BA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8d:d0:27:6a:ff:db:44:de:d2:29:a0:68:af:a6:d3:6e:bc: e9:02:44:4f:aa:ca:34:c3:10:05:4f:77:6a:0e:64:82:c9:72: fd:66:e1:94:9e:34:6f:b7:49:7c:65:11:41:4d:50:64:9d:0f: f1:9d:ad:24:3f:03:3f:33:9c:f5:59:35:3a:b6:b9:05:fd:a5: dc:1c:7c:d5:57:08:96:96:a3:c2:66:43:59:a4:3e:e9:e5:b9: 91:d2:da:f7:45:e8:9b:04:91:23:25:53:2d:37:14:71:81:f0: 92:7c:ba:a7:9d:61:53:d5:bd:f2:b4:0d:cb:12:76:4b:8e:af: d9:b4:2a:0b:92:98:f0:d7:ae:a1:8b:b8:8a:c4:d6:c3:94:68: 56:b1:01:5c:31:99:02:db:90:76:ce:14:32:be:66:39:b4:8d: ea:33:60:5f:b8:21:fc:cc:62:55:34:f3:93:c3:e7:29:81:c8: 54:6d:2d:3d:a5:a0:bb:4b:b3:fc:d2:6f:2c:45:c6:e2:31:98: c1:fb:68:d2:94:7b:55:8a:d2:02:fa:2f:e2:30:d9:86:41:d8: 04:74:81:af:6a:1f:2e:a6:b0:06:4a:68:4a:e6:16:02:ad:db: 02:72:80:90:cf:d6:9d:07:51:fd:63:71:62:0c:7d:4d:49:93: 2c:f4:12:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksTrReb8yG5j4lgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMzA5NDc1OFoXDTI1MDYxMTA5NDc1OFowLzEtMCsGA1UEAxMk ZTA4MzVkNjQtZTYyNi00YjUyLTgzYzUtM2M0ODdmODFmNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs43rcsLKX0yAerEcVbb6Z5cueRCwl5TjtiT dkSTUv4JVWX7P5IR/M4LeVKHXrJw8ch/fpKA+aUI99nz6X5CAsVm+VIpNwxLvQX5 2CnAwOWHLYalHzCPdVetmHAjKge7DISkCQ4ItkkCf2blZLDNnPTgt+hEdd/N3EtC rrSUCeTzTqEeQg3wP2lxes915g4Li+bsNZRZO2EPDIng14RdyWhf+8Rm+GH92X7w Di+gn3pyAsQEc2j0zHWiTZ3q3oCt9qLjXDv8c99H65mN53gL/ctZkmOwPH6QdFHy fcUfV0JWE0Bebg0bB8XxfIF/q3CHGEs4Cbdh+8asY2we1P/OfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJhCdSsiL+OqyURt2G+o8S+lLr/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmIxZGQ2NjUtMTk2OC0z YTE0LWIxMWUtNzlhOTFhMzRmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeN0Cdq/9tE3tIpoGivptNuvOkCRE+qyjTDEAVPd2oOZILJcv1m4ZSe NG+3SXxlEUFNUGSdD/GdrSQ/Az8znPVZNTq2uQX9pdwcfNVXCJaWo8JmQ1mkPunl uZHS2vdF6JsEkSMlUy03FHGB8JJ8uqedYVPVvfK0DcsSdkuOr9m0KguSmPDXrqGL uIrE1sOUaFaxAVwxmQLbkHbOFDK+Zjm0jeozYF+4IfzMYlU085PD5ymByFRtLT2l oLtLs/zSbyxFxuIxmMH7aNKUe1WK0gL6L+Iw2YZB2AR0ga9qHy6msAZKaErmFgKt 2wJygJDP1p0HUf1jcWIMfU1Jkyz0Eic= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:02 2025 by rpki-client