$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa File: 2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa (raw, json) Hash identifier: tcBHf4PZnI5MQNzoHD58IAuK8udz9Ly2TuR9lJkzrlQ= Subject key identifier: 50:CE:7B:C5:87:CE:46:4B:2C:41:DA:B2:85:CE:7F:82:AE:A6:C0:4B Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A0C054665398AD0EBEF5AAC00 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36352 IP address blocks: 104.143.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:46:65:39:8a:d0:eb:ef:5a:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=2264bbea-740b-41b0-bdec-359991603e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:2a:15:94:25:93:76:c0:59:c2:3c:0f:f8: 19:20:4c:8f:91:a7:98:a3:e4:3c:47:dc:5f:df:d0: c5:98:2b:23:5d:7e:8a:3a:1d:a5:2c:c0:f7:53:0c: c4:07:db:7e:bd:95:bf:34:b9:e0:78:ae:ce:b0:46: 3b:05:0a:30:0b:33:92:e9:44:f3:ed:4a:76:46:05: fe:f5:d9:34:bd:6a:3c:6c:ca:8f:67:3c:9b:8a:db: e7:38:57:cc:cf:a5:e2:24:d9:52:fb:ce:59:5b:8e: 82:ff:e6:7a:33:89:41:24:d2:77:92:f4:d2:0a:d4: 1b:22:ec:66:37:61:d9:87:76:fc:4c:9c:7a:5d:35: 06:28:d9:e4:b2:7c:dc:b1:7d:a4:46:c4:af:aa:8f: 6b:92:a2:22:c8:1d:3b:07:51:2b:e2:31:85:8f:03: 55:f1:70:73:2d:0a:ef:aa:83:72:49:47:f3:b0:0e: cb:6f:f7:90:41:8e:7d:e4:48:97:0c:21:b9:91:bb: fb:45:89:95:70:10:8d:da:91:87:1a:a9:30:54:00: c1:c1:85:67:19:54:3b:9d:03:0f:79:aa:d9:f7:50: 0b:75:48:f8:68:8b:a8:53:6d:6f:e0:39:ac:13:bc: 18:d2:63:7a:16:b6:f5:91:19:ea:23:b2:cc:5a:43: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CE:7B:C5:87:CE:46:4B:2C:41:DA:B2:85:CE:7F:82:AE:A6:C0:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2b1dd665-1968-3a14-b11e-79a91a34fcc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:10:9c:69:1e:31:1f:3e:39:1a:bb:b8:de:25:31:aa:e1: f4:d4:ef:9b:e0:93:d8:76:03:27:69:0f:a7:69:b1:77:be:e1: 67:f1:50:c9:08:40:bb:41:ec:2f:8b:47:fb:8a:82:46:93:3f: c7:f9:c2:f4:15:da:00:19:74:8a:09:5b:3c:14:92:96:14:4d: 6a:76:57:e1:64:45:bb:89:db:83:35:a7:df:a5:7e:08:25:0d: af:63:be:24:cd:36:b3:b8:95:17:2f:4d:23:fa:b4:41:a7:5e: 9c:46:3d:f5:7f:76:45:08:4a:42:cb:1b:c5:78:59:42:72:60: c2:7b:be:ac:11:48:7d:40:8f:61:ad:56:fc:1c:1e:6a:72:ad: 1e:56:56:35:30:9c:91:66:7d:19:10:44:7f:41:e7:27:78:d6: 4c:1b:64:a2:03:88:7a:cc:bb:86:ab:0b:3b:28:3d:76:e9:b6: 9e:ef:26:c7:e3:d4:c5:c0:3d:d7:d3:bd:94:7d:3e:6f:79:3c: 80:d1:7e:ba:17:b6:25:00:62:b5:a8:e8:88:56:34:57:a5:95: 30:47:38:b9:7c:bd:da:10:aa:64:4a:7a:d1:23:20:78:f7:3d: 59:87:cf:2e:e6:94:da:49:72:5d:7e:a2:e3:ce:57:bf:7f:d1: 9e:57:6a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUZlOYrQ6+9arAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MjI2NGJiZWEtNzQwYi00MWIwLWJkZWMtMzU5OTkxNjAzZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNMqFZQlk3bAWcI8D/gZIEyPkaeYo+Q8R9xf 39DFmCsjXX6KOh2lLMD3UwzEB9t+vZW/NLngeK7OsEY7BQowCzOS6UTz7Up2RgX+ 9dk0vWo8bMqPZzybitvnOFfMz6XiJNlS+85ZW46C/+Z6M4lBJNJ3kvTSCtQbIuxm N2HZh3b8TJx6XTUGKNnksnzcsX2kRsSvqo9rkqIiyB07B1Er4jGFjwNV8XBzLQrv qoNySUfzsA7Lb/eQQY595EiXDCG5kbv7RYmVcBCN2pGHGqkwVADBwYVnGVQ7nQMP earZ91ALdUj4aIuoU21v4DmsE7wY0mN6Frb1kRnqI7LMWkMxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDOe8WHzkZLLEHasoXOf4KupsBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmIxZGQ2NjUtMTk2OC0z YTE0LWIxMWUtNzlhOTFhMzRmY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtEEJxpHjEfPjkau7jeJTGq4fTU75vgk9h2AydpD6dpsXe+4WfxUMkI QLtB7C+LR/uKgkaTP8f5wvQV2gAZdIoJWzwUkpYUTWp2V+FkRbuJ24M1p9+lfggl Da9jviTNNrO4lRcvTSP6tEGnXpxGPfV/dkUISkLLG8V4WUJyYMJ7vqwRSH1Aj2Gt VvwcHmpyrR5WVjUwnJFmfRkQRH9B5yd41kwbZKIDiHrMu4arCzsoPXbptp7vJsfj 1MXAPdfTvZR9Pm95PIDRfroXtiUAYrWo6IhWNFellTBHOLl8vdoQqmRKetEjIHj3 PVmHzy7mlNpJcl1+ouPOV79/0Z5Xak8= -----END CERTIFICATE-----Generated at Sun Jun 15 17:54:29 2025 by rpki-client