$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa File: 524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa (raw, json) Hash identifier: YH9XVOYfgFPS6u/+ZDBv9QpgOq9y2dqOQ8IiuA7SA4I= Subject key identifier: 1E:4F:A4:06:27:22:2F:D3:A0:BD:C7:4C:09:69:20:00:1B:3E:CC:FF Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858495E6EFC9F96D08BE8C96D4840 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa Signing time: Mon 31 Mar 2025 08:43:26 +0000 ROA not before: Mon 31 Mar 2025 08:43:26 +0000 ROA not after: Sun 29 Jun 2025 08:43:26 +0000 asID: 26658 IP address blocks: 104.128.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:6e:fc:9f:96:d0:8b:e8:c9:6d:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 31 08:43:26 2025 GMT Not After : Jun 29 08:43:26 2025 GMT Subject: CN=c96b6e6c-b5d9-4225-a0bc-bc8ef65d4270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:f9:16:5d:dd:70:17:fc:63:c6:e3:ce:c2: 9f:b2:8e:3f:75:59:81:11:8a:77:d1:df:98:c0:6b: bc:ab:45:f6:2c:60:07:f1:7e:0b:43:87:0f:3c:50: 4f:5e:ac:0f:2e:13:e7:13:cc:f1:4f:81:17:d2:31: 7c:e0:da:01:b0:10:cb:47:d7:e1:26:07:fd:f3:18: ac:49:ef:49:dd:05:f7:01:34:47:df:6d:07:ff:97: 31:ea:1d:df:44:c6:04:8d:bb:99:b8:b9:38:80:4f: 4a:cd:75:6c:7a:07:7e:4a:4e:ed:7c:df:8c:9e:f7: 2e:90:c4:a4:fd:0a:89:ed:59:7a:dc:e0:b7:c3:9e: d5:e1:ba:b3:d9:62:4e:91:3a:ab:a9:0b:6c:7a:44: ae:3d:eb:4a:42:f4:dd:17:a5:83:7a:57:8f:ee:7c: fd:aa:e5:52:4c:77:d6:bf:a0:7e:16:e3:f6:40:e9: be:f5:98:1b:54:b3:bc:17:2f:94:6f:4d:36:ce:ca: 73:45:85:6e:09:f7:16:bb:57:fa:9e:8f:a0:c8:bd: 9e:1f:a9:df:af:2e:84:bb:3e:2c:9b:2b:85:2b:d3: 07:39:05:c2:25:5a:15:11:22:20:4a:52:fe:b5:be: 36:f0:a7:6d:4e:94:8f:e0:a8:26:d8:53:7c:0b:a6: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4F:A4:06:27:22:2F:D3:A0:BD:C7:4C:09:69:20:00:1B:3E:CC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/524b59cf-1fb4-32a8-86cb-d7bcd7fad5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.128.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ff:ef:de:3a:47:d6:86:4a:52:58:29:de:6c:93:62:31:3d: 07:74:d5:c1:0e:7b:8a:74:8c:d2:59:bf:88:a1:e5:f1:85:ef: 13:e7:19:cd:36:09:b9:ba:21:fd:16:c1:95:85:d6:af:f6:79: 0a:72:b0:c7:13:ed:af:18:fb:fd:a9:6f:e5:a0:be:a3:69:c6: 2d:c8:68:c8:53:e1:30:77:37:9b:06:04:74:52:9f:89:e2:df: fe:e2:83:08:e2:76:c4:df:fb:db:b9:04:9e:c2:fb:4a:23:21: ec:a4:9f:9c:64:91:ef:67:e3:42:cf:61:a0:05:10:3e:b3:45: cb:a2:3d:98:04:34:a8:06:81:2f:98:07:dd:84:ae:ad:60:53: cf:eb:d0:c9:3e:08:b7:28:50:44:ec:76:2d:c2:17:9a:b1:58: a9:b9:4e:1e:ea:f0:3a:75:c2:fc:65:08:0b:6b:b7:3b:ac:e6: f4:b3:ab:fa:fa:d0:f9:20:3d:42:33:75:6e:30:3b:a1:36:9f: b0:27:48:6f:d9:26:4f:eb:49:0a:38:63:5c:e6:3b:2d:a8:ca: 12:df:06:df:22:99:e0:74:1c:10:58:ec:46:9b:5f:9d:f2:46: 92:0d:88:d1:9f:6f:01:a0:0c:c6:17:23:8e:43:d9:c3:98:1f: 93:79:ce:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElebvyfltCL6MltSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMzMTA4NDMyNloXDTI1MDYyOTA4NDMyNlowLzEtMCsGA1UEAxMk Yzk2YjZlNmMtYjVkOS00MjI1LWEwYmMtYmM4ZWY2NWQ0MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApan5Fl3dcBf8Y8bjzsKfso4/dVmBEYp30d+Y wGu8q0X2LGAH8X4LQ4cPPFBPXqwPLhPnE8zxT4EX0jF84NoBsBDLR9fhJgf98xis Se9J3QX3ATRH320H/5cx6h3fRMYEjbuZuLk4gE9KzXVsegd+Sk7tfN+MnvcukMSk /QqJ7Vl63OC3w57V4bqz2WJOkTqrqQtsekSuPetKQvTdF6WDeleP7nz9quVSTHfW v6B+FuP2QOm+9ZgbVLO8Fy+Ub002zspzRYVuCfcWu1f6no+gyL2eH6nfry6Euz4s myuFK9MHOQXCJVoVESIgSlL+tb428KdtTpSP4Kgm2FN8C6aoCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5PpAYnIi/ToL3HTAlpIAAbPsz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNTI0YjU5Y2YtMWZiNC0z MmE4LTg2Y2ItZDdiY2Q3ZmFkNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj/7946R9aGSlJYKd5sk2IxPQd01cEOe4p0jNJZv4ih5fGF7xPnGc02 Cbm6If0WwZWF1q/2eQpysMcT7a8Y+/2pb+WgvqNpxi3IaMhT4TB3N5sGBHRSn4ni 3/7igwjidsTf+9u5BJ7C+0ojIeykn5xkke9n40LPYaAFED6zRcuiPZgENKgGgS+Y B92Erq1gU8/r0Mk+CLcoUETsdi3CF5qxWKm5Th7q8Dp1wvxlCAtrtzus5vSzq/r6 0PkgPUIzdW4wO6E2n7AnSG/ZJk/rSQo4Y1zmOy2oyhLfBt8imeB0HBBY7EabX53y RpINiNGfbwGgDMYXI45D2cOYH5N5zqw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:47:55 2025 by rpki-client