$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa File: 699655ff-aa2d-39e7-955c-544e3645c5e8.roa (raw, json) Hash identifier: YvWDgnPCqbuFYUgB927K4DNmoSDTBj1LvEYAEMHq+tM= Subject key identifier: 95:92:F2:68:AA:DE:7A:82:F5:F8:83:DA:76:21:43:8D:38:15:C7:CD Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A0C0546E4093422DBC95240B0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36352 IP address blocks: 104.143.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:46:e4:09:34:22:db:c9:52:40:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=27efa659-35c8-4d02-8f4f-475f59e025aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:f2:43:f3:3e:d9:36:d7:69:bf:6c:d5:60: 1d:66:be:84:6e:a8:f4:b9:38:6f:17:8c:dc:f1:da: 1b:ab:ac:bb:28:47:a8:eb:6c:04:bd:95:18:05:5d: 8c:74:85:ab:47:92:0e:ac:0b:a1:1f:dc:5e:38:1f: 9a:88:a1:de:54:97:0c:00:06:60:bf:05:7b:c3:79: d9:e7:4c:20:98:77:e2:e6:d3:20:a3:1f:e9:84:47: 4b:85:55:cd:dd:90:22:6e:21:c5:45:52:ca:45:88: 37:04:d1:76:5e:08:30:13:99:22:64:fb:e0:6b:a9: e8:8f:77:86:51:68:cb:22:b7:64:61:e1:03:b6:69: 33:44:9a:24:da:99:19:4b:8a:0d:5f:e5:86:4b:5f: ee:51:f6:f8:dc:62:9d:04:ce:b7:8b:6d:89:bd:13: 02:a5:db:d7:8c:86:5d:f9:ef:22:22:0b:95:d6:6b: 5b:5d:1a:ec:eb:a5:8b:03:ad:7a:87:dd:cf:75:ef: d6:00:c3:9d:a1:d9:b8:ac:29:ec:5d:39:4b:5d:c5: 21:93:a5:b7:11:54:af:bf:10:bb:9c:62:c7:95:72: 81:cc:6b:33:37:43:a1:fc:95:96:e6:37:7d:32:90: 07:c5:ff:34:5b:a8:f3:3d:7a:b0:e4:53:d1:1a:2d: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:92:F2:68:AA:DE:7A:82:F5:F8:83:DA:76:21:43:8D:38:15:C7:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/699655ff-aa2d-39e7-955c-544e3645c5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:2f:a2:04:f4:89:39:8b:4a:7d:65:00:82:df:5a:55:2f:f2: 5d:bf:58:9c:8d:3b:ff:e9:e7:40:a8:e0:79:50:b4:50:85:77: 25:b8:85:ed:a2:cd:9c:d8:36:da:4e:39:a8:55:da:c8:fd:51: 59:b5:5c:30:8e:64:c9:58:27:fa:06:8c:8c:85:6a:d3:40:54: fe:a2:68:48:f9:a2:3b:4a:b1:d2:59:e6:75:45:1e:d5:f8:83: 81:a7:cd:d8:60:8e:d2:15:56:bc:b8:66:0f:8e:a5:a1:b6:cb: 6f:7e:76:13:65:aa:f6:07:db:82:0d:7d:51:40:4a:25:11:61: 59:87:6e:a4:c6:0c:c3:c2:63:00:90:96:07:97:e2:6b:73:10: 39:25:3b:fd:9b:32:72:6d:ac:e6:b6:f4:c3:bc:f2:21:1f:ca: 5d:31:83:14:a0:e0:db:61:7a:bb:66:17:2b:55:d6:dd:db:8c: a8:61:3f:5a:61:ef:c9:0b:93:a3:66:c1:f0:1d:ac:b5:fc:55: 5f:ab:bc:82:12:ec:28:64:bf:0f:a7:a3:52:cb:65:cd:b3:09: 0a:db:4d:ca:d1:51:1d:8e:5f:ef:85:1f:7f:ac:ae:1d:65:bb: fd:60:71:aa:e8:fd:37:9a:e5:a7:4a:e0:2e:f9:12:6d:ca:af: 0c:60:db:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUbkCTQi28lSQLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MjdlZmE2NTktMzVjOC00ZDAyLThmNGYtNDc1ZjU5ZTAyNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht/yQ/M+2TbXab9s1WAdZr6Ebqj0uThvF4zc 8dobq6y7KEeo62wEvZUYBV2MdIWrR5IOrAuhH9xeOB+aiKHeVJcMAAZgvwV7w3nZ 50wgmHfi5tMgox/phEdLhVXN3ZAibiHFRVLKRYg3BNF2XggwE5kiZPvga6noj3eG UWjLIrdkYeEDtmkzRJok2pkZS4oNX+WGS1/uUfb43GKdBM63i22JvRMCpdvXjIZd +e8iIguV1mtbXRrs66WLA616h93Pde/WAMOdodm4rCnsXTlLXcUhk6W3EVSvvxC7 nGLHlXKBzGszN0Oh/JWW5jd9MpAHxf80W6jzPXqw5FPRGi0B1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWS8miq3nqC9fiD2nYhQ404FcfNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNjk5NjU1ZmYtYWEyZC0z OWU3LTk1NWMtNTQ0ZTM2NDVjNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKovogT0iTmLSn1lAILfWlUv8l2/WJyNO//p50Co4HlQtFCFdyW4he2i zZzYNtpOOahV2sj9UVm1XDCOZMlYJ/oGjIyFatNAVP6iaEj5ojtKsdJZ5nVFHtX4 g4GnzdhgjtIVVry4Zg+OpaG2y29+dhNlqvYH24INfVFASiURYVmHbqTGDMPCYwCQ lgeX4mtzEDklO/2bMnJtrOa29MO88iEfyl0xgxSg4NthertmFytV1t3bjKhhP1ph 78kLk6NmwfAdrLX8VV+rvIIS7Chkvw+no1LLZc2zCQrbTcrRUR2OX++FH3+srh1l u/1gcaro/Tea5adK4C75Em3Krwxg26s= -----END CERTIFICATE-----Generated at Sun Jun 15 17:11:07 2025 by rpki-client