$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa File: 6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa (raw, json) Hash identifier: xy1c+1k3jbSU0eOq1hcGWlgy5rT4wN9n3zus03fvIgA= Subject key identifier: F0:7F:C7:0B:19:2D:25:CF:3F:86:8F:6F:25:EB:A5:62:4D:D1:89:93 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A0C05464168028319C2290A20 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36352 IP address blocks: 104.143.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:46:41:68:02:83:19:c2:29:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=18afaacc-24ee-40e0-ba3b-95b1e09e2da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:4f:cf:cc:88:75:44:9c:4f:e7:bb:4d:ab: 6b:2a:13:ef:d9:53:ca:b0:42:ba:cf:fe:28:dc:de: e6:94:5d:27:b6:58:39:0d:72:73:19:2c:ee:e7:7d: a7:77:71:d7:ac:b0:0c:16:1a:c0:24:9d:69:03:76: 84:9b:15:89:d2:0a:36:3e:f8:f2:c0:88:1b:44:08: 01:65:64:20:ae:2f:1f:c9:e5:21:50:23:49:2f:b2: 88:39:3a:50:3a:cf:ce:e8:5d:7f:a4:7f:a4:df:83: c5:6d:af:57:7e:ed:4d:bd:4b:db:79:62:80:95:89: 76:97:f9:5e:a7:8d:90:0b:ee:3f:f1:e5:16:c5:ea: 48:55:b5:bc:79:09:a4:67:fa:70:ac:7b:bf:50:94: bf:72:52:b9:7e:32:30:3a:3f:82:6b:bf:27:aa:5f: b2:ba:23:9c:8c:31:1b:e2:bf:9e:ed:c7:45:e6:ca: 25:32:e3:3f:e9:7c:5a:0c:c5:6f:26:b5:6c:04:a2: f1:f2:34:da:33:ef:89:4f:c3:f3:3b:52:db:c7:8b: d5:02:72:97:97:fc:6b:76:d3:0f:6f:77:a8:31:21: 5d:d3:39:94:ea:67:e5:1d:ab:09:13:c4:3e:e7:27: e8:5b:e0:9e:8c:e6:cd:84:69:68:57:18:d6:3c:00: 14:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7F:C7:0B:19:2D:25:CF:3F:86:8F:6F:25:EB:A5:62:4D:D1:89:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f712e23-0be5-3fd2-9cb7-dc83decfba88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5b:37:4c:ce:5c:3c:52:aa:d0:be:a7:a4:fb:8f:66:a5:08: 98:ba:fa:20:da:3d:06:50:41:1a:72:46:3e:a7:72:14:f7:8e: cb:44:da:97:df:88:3f:1f:8f:00:93:3a:70:7c:81:9d:e7:ae: d0:85:c2:44:50:7d:9b:51:98:dc:13:f7:7f:85:42:70:47:e9: b1:c6:ca:85:e6:86:bb:28:67:8c:cf:40:4b:7b:b9:a9:0e:c9: cc:aa:fb:87:e6:45:34:72:e4:b4:26:f4:e2:0d:17:47:70:17: 40:8e:0d:09:62:fc:30:85:f1:e4:df:3c:d5:1a:a4:7f:27:99: 38:65:57:f6:f1:ce:0e:35:ce:0d:c5:a2:b6:55:0f:1b:cb:7f: 8a:5d:76:f8:e1:8e:a7:7a:1a:c2:ff:71:56:02:f6:72:ff:18: 3a:b3:7a:ab:d7:bf:2b:e8:37:82:55:9b:d0:48:ac:20:c8:b9: 1a:cc:eb:a4:68:31:bd:c4:ce:e0:9b:f3:b4:8e:a2:ac:a0:1a: 7c:84:81:b6:c2:56:59:44:97:65:9a:71:84:7c:50:ef:16:8f: c3:1c:1a:f1:c0:50:e2:4f:db:2f:e1:66:fd:76:a5:5d:5f:ff: eb:50:39:9b:8d:c8:76:a9:1c:b2:65:86:54:df:3c:2e:25:2d: 48:9b:df:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUZBaAKDGcIpCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MThhZmFhY2MtMjRlZS00MGUwLWJhM2ItOTViMWUwOWUyZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopdPz8yIdUScT+e7TatrKhPv2VPKsEK6z/4o 3N7mlF0ntlg5DXJzGSzu532nd3HXrLAMFhrAJJ1pA3aEmxWJ0go2PvjywIgbRAgB ZWQgri8fyeUhUCNJL7KIOTpQOs/O6F1/pH+k34PFba9Xfu1NvUvbeWKAlYl2l/le p42QC+4/8eUWxepIVbW8eQmkZ/pwrHu/UJS/clK5fjIwOj+Ca78nql+yuiOcjDEb 4r+e7cdF5solMuM/6XxaDMVvJrVsBKLx8jTaM++JT8PzO1Lbx4vVAnKXl/xrdtMP b3eoMSFd0zmU6mflHasJE8Q+5yfoW+CejObNhGloVxjWPAAUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB/xwsZLSXPP4aPbyXrpWJN0YmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNmY3MTJlMjMtMGJlNS0z ZmQyLTljYjctZGM4M2RlY2ZiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFbN0zOXDxSqtC+p6T7j2alCJi6+iDaPQZQQRpyRj6nchT3jstE2pff iD8fjwCTOnB8gZ3nrtCFwkRQfZtRmNwT93+FQnBH6bHGyoXmhrsoZ4zPQEt7uakO ycyq+4fmRTRy5LQm9OINF0dwF0CODQli/DCF8eTfPNUapH8nmThlV/bxzg41zg3F orZVDxvLf4pddvjhjqd6GsL/cVYC9nL/GDqzeqvXvyvoN4JVm9BIrCDIuRrM66Ro Mb3EzuCb87SOoqygGnyEgbbCVllEl2WacYR8UO8Wj8McGvHAUOJP2y/hZv12pV1f /+tQOZuNyHapHLJlhlTfPC4lLUib3yc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:06:52 2025 by rpki-client