$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa File: 91d10d04-d56b-3251-ab6a-17d723896f38.roa (raw, json) Hash identifier: acwUbIo+YgUN/4eFisQFqsAT+3njkD0dcbU3uBRdTV8= Subject key identifier: 04:1B:96:16:ED:C5:E9:2E:88:9F:FE:BE:5A:86:6D:02:B0:12:31:DE Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A066FE85FB0C0397F770FD708 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa Signing time: Fri 30 May 2025 13:01:03 +0000 ROA not before: Fri 30 May 2025 13:01:03 +0000 ROA not after: Thu 28 Aug 2025 13:01:03 +0000 asID: 18779 IP address blocks: 104.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6f:e8:5f:b0:c0:39:7f:77:0f:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 30 13:01:03 2025 GMT Not After : Aug 28 13:01:03 2025 GMT Subject: CN=832cb58d-2cbc-45e1-bc9a-d8ca976acfda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:8b:d5:85:e5:ff:70:cd:34:2b:4e:2e:3f: 89:5e:2c:3b:7e:0f:8e:f8:c4:2d:fa:2a:15:b7:d7: 66:88:c8:87:4a:52:8a:b0:40:c1:f2:cd:a7:4e:7f: 59:c8:af:c0:93:75:70:96:2e:f7:e2:23:d0:71:33: 24:1a:dc:88:f1:4b:c2:dd:09:3b:07:8e:04:48:a3: 8c:94:48:86:14:02:ad:78:ee:43:a7:ca:76:37:eb: b8:5a:91:d9:7f:37:a6:d7:5c:82:76:eb:73:cd:b9: df:22:e3:57:9b:36:7d:fb:ec:64:e0:30:c5:73:74: 93:2a:dd:7b:0f:60:50:93:67:e2:c2:30:c0:40:cf: 40:46:bc:93:b5:37:19:39:40:d3:91:c8:b1:e5:60: b6:6e:40:f8:22:2c:69:df:8c:f6:72:c0:07:9f:70: 0a:39:17:7b:f9:b3:4d:0a:71:03:57:7b:a2:e8:4b: f3:0b:70:41:c1:c5:1d:98:06:20:ab:f3:82:49:ad: 4b:d7:73:0d:b7:6c:bd:c5:62:33:70:13:79:63:ed: 96:b2:aa:cf:0b:d3:1e:62:3f:1e:86:44:2e:72:9a: 36:cd:7a:8b:f7:01:05:33:4f:ed:5f:97:77:6a:b3: 1c:c0:7f:70:44:a7:a2:72:69:74:c8:d2:0e:7b:04: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1B:96:16:ED:C5:E9:2E:88:9F:FE:BE:5A:86:6D:02:B0:12:31:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:14:90:3c:b3:0c:fc:8c:8d:8f:af:4c:81:07:7a:6a:8a:67: de:87:12:6d:77:2e:f9:8c:c2:26:cf:cf:bf:9f:4c:5e:ab:c6: b3:60:f9:83:24:0a:29:a1:48:3b:9e:92:d3:cc:01:c9:26:48: 1a:70:65:66:29:e8:f8:f9:6b:87:87:d2:71:89:f4:00:1f:b8: 7e:7a:e3:1a:64:82:87:37:64:d4:8e:d1:d8:7b:b8:2b:59:93: 65:3d:2d:77:df:cc:45:fd:ea:88:5e:ea:c3:c7:a3:72:03:99: 5e:33:35:16:3f:87:30:e7:f8:ef:9f:6b:a9:01:58:38:7d:bb: 4e:22:d9:ed:cf:0a:b0:7e:1b:f8:75:31:2e:00:db:dc:c0:12: 40:d9:51:34:55:5f:3f:f0:69:f5:4b:3a:bb:46:d1:d4:75:1b: 58:25:7d:e0:38:b6:f7:be:bc:7d:86:b2:8c:7c:56:85:50:b7: 2b:74:55:4e:99:74:1d:6e:d3:a1:16:d9:32:4a:69:41:b3:df: 24:a6:84:17:00:b1:35:8a:d7:39:59:f5:1c:03:d2:b3:7b:69: de:68:62:84:97:b8:6c:8f:39:0d:b6:ba:ba:90:5d:48:b9:e6: 13:59:4a:0f:f7:23:7f:14:8e:29:f5:8f:62:6a:ff:89:f7:bc: 8e:9a:87:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGb+hfsMA5f3cP1wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDUzMDEzMDEwM1oXDTI1MDgyODEzMDEwM1owLzEtMCsGA1UEAxMk ODMyY2I1OGQtMmNiYy00NWUxLWJjOWEtZDhjYTk3NmFjZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp+L1YXl/3DNNCtOLj+JXiw7fg+O+MQt+ioV t9dmiMiHSlKKsEDB8s2nTn9ZyK/Ak3Vwli734iPQcTMkGtyI8UvC3Qk7B44ESKOM lEiGFAKteO5Dp8p2N+u4WpHZfzem11yCdutzzbnfIuNXmzZ9++xk4DDFc3STKt17 D2BQk2fiwjDAQM9ARryTtTcZOUDTkcix5WC2bkD4Iixp34z2csAHn3AKORd7+bNN CnEDV3ui6EvzC3BBwcUdmAYgq/OCSa1L13MNt2y9xWIzcBN5Y+2WsqrPC9MeYj8e hkQucpo2zXqL9wEFM0/tX5d3arMcwH9wRKeicml0yNIOewRgKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQblhbtxekuiJ/+vlqGbQKwEjHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvOTFkMTBkMDQtZDU2Yi0z MjUxLWFiNmEtMTdkNzIzODk2ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwUkDyzDPyMjY+vTIEHemqKZ96HEm13LvmMwibPz7+fTF6rxrNg+YMk CimhSDuektPMAckmSBpwZWYp6Pj5a4eH0nGJ9AAfuH564xpkgoc3ZNSO0dh7uCtZ k2U9LXffzEX96ohe6sPHo3IDmV4zNRY/hzDn+O+fa6kBWDh9u04i2e3PCrB+G/h1 MS4A29zAEkDZUTRVXz/wafVLOrtG0dR1G1glfeA4tve+vH2Gsox8VoVQtyt0VU6Z dB1u06EW2TJKaUGz3ySmhBcAsTWK1zlZ9RwD0rN7ad5oYoSXuGyPOQ22urqQXUi5 5hNZSg/3I38Ujin1j2Jq/4n3vI6ah/k= -----END CERTIFICATE-----Generated at Mon Jun 16 13:01:53 2025 by rpki-client