$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa File: b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa (raw, json) Hash identifier: L7VUq4pTjyByIdXx/SXdcgi8pLGQKu++gMMDFPWYu2Y= Subject key identifier: 89:ED:55:F6:C2:11:04:41:83:58:C4:71:F5:8F:3C:BA:1E:44:7B:CC Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A0C0546838BBEE593540C6200 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 36352 IP address blocks: 104.143.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:46:83:8b:be:e5:93:54:0c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0cb09c79-b818-4746-b530-d53821ebb75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:52:8a:25:de:b5:e6:0c:b9:e5:26:51:cc: 89:c3:d7:a7:10:e8:b9:92:1c:04:63:30:eb:30:74: 21:24:89:2f:f8:cb:71:cb:71:02:94:dd:59:b2:c4: 3e:69:3c:07:55:92:4e:47:b6:1a:bb:19:f3:8f:d8: 2c:26:3a:ae:a1:7a:6c:d2:9a:0a:e3:61:03:2b:d8: a1:c1:b5:cb:d4:aa:4c:0f:cd:3f:4a:13:13:3f:eb: 48:0a:1c:58:89:e2:25:fe:0f:bb:5d:a9:cd:24:75: 76:d0:fa:30:54:35:be:1c:9f:8f:d2:67:6a:6e:0a: 73:90:0f:c6:47:39:76:c4:84:aa:d9:f8:c2:09:d7: da:19:81:a2:21:fb:1a:a3:9c:63:10:d9:c8:30:7c: 6d:58:09:1d:09:76:54:7b:f1:ce:0f:fc:08:84:b8: 96:e6:68:67:50:06:0e:b6:ae:1a:3d:d6:48:b6:03: ad:d1:4a:aa:aa:e8:3a:8a:df:0b:11:fd:a5:6f:e0: af:44:f9:c8:3c:5e:86:16:89:f7:d3:55:28:c4:a3: 62:0a:e0:be:fc:a2:73:9c:73:66:45:31:27:d5:cb: 4c:8a:53:a9:9a:5a:24:8a:d6:03:59:ba:52:e1:5a: eb:ed:00:70:2b:25:55:6c:2e:23:62:3f:21:90:28: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:ED:55:F6:C2:11:04:41:83:58:C4:71:F5:8F:3C:BA:1E:44:7B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:18:bd:e1:26:2a:8b:da:1b:55:8e:6e:3c:56:80:bd:59:1b: fa:01:6e:9f:9b:21:a5:23:0c:84:b0:f2:94:48:32:f8:41:d6: 26:3a:50:0f:99:9a:c1:9e:ab:08:b0:b8:a4:28:0f:5d:ec:e8: 37:3b:e9:29:ef:ee:31:ac:0b:bb:28:1d:7f:ba:63:a6:7f:48: 15:35:9a:11:dd:7d:85:77:5c:4f:5c:76:b2:87:e0:5e:17:a0: f5:e4:d0:90:7d:29:d1:6f:91:6b:f7:e1:21:6c:dc:b9:64:e0: 0c:6f:7d:7b:fe:14:03:61:de:9c:c9:74:dd:6a:4b:50:e3:2c: a3:07:56:e5:f9:9c:50:5e:47:72:d5:41:a4:1c:65:cb:3c:5e: 6c:82:f5:ea:8b:25:e1:2a:dc:c4:60:41:31:f5:1c:5a:09:6c: bd:20:8f:fe:83:db:bf:f3:9e:99:42:74:1c:87:89:46:98:df: 3a:27:a5:b2:2a:ea:53:b6:a5:ee:e0:03:53:8a:53:0d:1e:35: 06:34:5b:3b:8c:03:0b:3e:59:a2:18:e8:9c:b8:69:87:68:8e: cb:48:fe:b1:11:0c:d9:b1:ad:a4:0b:a4:d8:ca:8d:3d:15:b9: 51:b6:7c:57:4f:cf:c4:96:fd:13:2d:e7:83:2c:bb:e2:9a:9c: 4c:32:13:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUaDi77lk1QMYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MGNiMDljNzktYjgxOC00NzQ2LWI1MzAtZDUzODIxZWJiNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkolSiiXeteYMueUmUcyJw9enEOi5khwEYzDr MHQhJIkv+Mtxy3EClN1ZssQ+aTwHVZJOR7Yauxnzj9gsJjquoXps0poK42EDK9ih wbXL1KpMD80/ShMTP+tIChxYieIl/g+7XanNJHV20PowVDW+HJ+P0mdqbgpzkA/G Rzl2xISq2fjCCdfaGYGiIfsao5xjENnIMHxtWAkdCXZUe/HOD/wIhLiW5mhnUAYO tq4aPdZItgOt0Uqqqug6it8LEf2lb+CvRPnIPF6GFon301UoxKNiCuC+/KJznHNm RTEn1ctMilOpmlokitYDWbpS4Vrr7QBwKyVVbC4jYj8hkChqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIntVfbCEQRBg1jEcfWPPLoeRHvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjAyOGUwZjktNDc4ZS0z ZTM4LWE4YzUtNTc4OWVlNGY3ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4YveEmKovaG1WObjxWgL1ZG/oBbp+bIaUjDISw8pRIMvhB1iY6UA+Z msGeqwiwuKQoD13s6Dc76Snv7jGsC7soHX+6Y6Z/SBU1mhHdfYV3XE9cdrKH4F4X oPXk0JB9KdFvkWv34SFs3Llk4AxvfXv+FANh3pzJdN1qS1DjLKMHVuX5nFBeR3LV QaQcZcs8XmyC9eqLJeEq3MRgQTH1HFoJbL0gj/6D27/znplCdByHiUaY3zonpbIq 6lO2pe7gA1OKUw0eNQY0WzuMAws+WaIY6Jy4aYdojstI/rERDNmxraQLpNjKjT0V uVG2fFdPz8SW/RMt54Msu+KanEwyE5s= -----END CERTIFICATE-----Generated at Sun Jun 15 17:02:30 2025 by rpki-client