$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa File: b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa (raw, json) Hash identifier: 7pAhnYUM+QnAWf1Q3U8TmmjGiKMAAiKXxUUyJ0ITdIU= Subject key identifier: D9:89:C3:BF:3C:8F:C1:1C:16:8F:9B:1E:05:FC:8A:0D:FA:EA:DE:4F Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858492C4F8DE536EDE07FDEB6FEC0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa Signing time: Thu 13 Mar 2025 09:49:41 +0000 ROA not before: Thu 13 Mar 2025 09:49:41 +0000 ROA not after: Wed 11 Jun 2025 09:49:41 +0000 asID: 36352 IP address blocks: 104.143.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:4f:8d:e5:36:ed:e0:7f:de:b6:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 13 09:49:41 2025 GMT Not After : Jun 11 09:49:41 2025 GMT Subject: CN=d3035fb5-a5be-4f83-99a6-05ca607e9abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:29:2f:f2:a5:6b:36:db:03:b5:c9:df:2b: aa:a7:38:f8:bd:66:9a:1c:fb:08:62:87:1a:2d:41: 8d:3d:66:49:5e:1c:5b:57:6e:71:0f:e5:27:da:2d: 55:b3:4d:3a:52:ac:03:96:dd:ab:63:b3:6d:c0:a4: d4:96:82:3f:c2:92:b6:2d:1f:cc:a0:41:f8:02:38: bf:fb:be:60:06:4b:c8:5a:c0:08:5a:9c:31:eb:db: 7f:55:05:84:c9:1a:37:84:77:a4:fa:77:fd:a1:b7: bd:ea:cb:58:9e:ac:fb:f4:7f:a7:fd:a5:12:04:06: fc:ec:1a:90:c5:e5:89:6c:76:16:d1:1b:33:3e:bb: 45:8a:fa:0c:d4:c5:a0:54:d4:a1:06:80:19:0e:b1: c5:14:b5:53:96:cd:5e:ab:0c:99:c0:ec:09:66:a8: d4:e2:c5:5c:45:9f:eb:a7:c8:26:e9:ee:8f:17:b5: 97:42:b2:16:0b:8f:ce:ef:3a:84:67:4d:db:a2:39: 8c:97:10:15:c2:4a:aa:0a:4b:c5:3b:fa:6b:5f:0e: 65:88:e8:a2:7f:a1:9b:0c:37:e6:0d:0d:b5:c1:aa: cc:93:5f:78:a8:40:2c:e3:1a:fb:85:d0:5c:79:8d: 3a:9f:c8:36:4c:ce:2a:53:80:56:d3:cb:39:b4:2c: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:C3:BF:3C:8F:C1:1C:16:8F:9B:1E:05:FC:8A:0D:FA:EA:DE:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4c:15:2d:c0:73:39:06:24:2c:f7:6f:91:cd:56:7d:9a:f2: 70:75:62:c6:5d:93:b3:19:47:02:3c:9f:b1:f2:aa:1a:51:22: 9e:cc:4b:a3:41:36:1c:f6:19:76:41:a7:48:09:a7:7d:53:ca: 99:db:e6:3d:b2:c9:0b:64:a8:dc:53:8a:f7:25:79:c6:33:59: a5:bc:fc:9f:03:9b:26:90:72:e2:bd:02:be:cb:2a:1e:37:0f: 9e:cc:25:08:80:21:29:fb:36:81:ba:30:7d:e1:0b:e9:3b:aa: d1:29:a5:ed:94:91:47:a0:fc:34:40:de:e6:90:7a:62:f3:33: d0:c2:50:f2:32:bb:21:1d:7d:7c:14:13:48:32:1a:49:f5:b6: ec:26:75:73:fc:24:f2:f5:91:12:e1:70:62:69:eb:8a:98:9e: 16:15:74:cd:04:76:49:7b:b9:98:d8:01:97:cb:89:d9:01:96: 9b:b7:bf:0a:24:c4:37:44:27:5f:e2:4a:ea:06:61:8c:80:a9: 16:0e:17:d9:a4:0f:ec:10:83:3f:44:b0:a8:99:36:f7:6b:a9: 0d:e7:b4:f1:96:ae:a5:68:0f:77:13:e2:79:dc:ec:54:1a:c9: f7:c8:3b:38:71:e6:56:03:69:e7:dd:6e:5d:5d:a6:6c:e4:2f: 13:a1:88:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksT43lNu3gf962/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMzA5NDk0MVoXDTI1MDYxMTA5NDk0MVowLzEtMCsGA1UEAxMk ZDMwMzVmYjUtYTViZS00ZjgzLTk5YTYtMDVjYTYwN2U5YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwopL/KlazbbA7XJ3yuqpzj4vWaaHPsIYoca LUGNPWZJXhxbV25xD+Un2i1Vs006UqwDlt2rY7NtwKTUloI/wpK2LR/MoEH4Aji/ +75gBkvIWsAIWpwx69t/VQWEyRo3hHek+nf9obe96stYnqz79H+n/aUSBAb87BqQ xeWJbHYW0RszPrtFivoM1MWgVNShBoAZDrHFFLVTls1eqwyZwOwJZqjU4sVcRZ/r p8gm6e6PF7WXQrIWC4/O7zqEZ03bojmMlxAVwkqqCkvFO/prXw5liOiif6GbDDfm DQ21warMk194qEAs4xr7hdBceY06n8g2TM4qU4BW08s5tCxA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmJw788j8EcFo+bHgX8ig366t5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjAyOGUwZjktNDc4ZS0z ZTM4LWE4YzUtNTc4OWVlNGY3ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJMFS3AczkGJCz3b5HNVn2a8nB1YsZdk7MZRwI8n7HyqhpRIp7MS6NB Nhz2GXZBp0gJp31Typnb5j2yyQtkqNxTivclecYzWaW8/J8DmyaQcuK9Ar7LKh43 D57MJQiAISn7NoG6MH3hC+k7qtEppe2UkUeg/DRA3uaQemLzM9DCUPIyuyEdfXwU E0gyGkn1tuwmdXP8JPL1kRLhcGJp64qYnhYVdM0Edkl7uZjYAZfLidkBlpu3vwok xDdEJ1/iSuoGYYyAqRYOF9mkD+wQgz9EsKiZNvdrqQ3ntPGWrqVoD3cT4nnc7FQa yffIOzhx5lYDaefdbl1dpmzkLxOhiIs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:13 2025 by rpki-client