$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa File: d86a3712-c3b9-3045-ada8-f4f640a943be.roa (raw, json) Hash identifier: 1GuuMl+mDEUbpI0JCQoW7ilHjIsJJ4HG1voQdMyIvdA= Subject key identifier: E4:6F:E2:59:10:61:8B:C7:6D:CD:26:AF:8B:C5:55:B3:0F:BD:31:62 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584A066FE891088F422F787F30E0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa Signing time: Fri 30 May 2025 13:01:03 +0000 ROA not before: Fri 30 May 2025 13:01:03 +0000 ROA not after: Thu 28 Aug 2025 13:01:03 +0000 asID: 18779 IP address blocks: 104.143.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6f:e8:91:08:8f:42:2f:78:7f:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 30 13:01:03 2025 GMT Not After : Aug 28 13:01:03 2025 GMT Subject: CN=94369cca-2b32-408d-9d6b-2d0ee4c393dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:93:88:2b:93:c4:4e:96:fb:2e:fc:68:38:2e: 05:c5:50:03:00:d3:1a:86:07:38:ba:17:5f:42:1a: 0b:ef:e6:09:81:2c:38:73:38:4e:8e:e7:47:a2:3c: 0c:48:ae:bc:75:6a:d8:1d:11:cb:3f:2e:b9:ae:53: 39:63:d3:f1:32:5a:92:0f:58:2b:7d:b8:78:68:4c: 08:58:21:3f:c3:89:73:a0:46:fe:1c:a0:cc:f7:89: 55:a6:f3:54:fa:7d:33:87:3a:a3:0b:80:81:30:e6: 6c:8c:84:16:e6:72:51:e8:1e:61:c8:d5:2a:87:30: 56:38:27:e4:70:ca:66:89:0f:0c:e9:a4:42:d2:a3: d3:18:46:93:a1:ec:7c:fc:f2:dc:8d:2c:2c:8f:ef: 19:54:8d:42:74:ca:c9:9f:61:3e:4c:05:6f:c8:18: 76:9f:aa:f5:81:83:06:82:30:b7:1c:8d:2c:cc:a6: fe:cf:51:fc:3c:61:b1:9b:3e:fa:53:3d:00:63:02: bd:cc:9c:89:09:34:11:1a:5d:a8:45:ea:ef:fc:5d: 04:40:39:7c:c3:16:f0:95:09:6f:c1:0f:60:15:2f: 8b:02:25:17:cf:d9:ec:4d:51:7b:d2:2b:ac:9c:c9: e5:ec:61:e1:ae:8c:2e:4a:e3:d9:23:b1:bc:00:8d: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6F:E2:59:10:61:8B:C7:6D:CD:26:AF:8B:C5:55:B3:0F:BD:31:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/d86a3712-c3b9-3045-ada8-f4f640a943be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:93:0a:75:00:74:31:2d:4d:a9:2d:cc:39:ba:ab:91:4e:36: 73:6c:39:c8:49:87:b1:45:87:e1:3f:67:26:55:2a:57:f2:b0: 5b:4c:1f:62:ec:25:4a:51:0c:4e:33:58:1b:29:ec:ee:37:2b: 2b:dc:0d:b2:30:98:5a:af:fc:c9:74:3b:11:c4:b6:56:d5:05: a6:2b:fc:28:0f:b9:8d:87:3e:93:6c:ba:75:b4:27:94:17:f9: 60:fe:1d:9b:33:85:e9:2c:9d:98:6d:6b:65:3b:0a:af:0e:60: 94:39:7b:02:e1:91:d1:43:da:25:a8:e9:47:e2:5f:83:08:fe: 3f:7f:26:d3:f3:f2:f7:3d:d9:90:70:77:03:b4:d7:1e:39:22: 9d:07:e6:88:ba:4e:3d:02:e3:dd:a4:47:21:c1:9c:09:25:97: 26:8e:60:df:40:19:ae:f4:3a:12:6c:eb:40:5c:a5:09:09:9c: 35:21:f8:c8:c5:ba:1b:b2:c1:08:8c:9b:6e:c0:03:07:81:48: 54:d8:1b:b4:8b:47:ec:c7:03:e8:ac:55:8a:26:1a:83:17:ab: e6:81:84:d1:05:36:5f:32:c6:24:e5:cd:3f:4b:dc:2d:cd:8f: 41:d3:d5:e8:00:74:ba:0e:1f:fb:f0:25:92:86:c5:8b:36:20: 9e:77:ba:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGb+iRCI9CL3h/MOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDUzMDEzMDEwM1oXDTI1MDgyODEzMDEwM1owLzEtMCsGA1UEAxMk OTQzNjljY2EtMmIzMi00MDhkLTlkNmItMmQwZWU0YzM5M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5OIK5PETpb7LvxoOC4FxVADANMahgc4uhdf QhoL7+YJgSw4czhOjudHojwMSK68dWrYHRHLPy65rlM5Y9PxMlqSD1grfbh4aEwI WCE/w4lzoEb+HKDM94lVpvNU+n0zhzqjC4CBMOZsjIQW5nJR6B5hyNUqhzBWOCfk cMpmiQ8M6aRC0qPTGEaToex8/PLcjSwsj+8ZVI1CdMrJn2E+TAVvyBh2n6r1gYMG gjC3HI0szKb+z1H8PGGxmz76Uz0AYwK9zJyJCTQRGl2oRerv/F0EQDl8wxbwlQlv wQ9gFS+LAiUXz9nsTVF70iusnMnl7GHhrowuSuPZI7G8AI1ijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORv4lkQYYvHbc0mr4vFVbMPvTFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZDg2YTM3MTItYzNiOS0z MDQ1LWFkYTgtZjRmNjQwYTk0M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6TCnUAdDEtTaktzDm6q5FONnNsOchJh7FFh+E/ZyZVKlfysFtMH2Ls JUpRDE4zWBsp7O43KyvcDbIwmFqv/Ml0OxHEtlbVBaYr/CgPuY2HPpNsunW0J5QX +WD+HZszheksnZhta2U7Cq8OYJQ5ewLhkdFD2iWo6UfiX4MI/j9/JtPz8vc92ZBw dwO01x45Ip0H5oi6Tj0C492kRyHBnAkllyaOYN9AGa70OhJs60BcpQkJnDUh+MjF uhuywQiMm27AAweBSFTYG7SLR+zHA+isVYomGoMXq+aBhNEFNl8yxiTlzT9L3C3N j0HT1egAdLoOH/vwJZKGxYs2IJ53ulg= -----END CERTIFICATE-----Generated at Mon Jun 16 21:11:01 2025 by rpki-client