$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa File: 6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa (raw, json) Hash identifier: F+Z1EF08ACw4wJ4j2zoi7aNiBLhMbbksRZ46V2N6FjY= Subject key identifier: 51:BE:EE:7B:17:59:F6:52:6C:40:C9:F7:43:1B:51:BB:10:E7:6E:99 Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584953C41E7A543FE56CC8078170 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 393653 IP address blocks: 104.128.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1e:7a:54:3f:e5:6c:c8:07:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=4ede1221-ca12-4dec-8c96-ec0b161e12e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:17:9e:8d:68:fd:f4:c0:07:19:1f:11:87: 3a:39:b2:57:52:c6:c9:b5:0e:b6:5d:0d:07:64:e9: 53:20:8c:6d:2a:b1:b6:29:93:3a:45:a9:7b:42:86: e5:67:f3:a2:ae:4e:07:91:e5:9e:36:79:11:88:7f: 21:8d:30:84:60:97:b6:b8:ee:89:12:95:4f:01:4a: 71:be:b0:ff:8e:81:f9:df:cc:25:f8:85:80:ab:e5: b7:19:d1:bb:62:56:0e:96:e3:e5:b9:2a:c1:c8:10: 01:40:21:5e:75:50:5c:ef:66:33:28:71:db:d6:8b: ca:5b:05:c2:07:fc:bd:23:ed:0a:ab:d5:06:77:ed: d7:35:ca:9f:f2:80:0b:cf:32:2b:36:11:8d:50:f0: 39:b8:06:48:04:e2:97:39:65:a1:49:62:0e:ec:ef: 44:b7:a4:70:af:aa:25:97:a2:f3:d0:d7:db:1d:43: e9:8d:7b:1b:c0:39:53:67:7a:58:41:19:5e:bf:50: 13:7d:5c:95:47:95:cf:81:61:74:a7:91:84:ab:79: 55:06:db:83:87:7f:dd:9f:07:55:48:f6:9b:10:2f: b9:5b:74:e4:b0:82:80:8d:81:43:61:ac:2f:cf:3a: 88:cb:66:fe:ae:d6:ed:48:23:70:7a:f0:a3:99:12: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BE:EE:7B:17:59:F6:52:6C:40:C9:F7:43:1B:51:BB:10:E7:6E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:aa:00:69:1d:24:90:cd:e0:3e:62:7d:ec:20:65:ce:d8:da: c1:6c:80:68:43:9b:7f:24:50:6e:7a:fe:08:98:76:67:69:6c: 8e:34:d0:ff:53:b5:c1:f9:f1:34:98:84:f7:e1:10:bf:54:41: 53:b9:e0:5c:14:07:2c:95:a3:f5:1b:a5:76:c3:ad:e8:69:d5: 39:9a:a0:cd:c7:eb:ef:85:9f:a7:47:73:86:21:f5:a7:4d:ab: c7:7b:6a:64:f2:ea:cf:e4:74:80:fc:64:cd:03:81:f8:19:24: 88:0f:fc:d9:32:06:94:d4:e0:6b:b5:80:a7:f5:c2:47:b1:02: 05:02:f3:b9:b8:11:95:b5:86:4c:5d:90:2b:37:4a:5f:a1:c4: 0b:69:c4:92:2e:ec:b2:88:f4:ec:55:da:10:70:72:f0:22:1f: d2:8f:9e:a1:8a:ce:6a:2b:16:98:39:fb:52:13:18:20:cb:a8: 14:58:cb:96:d6:4a:af:00:7c:df:6d:8b:6e:e2:fb:8b:e5:d2: 9f:73:f7:2f:c3:6b:63:c6:3c:b2:92:19:71:25:b2:b5:9b:1f: 21:cb:03:9f:3d:9c:2b:0f:95:a2:b1:ff:b6:d0:9e:59:35:5f: 4c:26:77:50:49:8c:39:30:ed:91:35:d3:ad:b6:7d:3f:19:bd: 1c:1f:39:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB56VD/lbMgHgXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGVkZTEyMjEtY2ExMi00ZGVjLThjOTYtZWMwYjE2MWUxMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIwXno1o/fTABxkfEYc6ObJXUsbJtQ62XQ0H ZOlTIIxtKrG2KZM6Ral7QoblZ/Oirk4HkeWeNnkRiH8hjTCEYJe2uO6JEpVPAUpx vrD/joH538wl+IWAq+W3GdG7YlYOluPluSrByBABQCFedVBc72YzKHHb1ovKWwXC B/y9I+0Kq9UGd+3XNcqf8oALzzIrNhGNUPA5uAZIBOKXOWWhSWIO7O9Et6Rwr6ol l6Lz0NfbHUPpjXsbwDlTZ3pYQRlev1ATfVyVR5XPgWF0p5GEq3lVBtuDh3/dnwdV SPabEC+5W3TksIKAjYFDYawvzzqIy2b+rtbtSCNwevCjmRIk4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFG+7nsXWfZSbEDJ90MbUbsQ526ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvNmEzNDhjNTEtYzdlZi0z ZDQ4LWI5NDktYWE2ZWI1ZWFjNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKqAGkdJJDN4D5ifewgZc7Y2sFsgGhDm38kUG56/giYdmdpbI400P9T tcH58TSYhPfhEL9UQVO54FwUByyVo/UbpXbDrehp1TmaoM3H6++Fn6dHc4Yh9adN q8d7amTy6s/kdID8ZM0DgfgZJIgP/NkyBpTU4Gu1gKf1wkexAgUC87m4EZW1hkxd kCs3Sl+hxAtpxJIu7LKI9OxV2hBwcvAiH9KPnqGKzmorFpg5+1ITGCDLqBRYy5bW Sq8AfN9ti27i+4vl0p9z9y/Da2PGPLKSGXElsrWbHyHLA589nCsPlaKx/7bQnlk1 X0wmd1BJjDkw7ZE10622fT8ZvRwfOaY= -----END CERTIFICATE-----Generated at Sun Apr 27 22:06:15 2025 by rpki-client