$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa File: 2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa (raw, json) Hash identifier: 6W9mdpinnsf4mNnkohZNl+xULTPOlA1pzl0x/WjTZYU= Subject key identifier: 13:14:5B:97:37:8F:10:3F:D0:7E:9D:21:01:36:65:05:4E:92:72:87 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285849552951854B2E752BBA512900 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 104.151.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:51:85:4b:2e:75:2b:ba:51:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=949a8348-f583-4693-ba49-7846c0f2f672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:5c:1c:bc:90:51:9c:f5:9a:50:d9:dd:07: 2b:4c:34:23:25:aa:cc:a8:27:49:c9:88:e4:ba:18: 29:3d:9b:9d:f9:c0:22:a5:18:11:de:7c:6d:55:1a: ed:cb:67:8b:dd:a8:c5:dc:9a:95:3a:81:3e:69:52: 49:17:0f:20:7f:68:fe:34:68:61:44:16:dc:2a:05: 3c:68:a5:04:e5:76:65:45:d5:eb:a2:a6:0f:94:b3: 1a:9c:67:83:55:bb:d9:7a:cd:7d:18:be:f1:47:d7: f8:fc:67:8f:47:96:f1:eb:54:72:17:9c:54:f7:08: 02:fe:c5:6b:62:79:f7:63:b3:45:e0:0f:91:9d:8b: 51:c0:fc:b8:81:71:0a:6c:82:97:7e:2f:ab:0d:ac: 9d:4a:83:dc:de:54:28:7f:76:8c:c4:0c:3a:78:5f: 46:ec:b9:48:da:fb:dd:7e:7e:07:02:db:8e:0e:0e: f8:24:44:3c:5f:c5:1a:c5:80:ae:dc:27:16:f8:0e: f1:31:e4:54:84:90:23:9d:ec:6e:c4:31:c7:bb:7a: 98:cf:be:aa:02:7a:e8:27:73:8d:71:d0:0d:28:0e: ee:9e:e4:98:f3:00:0f:a9:dd:b6:07:e7:aa:f5:11: 69:34:38:e7:14:c9:d2:b0:b7:24:f2:70:99:ac:d5: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:5B:97:37:8F:10:3F:D0:7E:9D:21:01:36:65:05:4E:92:72:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/2946ac20-529e-3c8c-8dfb-5baf41d0f203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 104.151.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:5a:f8:f7:65:53:f4:6b:ee:4b:ac:09:f8:e4:3a:15:40:d8: b9:c7:cc:11:07:da:81:00:f5:09:31:b7:6a:8d:38:53:ad:15: 82:c8:4a:df:0f:39:29:05:e3:fd:2a:39:0f:fc:ee:1a:96:dc: 7c:08:55:82:1b:c3:5a:6d:8b:65:6c:85:31:cb:67:62:0f:8e: 0e:e4:ea:ee:25:2f:1a:08:a9:5d:01:09:31:9d:78:34:f0:1f: 29:28:70:60:f4:84:24:78:6f:d7:9c:2b:cb:85:e9:f3:4f:08: 2f:cf:02:d9:06:ad:72:85:e2:73:26:fa:0c:5f:c9:2b:6e:2d: 9f:e1:f0:cb:5b:bf:10:4b:9c:0c:b3:61:2e:f5:01:bf:7c:77: 2c:9e:17:ab:76:21:e4:5f:84:8b:de:6e:32:a7:81:f3:d3:d8: e7:d6:35:f8:38:e0:e9:3f:17:44:4e:88:93:7d:4d:4f:9d:6c: 17:1d:ae:1c:ab:1d:08:3f:af:bc:2e:43:77:0f:41:48:f9:25: e3:1b:c2:46:6d:d5:d4:01:50:a8:50:d9:ab:a2:26:29:75:58: 61:33:77:1e:af:4f:fc:47:1f:00:1b:90:6a:2b:ce:7e:b7:03: 9d:30:5a:0b:99:f4:e1:31:0c:1f:96:41:9c:64:88:26:9f:95: f1:56:99:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVGFSy51K7pRKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk OTQ5YTgzNDgtZjU4My00NjkzLWJhNDktNzg0NmMwZjJmNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlcHLyQUZz1mlDZ3QcrTDQjJarMqCdJyYjk uhgpPZud+cAipRgR3nxtVRrty2eL3ajF3JqVOoE+aVJJFw8gf2j+NGhhRBbcKgU8 aKUE5XZlRdXroqYPlLManGeDVbvZes19GL7xR9f4/GePR5bx61RyF5xU9wgC/sVr Ynn3Y7NF4A+RnYtRwPy4gXEKbIKXfi+rDaydSoPc3lQof3aMxAw6eF9G7LlI2vvd fn4HAtuODg74JEQ8X8UaxYCu3CcW+A7xMeRUhJAjnexuxDHHu3qYz76qAnroJ3ON cdANKA7unuSY8wAPqd22B+eq9RFpNDjnFMnSsLck8nCZrNWAOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMUW5c3jxA/0H6dIQE2ZQVOknKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMjk0NmFjMjAtNTI5ZS0z YzhjLThkZmItNWJhZjQxZDBmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKta+PdlU/Rr7kusCfjkOhVA2LnHzBEH2oEA9Qkxt2qNOFOtFYLISt8P OSkF4/0qOQ/87hqW3HwIVYIbw1pti2VshTHLZ2IPjg7k6u4lLxoIqV0BCTGdeDTw HykocGD0hCR4b9ecK8uF6fNPCC/PAtkGrXKF4nMm+gxfyStuLZ/h8MtbvxBLnAyz YS71Ab98dyyeF6t2IeRfhIvebjKngfPT2OfWNfg44Ok/F0ROiJN9TU+dbBcdrhyr HQg/r7wuQ3cPQUj5JeMbwkZt1dQBUKhQ2auiJil1WGEzdx6vT/xHHwAbkGorzn63 A50wWguZ9OExDB+WQZxkiCaflfFWmaI= -----END CERTIFICATE-----Generated at Tue Apr 29 18:25:42 2025 by rpki-client