$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa File: a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa (raw, json) Hash identifier: OP2DlphmTh8fyXv5CP3ir/fNi1LOLzL7lY6km1uOQ+g= Subject key identifier: DF:8B:33:86:71:31:66:8B:94:25:B2:E0:1D:66:C8:37:73:1D:B8:4C Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F43285849DC8FB3090D211B30F44A0120 Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 3801 IP address blocks: 104.156.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:b3:09:0d:21:1b:30:f4:4a:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=678b380c-b80a-4b2a-8653-890ac728ae55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:a4:31:01:3b:bf:06:61:61:09:63:eb:01: ac:d0:8a:5e:98:b9:43:0e:12:2c:63:3d:ac:7d:96: 7e:b1:7a:fc:87:db:b1:36:f1:63:7b:be:29:52:ef: e1:6c:b4:17:7a:9c:d3:84:d6:11:7f:d3:70:a1:4d: 67:7c:7d:9e:ca:25:7e:bc:af:29:94:4b:bb:61:eb: 23:c2:a3:0d:6c:75:95:61:8f:78:72:97:d7:18:62: 2f:f4:41:12:86:30:21:e8:c0:6a:92:79:fa:15:bc: f6:8d:7e:80:69:03:6a:29:c4:21:12:80:1c:fc:50: 2e:62:66:30:a5:27:3e:40:3d:07:c7:d8:f3:8f:fc: 0f:ef:23:f5:44:0b:17:ea:7f:34:ad:31:50:b9:81: 15:0a:fa:43:25:75:44:4a:37:5d:53:30:e2:dc:59: be:b1:41:10:63:c1:7e:90:59:49:7e:77:dc:ba:99: ee:02:08:d3:b6:b6:12:59:82:27:60:9f:44:46:77: 53:bb:74:b4:da:93:45:b6:40:94:f0:ce:02:e4:cd: b3:e9:60:23:f6:1e:f9:fb:e0:cd:5e:75:30:6d:cd: 17:34:53:22:cf:ce:54:37:23:b8:03:c9:ac:20:7f: 76:3e:fd:c1:11:5e:bb:c2:f1:e0:74:85:a6:bc:d0: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:33:86:71:31:66:8B:94:25:B2:E0:1D:66:C8:37:73:1D:B8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/a9de4f19-b042-31bc-b04a-dbfd3f28c3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 104.156.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7e:dd:f1:f2:39:85:b6:c9:b9:55:4c:75:a9:42:31:89:24: 61:89:3d:a0:c3:e9:86:d4:4c:c3:71:97:a4:87:da:4c:3e:ea: 93:0d:f0:30:73:21:23:6c:f0:b0:ab:80:64:58:cf:5a:c8:2b: 3d:0e:48:12:29:35:2b:1a:fb:88:79:c2:e8:bb:45:6a:aa:72: 2a:93:d0:53:97:67:60:af:88:50:80:a2:44:8b:aa:88:f1:04: c0:cd:ee:ca:ab:ab:9d:86:0b:c4:0d:a0:e4:aa:63:c5:b0:06: 21:0e:5e:0c:52:d1:fd:0d:9f:87:0e:13:15:1c:e0:92:42:b1: 6a:cd:8d:90:30:3f:d3:01:ab:31:07:e9:27:65:2b:c7:51:77: e9:cf:90:5a:58:ef:c0:b8:ee:5b:39:a9:3d:6f:f6:e0:b3:dc: 58:84:b6:21:1e:84:48:e4:b6:e6:0d:16:91:18:6d:02:7f:d5: d3:14:7b:dc:c6:fb:76:ea:20:15:88:c8:73:5f:76:14:39:1d: 49:b3:28:d8:6f:82:0b:c8:2f:f1:65:0c:86:3c:94:3e:4e:ce: e4:4c:e4:a9:92:92:29:a6:84:f6:e7:b3:53:cb:0d:e3:c9:d1: 4c:15:50:64:37:c2:e5:f3:ae:fe:58:e9:e0:18:cd:57:15:4a: cd:cb:2b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7MJDSEbMPRKASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk Njc4YjM4MGMtYjgwYS00YjJhLTg2NTMtODkwYWM3MjhhZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7ekMQE7vwZhYQlj6wGs0IpemLlDDhIsYz2s fZZ+sXr8h9uxNvFje74pUu/hbLQXepzThNYRf9NwoU1nfH2eyiV+vK8plEu7Yesj wqMNbHWVYY94cpfXGGIv9EEShjAh6MBqknn6Fbz2jX6AaQNqKcQhEoAc/FAuYmYw pSc+QD0Hx9jzj/wP7yP1RAsX6n80rTFQuYEVCvpDJXVESjddUzDi3Fm+sUEQY8F+ kFlJfnfcupnuAgjTtrYSWYInYJ9ERndTu3S02pNFtkCU8M4C5M2z6WAj9h75++DN XnUwbc0XNFMiz85UNyO4A8msIH92Pv3BEV67wvHgdIWmvNAcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+LM4ZxMWaLlCWy4B1myDdzHbhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvYTlkZTRmMTktYjA0Mi0z MWJjLWIwNGEtZGJmZDNmMjhjM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh+3fHyOYW2yblVTHWpQjGJJGGJPaDD6YbUTMNxl6SH2kw+6pMN8DBz ISNs8LCrgGRYz1rIKz0OSBIpNSsa+4h5wui7RWqqciqT0FOXZ2CviFCAokSLqojx BMDN7sqrq52GC8QNoOSqY8WwBiEOXgxS0f0Nn4cOExUc4JJCsWrNjZAwP9MBqzEH 6SdlK8dRd+nPkFpY78C47ls5qT1v9uCz3FiEtiEehEjktuYNFpEYbQJ/1dMUe9zG +3bqIBWIyHNfdhQ5HUmzKNhvggvIL/FlDIY8lD5OzuRM5KmSkimmhPbns1PLDePJ 0UwVUGQ3wuXzrv5Y6eAYzVcVSs3LK9k= -----END CERTIFICATE-----Generated at Mon Jun 16 11:58:15 2025 by rpki-client