$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa File: 839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa (raw, json) Hash identifier: MYcfnzONTs+hn5bBtetp1aA01jt54nUAEVKnCZn6vCA= Subject key identifier: E1:94:87:04:C1:FB:0A:03:65:02:04:5C:A3:03:8E:6E:AD:91:BF:DF Certificate issuer: /CN=d426c818-fe62-465f-8184-d4f8176e2692 Certificate serial: 010D0C9F43285849A8E9E0FADF411044296F9D80 Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 6507 IP address blocks: 104.160.128.0/19 maxlen: 19 104.160.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e0:fa:df:41:10:44:29:6f:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=53b849ad-105d-46e6-b485-1768f40c65ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:5e:02:36:7a:63:3b:96:f3:b6:5e:e3:41: 7f:1b:59:60:a0:5d:bc:6d:da:80:6c:39:f1:4b:ce: 51:c7:2c:f2:84:c9:c2:39:4e:ec:84:6a:cb:cd:e4: 52:95:80:82:e3:45:bf:9d:a3:07:52:5f:5d:18:4d: 03:2f:3a:2d:43:4f:0e:60:35:90:69:1c:43:bb:18: 39:bf:4b:aa:fc:16:49:ce:09:69:cc:44:bc:4f:80: f3:4a:72:f0:7b:a6:1e:53:24:a0:90:36:73:e3:e9: b8:f3:58:1e:1a:6b:79:59:ec:04:f9:b4:b8:25:2c: 2d:17:6f:98:ba:0d:5f:04:91:8f:52:36:78:0b:f8: 05:cf:11:09:a3:97:ab:7a:43:6a:db:5b:ed:72:e8: ef:a7:ec:26:09:98:57:23:0f:03:5f:9f:03:c1:ea: 18:ed:b7:7b:0d:fa:e8:8f:a9:d5:9d:31:01:92:09: 60:8e:20:f4:a4:30:6e:70:8a:e7:7c:11:df:e9:c7: 43:ed:81:48:8e:51:ef:18:4b:d2:d5:17:cf:21:5f: 82:29:73:f7:8c:6f:1e:0c:8d:c4:d6:fb:d1:4b:5d: 4f:4f:d9:76:ba:74:90:aa:2f:86:8d:f8:e6:d2:11: be:c7:d7:03:97:34:3d:f7:63:80:7f:c7:af:b1:69: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:94:87:04:C1:FB:0A:03:65:02:04:5C:A3:03:8E:6E:AD:91:BF:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/839f43fb-e65a-348f-8aa6-cb9e456a3c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl X509v3 Authority Key Identifier: keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer sbgp-ipAddrBlock: critical IPv4: 104.160.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:eb:95:25:a0:f3:d6:93:d2:bc:79:59:01:2b:a8:82:ce:0e: 75:31:fd:b8:ea:f7:75:34:5c:ad:d8:d2:2b:bd:c9:f5:cc:c7: de:41:49:32:22:6f:47:02:8f:52:36:a7:c7:b4:10:fe:0e:1a: d9:31:56:b6:fc:12:f6:21:1f:d7:e4:5d:06:dd:0c:fa:c3:c5: 5c:dd:8f:2f:a3:ea:29:85:4a:38:a9:25:b8:15:d2:13:5b:88: c4:cc:46:e3:d5:06:16:2f:19:27:50:ee:a6:29:8b:18:93:90: 0d:67:dd:43:91:b7:4a:42:99:74:46:56:21:90:c9:5e:94:d5: 35:4f:e5:3d:5d:d6:ff:64:39:6b:6c:75:b6:1a:bf:35:47:0c: 8a:82:71:10:47:29:47:c1:e4:a7:0f:90:b4:b9:9c:04:49:77: bd:1f:3b:54:bf:96:ee:22:93:3e:0b:69:b6:09:a4:42:2e:83: 41:d9:50:24:8e:43:f6:81:50:5b:cd:04:3f:7f:39:e2:f5:a8: 8a:73:95:65:e5:1f:ae:f6:28:cc:9e:e9:a5:e7:cc:8f:a2:bc: fd:e4:f7:ed:ef:ce:33:d6:b3:2e:3a:8c:25:cd:3f:c1:5e:e9: 53:c8:e6:42:96:4e:7c:d7:a4:12:40:b0:8e:aa:3d:4a:4a:a6: dc:37:b7:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eD630EQRClvnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy NjkyMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NTNiODQ5YWQtMTA1ZC00NmU2LWI0ODUtMTc2OGY0MGM2NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT9eAjZ6YzuW87Ze40F/G1lgoF28bdqAbDnx S85RxyzyhMnCOU7shGrLzeRSlYCC40W/naMHUl9dGE0DLzotQ08OYDWQaRxDuxg5 v0uq/BZJzglpzES8T4DzSnLwe6YeUySgkDZz4+m481geGmt5WewE+bS4JSwtF2+Y ug1fBJGPUjZ4C/gFzxEJo5erekNq21vtcujvp+wmCZhXIw8DX58DweoY7bd7Dfro j6nVnTEBkglgjiD0pDBucIrnfBHf6cdD7YFIjlHvGEvS1RfPIV+CKXP3jG8eDI3E 1vvRS11PT9l2unSQqi+Gjfjm0hG+x9cDlzQ992OAf8evsWlSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGUhwTB+woDZQIEXKMDjm6tkb/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2 YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvODM5ZjQzZmItZTY1YS0z NDhmLThhYTYtY2I5ZTQ1NmEzYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4 MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaKCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7rlSWg89aT0rx5WQErqILODnUx/bjq93U0XK3Y0iu9yfXMx95BSTIi b0cCj1I2p8e0EP4OGtkxVrb8EvYhH9fkXQbdDPrDxVzdjy+j6imFSjipJbgV0hNb iMTMRuPVBhYvGSdQ7qYpixiTkA1n3UORt0pCmXRGViGQyV6U1TVP5T1d1v9kOWts dbYavzVHDIqCcRBHKUfB5KcPkLS5nARJd70fO1S/lu4ikz4LabYJpEIug0HZUCSO Q/aBUFvNBD9/OeL1qIpzlWXlH672KMye6aXnzI+ivP3k9+3vzjPWsy46jCXNP8Fe 6VPI5kKWTnzXpBJAsI6qPUpKptw3tyw= -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:54 2025 by rpki-client