$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa File: 91d10d04-d56b-3251-ab6a-17d723896f38.roa (raw, json) Hash identifier: nUB+j89mG/gLYX4i/Phn2ptJG9oNMhNUTL0vNfkOjc4= Subject key identifier: 6A:4F:EE:C1:0F:34:6F:09:F3:8D:45:C2:94:6D:A3:93:6A:8D:F6:ED Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584926C146A08B54D8A6D959CEC0 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa Signing time: Tue 11 Mar 2025 10:03:58 +0000 ROA not before: Tue 11 Mar 2025 10:03:58 +0000 ROA not after: Mon 09 Jun 2025 10:03:58 +0000 asID: 18779 IP address blocks: 104.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:26:c1:46:a0:8b:54:d8:a6:d9:59:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 11 10:03:58 2025 GMT Not After : Jun 9 10:03:58 2025 GMT Subject: CN=bd2ae2ba-520e-409f-8995-847158608cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:77:c6:08:7b:9d:87:c0:62:93:70:d4:e6: e6:c7:e1:6d:d7:ee:f3:6d:3d:bb:ba:e3:48:80:58: eb:5b:52:5a:ec:9a:27:b4:48:c3:de:a6:ca:dd:0a: 4c:27:62:6c:0e:f0:69:09:ed:8d:04:ea:bf:c8:f1: eb:b6:5f:59:69:e7:56:f8:97:94:83:13:d1:42:10: 82:e8:60:08:e7:dd:91:97:16:f7:e6:da:ef:b7:d9: b4:0a:44:9e:fa:0e:45:80:c9:44:ad:c6:8e:4c:3d: 53:70:00:b5:d4:ce:dd:0f:31:6f:a7:62:88:de:3e: 35:8f:89:43:d6:18:0c:bd:b1:50:ba:66:b7:d1:39: 95:57:85:76:93:ee:ee:7d:1c:4f:2d:7a:5c:54:ee: 14:86:ae:55:8b:ab:e5:f5:74:cf:bb:49:0e:0a:cb: 32:cc:13:09:54:6e:8e:5c:fe:4f:c9:91:92:e5:a6: 45:a0:19:63:94:1e:76:a5:f1:04:a0:57:55:d7:fd: da:00:a0:04:41:b5:ce:1a:7c:36:05:1e:4e:9b:58: cd:33:ad:5d:59:73:d8:79:52:24:d8:73:28:2f:d2: 04:28:ca:14:ee:5f:7f:11:27:88:bc:6c:10:3d:16: 10:fb:a3:da:d3:ae:ab:90:21:38:b6:d4:ef:00:82: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4F:EE:C1:0F:34:6F:09:F3:8D:45:C2:94:6D:A3:93:6A:8D:F6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/91d10d04-d56b-3251-ab6a-17d723896f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ae:09:63:dc:03:78:cd:07:d6:dd:e7:d3:86:a0:cc:c2:fc: b3:6a:6d:c6:a7:3e:cb:02:9e:17:9e:75:cc:28:52:f3:86:8d: 92:91:c1:9f:75:5d:b3:6d:22:d4:31:22:7f:dc:66:51:65:ae: 71:c0:ac:3a:2a:42:8a:46:ee:63:2f:97:45:38:5e:49:6c:84: c8:d3:94:22:02:d3:4d:d1:4c:60:12:3e:2d:77:a3:09:05:20: 25:40:b4:28:f9:08:58:e2:3f:c1:3d:2a:e6:5f:9d:2a:20:a3: 70:97:7e:db:14:40:95:3f:90:dc:c1:78:8d:93:3a:11:c6:3e: ff:dc:1a:22:02:49:5e:77:b0:9e:3f:0b:b7:99:2d:4e:65:cb: 2f:5b:0a:89:18:71:95:c5:1d:30:0e:5a:9b:81:47:22:1a:c7: 3c:d2:7f:3c:aa:e1:43:36:c1:6a:59:93:fd:a7:48:ba:23:fd: 82:b8:d3:50:d8:97:ca:69:d4:f6:13:9c:74:25:d1:2e:1f:d9: 11:95:90:e8:f2:f2:e7:a3:d3:3e:07:20:89:52:ce:41:03:4b: 20:d4:f2:26:76:1a:71:fa:91:5d:f9:c0:bc:36:21:57:16:41: 3e:00:83:e1:1c:ec:55:90:49:e1:16:a3:0e:fc:3a:6b:73:f9: 4b:bb:7a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkmwUagi1TYptlZzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMxMTEwMDM1OFoXDTI1MDYwOTEwMDM1OFowLzEtMCsGA1UEAxMk YmQyYWUyYmEtNTIwZS00MDlmLTg5OTUtODQ3MTU4NjA4Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwht3xgh7nYfAYpNw1Obmx+Ft1+7zbT27uuNI gFjrW1Ja7JontEjD3qbK3QpMJ2JsDvBpCe2NBOq/yPHrtl9ZaedW+JeUgxPRQhCC 6GAI592Rlxb35trvt9m0CkSe+g5FgMlErcaOTD1TcAC11M7dDzFvp2KI3j41j4lD 1hgMvbFQuma30TmVV4V2k+7ufRxPLXpcVO4Uhq5Vi6vl9XTPu0kOCssyzBMJVG6O XP5PyZGS5aZFoBljlB52pfEEoFdV1/3aAKAEQbXOGnw2BR5Om1jNM61dWXPYeVIk 2HMoL9IEKMoU7l9/ESeIvGwQPRYQ+6Pa066rkCE4ttTvAIKfmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpP7sEPNG8J841FwpRto5NqjfbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvOTFkMTBkMDQtZDU2Yi0z MjUxLWFiNmEtMTdkNzIzODk2ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmuCWPcA3jNB9bd59OGoMzC/LNqbcanPssCnheedcwoUvOGjZKRwZ91 XbNtItQxIn/cZlFlrnHArDoqQopG7mMvl0U4XklshMjTlCIC003RTGASPi13owkF ICVAtCj5CFjiP8E9KuZfnSogo3CXftsUQJU/kNzBeI2TOhHGPv/cGiICSV53sJ4/ C7eZLU5lyy9bCokYcZXFHTAOWpuBRyIaxzzSfzyq4UM2wWpZk/2nSLoj/YK401DY l8pp1PYTnHQl0S4f2RGVkOjy8uej0z4HIIlSzkEDSyDU8iZ2GnH6kV35wLw2IVcW QT4Ag+Ec7FWQSeEWow78Omtz+Uu7epc= -----END CERTIFICATE-----Generated at Thu May 8 17:04:16 2025 by rpki-client