$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa File: 28575f9c-570b-3118-a718-2754ac5ad8a1.roa (raw, json) Hash identifier: q3gA3sXx0NhPT6QjbCNXk95asPg+kGjcnUJ9Qmc3eF8= Subject key identifier: 54:3E:82:D3:6C:31:BE:D6:F7:CE:58:04:90:CD:B2:28:39:58:3F:1D Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F432858499F24A136D4F8E52CFCE8F260 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 104.237.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a1:36:d4:f8:e5:2c:fc:e8:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=fd67c1a0-f278-45c3-b82e-8ea2fe995d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:12:39:3a:11:96:d2:18:37:32:f9:39:f1:08: 7e:eb:9f:93:12:2e:2d:07:aa:84:39:57:5e:e5:3c: de:ca:0d:21:9a:e3:0b:24:93:00:14:bf:3c:01:91: 73:54:6d:0d:18:b4:6e:91:77:77:93:a1:49:84:4f: cd:35:0c:de:64:71:f4:9e:18:95:8e:87:0a:3f:cd: 1c:92:6d:c7:af:50:c1:35:82:83:62:70:46:2b:57: 8a:54:0c:ab:87:c5:b2:9f:47:30:b9:b2:26:e9:c0: 39:0c:99:0a:b2:01:18:17:55:07:72:fb:dd:95:7b: 17:67:30:33:37:ea:e1:fd:47:41:15:0a:e6:f0:f5: 89:90:52:99:66:66:0f:d5:9b:66:6f:b3:4f:d7:cd: 02:cb:32:1e:00:ad:b7:61:91:97:ad:3d:f8:34:cb: 73:4e:5f:0e:4f:2d:db:90:90:cb:05:9b:1e:6f:b5: 87:3b:3d:14:92:8b:22:30:3c:9e:a1:68:85:8e:9d: af:de:38:43:9b:88:0e:3e:64:06:e9:34:f6:81:b8: 17:79:dd:be:7d:7b:70:56:65:0a:f0:ec:77:6d:e7: 14:93:34:94:92:55:8d:b6:5c:42:ea:d0:29:ee:6f: 7b:6d:12:5c:67:59:f1:c8:a7:7a:20:3c:8d:8b:1e: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3E:82:D3:6C:31:BE:D6:F7:CE:58:04:90:CD:B2:28:39:58:3F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/28575f9c-570b-3118-a718-2754ac5ad8a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:56:fc:88:39:a3:0f:d6:9a:e5:4a:e6:f6:8d:70:bc:71:27: 33:d2:5e:de:42:34:94:f1:bd:c8:2d:2c:86:6e:23:c4:3f:66: 28:61:e3:f6:f2:a7:9e:6b:7b:0d:2f:94:79:eb:6f:85:ba:c4: 3e:ff:cd:e1:54:71:6b:44:29:6d:93:43:a1:9a:8f:03:6e:c1: 24:06:ec:98:c6:8f:53:5c:6d:a7:7a:e9:24:80:c9:66:ef:3e: de:8d:19:15:49:5e:ff:98:d9:d8:b6:6c:46:0f:56:ba:30:c7: 07:f4:68:37:6e:28:3a:10:cf:50:05:5b:7f:cb:8e:c1:85:17: be:d8:8d:35:a5:af:0d:07:52:9f:a0:4d:48:07:7b:6c:51:09: 5f:a5:c8:eb:1d:06:7b:fe:8d:f0:be:68:b3:bf:ae:63:3e:c2: c5:17:ed:f2:f3:2d:30:e9:76:6c:c3:33:76:ad:79:a0:bc:c2: da:83:e2:ae:7a:13:d3:3f:36:95:35:89:69:8d:be:10:f2:70: 13:21:1c:17:53:08:20:06:8f:e7:87:8a:0b:66:c4:04:36:c2: 6e:87:ff:75:bf:9b:28:79:80:84:8b:07:26:07:ee:b0:c9:79: d8:1a:73:b2:cf:61:cc:07:c0:22:ac:dd:1a:3d:46:9f:ca:66: e1:02:35:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKE21PjlLPzo8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ2N2MxYTAtZjI3OC00NWMzLWI4MmUtOGVhMmZlOTk1ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRI5OhGW0hg3Mvk58Qh+65+TEi4tB6qEOVde 5Tzeyg0hmuMLJJMAFL88AZFzVG0NGLRukXd3k6FJhE/NNQzeZHH0nhiVjocKP80c km3Hr1DBNYKDYnBGK1eKVAyrh8Wyn0cwubIm6cA5DJkKsgEYF1UHcvvdlXsXZzAz N+rh/UdBFQrm8PWJkFKZZmYP1Ztmb7NP180CyzIeAK23YZGXrT34NMtzTl8OTy3b kJDLBZseb7WHOz0UkosiMDyeoWiFjp2v3jhDm4gOPmQG6TT2gbgXed2+fXtwVmUK 8Ox3becUkzSUklWNtlxC6tAp7m97bRJcZ1nxyKd6IDyNix6PrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ+gtNsMb7W985YBJDNsig5WD8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMjg1NzVmOWMtNTcwYi0z MTE4LWE3MTgtMjc1NGFjNWFkOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaO2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVW/Ig5ow/WmuVK5vaNcLxxJzPSXt5CNJTxvcgtLIZuI8Q/Zihh4/by p55rew0vlHnrb4W6xD7/zeFUcWtEKW2TQ6GajwNuwSQG7JjGj1Ncbad66SSAyWbv Pt6NGRVJXv+Y2di2bEYPVrowxwf0aDduKDoQz1AFW3/LjsGFF77YjTWlrw0HUp+g TUgHe2xRCV+lyOsdBnv+jfC+aLO/rmM+wsUX7fLzLTDpdmzDM3ateaC8wtqD4q56 E9M/NpU1iWmNvhDycBMhHBdTCCAGj+eHigtmxAQ2wm6H/3W/myh5gISLByYH7rDJ edgac7LPYcwHwCKs3Ro9Rp/KZuECNX8= -----END CERTIFICATE-----Generated at Sat May 10 19:02:38 2025 by rpki-client