$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa File: 2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa (raw, json) Hash identifier: piXuga6gyVfDLpizdv4MUihYXGYZwmMV/MoJU3Hx9qk= Subject key identifier: 9C:E3:9B:B1:D6:04:5C:2D:8A:01:CD:53:70:E9:30:A2:A3:C5:8A:F1 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F43285849674EF0951CF8CD9C45162B80 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 36829 IP address blocks: 104.156.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f0:95:1c:f8:cd:9c:45:16:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=59afa242-1eec-49a1-bbc0-0556a26d60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:6d:a8:98:7f:c9:67:9b:98:d2:fa:f7:2c: 12:14:4b:14:40:bc:0a:7b:3a:a5:21:be:6c:31:dd: e0:ce:c8:fe:eb:29:6f:9a:e3:fe:d0:fc:d8:62:23: 00:64:74:76:e8:0a:42:a6:b7:56:89:19:28:ee:7a: 79:24:b2:e1:72:78:71:03:f9:1c:48:b7:4c:9d:40: f3:f8:68:4c:4f:8c:15:cc:c9:11:a4:c0:8c:0b:04: 63:04:9f:64:73:1c:74:f4:f5:1d:29:ba:54:5f:9c: ae:1a:7f:ee:18:f6:8b:95:7a:5f:06:4d:07:d1:2f: 8c:5c:cb:c6:c9:09:0a:3c:0b:86:45:4e:94:f0:c5: 0d:16:81:9b:07:d0:60:f8:07:64:d5:65:d6:71:7d: 68:22:e4:a0:bd:2a:be:d5:81:3a:66:62:be:d4:cf: 73:b0:f7:89:97:c5:2d:c0:d6:75:c7:5b:b0:e6:52: 07:f8:10:33:5a:a6:fc:94:b1:3d:e9:72:46:4e:14: 8d:0a:3c:3c:56:1d:d7:11:51:ca:8e:b2:de:6a:5f: 3e:db:de:78:c7:a4:db:38:03:84:6a:66:d1:20:6b: 5b:7f:ce:2a:60:62:03:68:b3:a5:fd:a5:ba:7b:a5: d6:59:bf:99:28:41:13:e3:b4:9d:29:b5:e3:a5:b3: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E3:9B:B1:D6:04:5C:2D:8A:01:CD:53:70:E9:30:A2:A3:C5:8A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 104.156.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:6c:70:49:e9:be:c0:ac:11:ef:d1:f5:a6:54:02:de:29:be: 85:5d:67:05:fa:07:5e:16:88:40:20:34:db:d1:d4:e6:8a:b4: 5d:3c:78:75:19:b9:d2:f6:dd:4c:bf:44:56:13:83:d1:cd:9c: 29:c4:7a:04:02:c3:a2:21:5c:d4:d6:9b:e2:f3:6a:5c:11:a1: 9a:12:b6:a5:4a:9d:22:1a:fa:0f:82:1e:48:be:f5:ad:9b:98: 18:29:81:c2:26:68:d3:3e:fa:ff:4d:0e:fa:1f:8b:1f:08:dc: 51:90:dd:31:4c:c9:5d:83:2f:d2:99:58:15:5b:00:54:18:4e: 23:e1:78:2e:6e:9d:30:ba:71:cd:76:d6:38:52:a1:b7:f0:b5: be:90:bf:33:e3:a2:02:80:4e:35:fa:eb:b2:17:b0:d0:d7:ae: e8:9c:93:30:ca:28:a1:1d:e8:01:1b:37:fe:ff:f1:17:55:47: ae:63:c6:7e:a2:42:cb:07:bd:43:1e:8d:22:1b:c3:e3:7f:d2: 32:26:da:73:40:93:bd:4f:67:e1:e6:1e:68:0d:70:06:52:f1: 43:91:62:3c:5b:d8:bb:9f:d7:be:00:71:e5:17:8e:f5:27:8e: f7:a9:7d:7f:f7:95:ab:57:28:0b:36:5b:2a:4a:d7:e3:a4:fe: 3b:fc:40:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvCVHPjNnEUWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk NTlhZmEyNDItMWVlYy00OWExLWJiYzAtMDU1NmEyNmQ2MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB9tqJh/yWebmNL69ywSFEsUQLwKezqlIb5s Md3gzsj+6ylvmuP+0PzYYiMAZHR26ApCprdWiRko7np5JLLhcnhxA/kcSLdMnUDz +GhMT4wVzMkRpMCMCwRjBJ9kcxx09PUdKbpUX5yuGn/uGPaLlXpfBk0H0S+MXMvG yQkKPAuGRU6U8MUNFoGbB9Bg+Adk1WXWcX1oIuSgvSq+1YE6ZmK+1M9zsPeJl8Ut wNZ1x1uw5lIH+BAzWqb8lLE96XJGThSNCjw8Vh3XEVHKjrLeal8+2954x6TbOAOE ambRIGtbf84qYGIDaLOl/aW6e6XWWb+ZKEET47SdKbXjpbOTCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzjm7HWBFwtigHNU3DpMKKjxYrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvMmQxMTIyMjctY2NjNy0z MmRjLWFmOGEtOTliMjdiNjdjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9scEnpvsCsEe/R9aZUAt4pvoVdZwX6B14WiEAgNNvR1OaKtF08eHUZ udL23Uy/RFYTg9HNnCnEegQCw6IhXNTWm+LzalwRoZoStqVKnSIa+g+CHki+9a2b mBgpgcImaNM++v9NDvofix8I3FGQ3TFMyV2DL9KZWBVbAFQYTiPheC5unTC6cc12 1jhSobfwtb6QvzPjogKATjX667IXsNDXruickzDKKKEd6AEbN/7/8RdVR65jxn6i QssHvUMejSIbw+N/0jIm2nNAk71PZ+HmHmgNcAZS8UORYjxb2Luf174AceUXjvUn jvepfX/3latXKAs2WypK1+Ok/jv8QAU= -----END CERTIFICATE-----Generated at Mon May 5 03:56:48 2025 by rpki-client