$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json) Hash identifier: +Lgqt8Q1WLj5Kbsl1S1JqwPZzU1W/2g/RLkpBukWTqI= Subject key identifier: 69:EC:C6:FF:BC:9B:93:71:08:C9:E7:D5:7A:08:8B:98:C0:DE:46:2F Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F432858498CFF1098BB6A0A75395B3D00 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 49585 IP address blocks: 104.156.136.0/24 maxlen: 24 104.156.137.0/24 maxlen: 24 104.156.138.0/24 maxlen: 24 104.156.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:10:98:bb:6a:0a:75:39:5b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=52e2eee6-1a88-4ad6-b00e-1d09967691f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:81:3c:a6:b8:5b:1f:82:bc:70:f2:ba:13:97: 71:92:c4:0b:03:81:a9:cc:28:ea:25:e4:c3:76:ea: f9:e2:cb:52:88:58:db:35:5b:50:fc:45:35:73:96: d9:80:1d:cd:67:6b:80:f2:c9:d2:b9:c5:0b:73:ff: f3:45:bb:f4:fb:63:3f:af:cd:e6:40:94:00:2c:85: ad:d8:3c:b2:a0:02:27:23:20:73:f3:1d:e4:c0:8d: 6d:be:dd:73:90:ed:05:ad:6d:98:d0:2c:55:95:73: c5:fe:df:46:c8:2a:0d:7d:55:6b:55:9e:77:7d:03: 29:a8:bf:3c:a6:16:37:a7:cc:23:b5:0b:42:68:2b: d4:d0:32:ae:c0:8f:77:77:2a:b1:31:ac:3d:5a:e6: d9:8e:34:20:f3:b9:90:57:a8:f6:fc:2d:47:33:ec: 66:5f:cf:70:01:ae:79:be:3b:83:57:0a:fd:18:2b: 1e:13:a1:06:b0:cd:c7:99:3a:29:30:a2:34:a2:99: 0a:30:4d:25:98:33:cf:7c:b2:78:56:93:93:b3:8d: 03:f3:39:3e:27:53:46:df:21:54:b4:6b:d5:e9:f0: 74:04:e1:61:21:27:80:20:5b:5b:09:a1:03:61:11: c0:80:c2:c9:04:50:93:93:36:62:99:b8:78:0d:5e: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:C6:FF:BC:9B:93:71:08:C9:E7:D5:7A:08:8B:98:C0:DE:46:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 104.156.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:55:e8:8d:ed:e3:50:ff:49:e2:06:86:b2:64:5b:e0:ee:c8: 78:71:9d:dc:38:01:1f:ec:a0:28:aa:96:f7:4f:46:22:10:06: 16:48:ce:39:b3:19:e7:ea:9b:bf:7c:47:37:1a:3a:16:28:58: 30:55:53:b2:70:85:12:5f:4e:33:ca:ed:06:9f:3e:88:ef:8e: de:b5:7f:89:22:52:07:02:33:5a:89:f6:09:ee:37:52:20:e4: 59:93:fc:57:ee:8d:f9:51:f5:12:f3:3d:66:53:6a:01:f2:fc: 88:42:1f:a8:ae:55:76:90:aa:dd:f5:9a:c3:36:5f:88:2e:19: 77:0e:7a:8c:da:8c:b2:aa:4d:cb:76:b5:8d:e7:23:ac:50:af: 67:55:15:98:bd:ae:cb:5c:2a:db:b6:cd:9f:a6:d8:da:78:65: 1e:14:87:9d:3d:8e:97:a6:bb:be:e0:be:44:6e:98:48:46:55: aa:9d:be:c9:61:f2:a6:21:c5:3d:fe:2d:34:db:73:a0:02:6c: 89:54:fd:7a:41:83:4c:3a:e2:8f:5e:fb:02:16:74:8f:24:60: 06:6b:84:84:b2:23:26:0a:1a:10:a4:c1:ed:b7:2a:96:df:97: c0:f3:f3:f7:f4:74:c4:c8:cb:7f:3e:14:0c:71:d6:e3:e5:de: 43:99:37:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xCYu2oKdTlbPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NTJlMmVlZTYtMWE4OC00YWQ2LWIwMGUtMWQwOTk2NzY5MWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYE8prhbH4K8cPK6E5dxksQLA4GpzCjqJeTD dur54stSiFjbNVtQ/EU1c5bZgB3NZ2uA8snSucULc//zRbv0+2M/r83mQJQALIWt 2DyyoAInIyBz8x3kwI1tvt1zkO0FrW2Y0CxVlXPF/t9GyCoNfVVrVZ53fQMpqL88 phY3p8wjtQtCaCvU0DKuwI93dyqxMaw9WubZjjQg87mQV6j2/C1HM+xmX89wAa55 vjuDVwr9GCseE6EGsM3HmTopMKI0opkKME0lmDPPfLJ4VpOTs40D8zk+J1NG3yFU tGvV6fB0BOFhISeAIFtbCaEDYRHAgMLJBFCTkzZimbh4DV5DAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnsxv+8m5NxCMnn1XoIi5jA3kYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvNDc0OWQ1YTktMzUxYS0z MTBkLWE0YjEtN2QwODY2YzA2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1V6I3t41D/SeIGhrJkW+DuyHhxndw4AR/soCiqlvdPRiIQBhZIzjmz Gefqm798RzcaOhYoWDBVU7JwhRJfTjPK7QafPojvjt61f4kiUgcCM1qJ9gnuN1Ig 5FmT/FfujflR9RLzPWZTagHy/IhCH6iuVXaQqt31msM2X4guGXcOeozajLKqTct2 tY3nI6xQr2dVFZi9rstcKtu2zZ+m2Np4ZR4Uh509jpemu77gvkRumEhGVaqdvslh 8qYhxT3+LTTbc6ACbIlU/XpBg0w64o9e+wIWdI8kYAZrhISyIyYKGhCkwe23Kpbf l8Dz8/f0dMTIy38+FAxx1uPl3kOZN6M= -----END CERTIFICATE-----Generated at Sat May 10 08:30:36 2025 by rpki-client