$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa File: 05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa (raw, json) Hash identifier: 2nBa28/2Z7CS1UKuKpah1Mcw46zbXADD9Wpfyl29MtY= Subject key identifier: F9:8F:7C:FE:F5:49:9D:D6:60:68:6D:C0:E9:28:73:00:90:38:DA:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A835688120B04C51D300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.198.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a8:35:68:81:20:b0:4c:51:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=dcca64c5-5b37-4aa8-a2c8-90cc4b435649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:8c:7c:8d:80:d8:c9:be:f2:27:95:7d:56: f8:a2:9d:a5:95:da:75:9e:24:15:3a:4d:ac:12:81: bf:c4:34:91:a7:29:fd:0f:ee:da:3a:ef:db:6a:ea: 8e:68:f3:23:c2:29:52:69:b0:81:cf:1e:cc:b1:83: a6:fd:93:39:a4:ec:e3:42:96:fb:2c:bd:9e:22:7b: 17:4e:a6:10:b9:6a:e2:15:9d:93:2f:d4:65:f5:9e: 25:fd:c4:da:51:70:a4:4c:84:d6:48:03:d6:50:a8: d7:c7:22:d6:b8:8b:85:98:39:a7:10:69:dc:6c:94: 02:ea:a9:03:40:e3:04:79:cb:7f:47:a2:d4:bb:3b: 86:5f:a4:ae:7c:d3:2b:d3:8d:92:82:cb:38:bc:a5: 10:b5:fd:49:29:d0:d3:ba:a5:a2:72:1a:67:1d:eb: a0:6b:f2:a4:59:ec:29:ee:a1:7d:74:12:1f:1f:67: 4b:bd:60:e0:f6:31:9b:a7:f9:a2:d1:ac:f1:da:09: 90:ef:4f:0e:4c:60:d8:d3:6e:af:fd:77:11:94:6e: b4:25:ea:47:41:07:da:7a:46:7c:5b:89:a2:84:6a: eb:5b:44:a6:c3:72:85:f5:33:89:f6:a3:09:25:25: 04:5f:02:33:19:a3:54:cc:d6:26:b5:b0:3a:22:01: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8F:7C:FE:F5:49:9D:D6:60:68:6D:C0:E9:28:73:00:90:38:DA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05402acd-6e83-3e48-8512-ca0bde4e1b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e1:46:fe:d0:6c:45:31:24:84:20:d0:0a:6f:1c:7a:01:4c: ad:81:96:46:96:59:f9:f3:a7:b7:dc:98:61:36:c9:86:52:01: f0:6e:00:06:e4:8d:6c:36:cc:fa:48:6b:b1:bc:dd:46:af:90: 8d:e4:3c:75:5f:89:51:e5:1c:bc:3b:26:e9:32:55:11:83:9b: 32:18:10:b3:b2:fd:e6:ff:06:4a:68:56:d5:59:7b:d7:2f:14: fa:c6:e2:e0:e5:d6:c0:7f:e7:94:e7:db:98:cc:ec:46:59:a0: c4:f8:48:d1:00:d9:6c:cb:d5:96:c5:46:ab:35:46:f1:96:bc: 66:5f:03:b2:c0:78:ec:31:b9:50:0b:5e:0d:d3:97:e2:a0:99: c8:55:8b:8e:4b:55:a3:cf:ab:da:b4:9b:e0:66:91:9c:08:c8: ab:16:cb:1c:21:28:75:1a:84:75:ea:6f:38:fb:93:1c:5e:ee: d7:ac:ca:d9:e7:7a:e3:24:59:2a:80:2f:4e:6f:a3:f6:00:14: 22:20:9e:c8:ff:22:64:bc:12:2a:c2:33:55:e3:de:89:ae:99: c8:2a:9f:33:93:e7:ec:1d:11:de:9f:ba:25:ff:02:35:e7:74: a7:b1:a3:36:20:ff:a9:23:b2:a9:ad:9e:fd:73:b0:a9:c7:11: 3e:2a:60:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKg1aIEgsExR0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGNjYTY0YzUtNWIzNy00YWE4LWEyYzgtOTBjYzRiNDM1NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLCMfI2A2Mm+8ieVfVb4op2lldp1niQVOk2s EoG/xDSRpyn9D+7aOu/bauqOaPMjwilSabCBzx7MsYOm/ZM5pOzjQpb7LL2eInsX TqYQuWriFZ2TL9Rl9Z4l/cTaUXCkTITWSAPWUKjXxyLWuIuFmDmnEGncbJQC6qkD QOMEect/R6LUuzuGX6SufNMr042Sgss4vKUQtf1JKdDTuqWichpnHeuga/KkWewp 7qF9dBIfH2dLvWDg9jGbp/mi0azx2gmQ708OTGDY026v/XcRlG60JepHQQfaekZ8 W4mihGrrW0Smw3KF9TOJ9qMJJSUEXwIzGaNUzNYmtbA6IgEFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmPfP71SZ3WYGhtwOkocwCQONqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDU0MDJhY2QtNmU4My0z ZTQ4LTg1MTItY2EwYmRlNGUxYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjhRv7QbEUxJIQg0ApvHHoBTK2BlkaWWfnzp7fcmGE2yYZSAfBuAAbk jWw2zPpIa7G83UavkI3kPHVfiVHlHLw7JukyVRGDmzIYELOy/eb/BkpoVtVZe9cv FPrG4uDl1sB/55Tn25jM7EZZoMT4SNEA2WzL1ZbFRqs1RvGWvGZfA7LAeOwxuVAL Xg3Tl+KgmchVi45LVaPPq9q0m+BmkZwIyKsWyxwhKHUahHXqbzj7kxxe7tesytnn euMkWSqAL05vo/YAFCIgnsj/ImS8EirCM1Xj3omumcgqnzOT5+wdEd6fuiX/AjXn dKexozYg/6kjsqmtnv1zsKnHET4qYBc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:18 2025 by rpki-client