$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa File: 0facca71-107b-3125-9ee8-6fef371f0b10.roa (raw, json) Hash identifier: tyM9YD1cQE1ujSJsqXoMan0qKkK4BnzrNs2q6Lxee3I= Subject key identifier: C6:D7:C5:0F:3F:19:E5:EC:1F:5B:B0:3F:A6:01:0B:B9:E1:E1:99:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A2478057395A213376F0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.154.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a2:47:80:57:39:5a:21:33:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=1af883f3-5506-43fa-9cb6-b5114eebecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:cb:b3:fd:49:a4:6c:de:5f:96:84:80:95: 66:60:e0:05:5f:94:0c:1c:d3:e5:1f:7f:41:72:66: 13:6b:1f:05:4b:2e:97:09:33:1f:30:82:c4:62:bb: 5e:e2:4f:33:ff:f7:c3:ca:1b:73:3d:69:8e:86:fe: b3:32:2b:cc:f0:df:14:17:6b:c0:53:11:a9:60:f7: c5:e0:28:0a:a4:23:03:ea:dc:64:de:35:0a:c0:a7: 98:82:cb:54:96:81:e1:1e:0f:29:70:6a:d7:8f:07: d0:2f:9d:0b:e6:f9:28:ee:02:d8:4e:dd:85:b2:d3: a4:af:72:fe:a9:8f:56:22:54:bb:a9:dc:54:6a:fa: 91:83:83:d3:33:da:45:51:36:98:a2:7b:da:c1:3a: 43:cb:12:52:1a:fc:4b:88:f8:e8:ea:4e:0c:c6:d5: 1a:57:cb:af:31:63:c0:ac:50:a0:5c:54:22:91:f9: 22:bb:8a:72:bc:ca:03:a1:b0:12:44:fb:9b:57:95: 9c:11:0f:68:8e:57:19:8b:89:71:0b:dc:6d:7e:73: 4e:97:5a:f4:4d:31:46:72:f6:cc:99:71:fc:58:54: 6d:81:17:ce:1c:69:de:87:c8:fc:dc:54:64:ff:f3: 73:28:b0:04:9c:e0:cb:f3:d4:e7:1f:eb:cf:28:6b: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:C5:0F:3F:19:E5:EC:1F:5B:B0:3F:A6:01:0B:B9:E1:E1:99:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:16:fd:9a:1f:06:4d:05:0e:65:4c:48:4b:94:e0:d1:4a:da: 52:91:db:e1:f4:f6:87:c6:2b:92:0b:f5:ee:b9:47:f8:73:65: 30:c6:24:81:6b:3e:71:46:a0:ae:4e:3c:a8:b5:b9:8e:88:cb: 18:60:ac:4f:51:a8:59:7b:b7:1c:87:8f:df:b7:78:0d:3c:67: b4:db:6f:c0:1e:12:51:18:bb:02:99:ae:02:a1:b2:c2:11:fe: 50:3f:6e:ec:4a:2a:98:5c:d6:d3:2d:a6:69:39:06:9f:a1:6a: 6b:7f:53:6a:c4:c8:2b:29:4b:15:c7:07:45:76:fa:cb:a6:48: be:2b:fb:0a:d3:0f:cb:ce:0e:6c:d5:83:b4:0a:c4:30:06:7b: 4d:34:c3:8b:2c:70:09:9d:5e:bd:ae:46:04:69:1f:63:54:14: 20:36:7c:66:85:d9:a8:8b:27:11:04:6e:b5:98:53:ac:b7:cd: 17:45:99:82:2f:37:98:36:7d:2b:da:94:c8:09:cb:24:29:b3: a7:b0:79:3d:e6:80:08:05:9d:d1:0d:3e:24:7d:22:fc:b3:f5: 1f:bc:7a:e1:e2:ad:96:35:a7:05:38:56:cb:8d:e0:3d:5c:70: 9d:34:27:b0:9b:fd:f0:03:a1:8c:a4:4c:ab:9c:da:dc:17:c8: 13:9a:0f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKJHgFc5WiEzdvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MWFmODgzZjMtNTUwNi00M2ZhLTljYjYtYjUxMTRlZWJlY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2PLs/1JpGzeX5aEgJVmYOAFX5QMHNPlH39B cmYTax8FSy6XCTMfMILEYrte4k8z//fDyhtzPWmOhv6zMivM8N8UF2vAUxGpYPfF 4CgKpCMD6txk3jUKwKeYgstUloHhHg8pcGrXjwfQL50L5vko7gLYTt2FstOkr3L+ qY9WIlS7qdxUavqRg4PTM9pFUTaYonvawTpDyxJSGvxLiPjo6k4MxtUaV8uvMWPA rFCgXFQikfkiu4pyvMoDobASRPubV5WcEQ9ojlcZi4lxC9xtfnNOl1r0TTFGcvbM mXH8WFRtgRfOHGneh8j83FRk//NzKLAEnODL89TnH+vPKGue8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbXxQ8/GeXsH1uwP6YBC7nh4ZleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZhY2NhNzEtMTA3Yi0z MTI1LTllZTgtNmZlZjM3MWYwYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgW/ZofBk0FDmVMSEuU4NFK2lKR2+H09ofGK5IL9e65R/hzZTDGJIFr PnFGoK5OPKi1uY6IyxhgrE9RqFl7txyHj9+3eA08Z7Tbb8AeElEYuwKZrgKhssIR /lA/buxKKphc1tMtpmk5Bp+hamt/U2rEyCspSxXHB0V2+sumSL4r+wrTD8vODmzV g7QKxDAGe000w4sscAmdXr2uRgRpH2NUFCA2fGaF2aiLJxEEbrWYU6y3zRdFmYIv N5g2fSvalMgJyyQps6eweT3mgAgFndENPiR9Ivyz9R+8euHirZY1pwU4VsuN4D1c cJ00J7Cb/fADoYykTKuc2twXyBOaDz0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:33:29 2025 by rpki-client