$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa File: 3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa (raw, json) Hash identifier: aI6Ui7rswPbjLTTOb+WUOjrz4ir1PiMBskF5G9Xrx6s= Subject key identifier: 96:E0:FA:DB:C7:6C:1F:74:62:51:4D:28:12:AF:19:34:3B:18:E9:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A8C373AD48F7212F2680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a8:c3:73:ad:48:f7:21:2f:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d94e7721-4801-43af-a1a2-751c6d2e55f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:1c:5b:a5:a0:9b:aa:98:8f:94:c3:ea:38: 29:93:4d:ed:26:a2:8d:9e:d2:da:2b:25:3d:b3:d8: 08:35:db:46:fb:4b:d4:cb:74:28:f0:f4:2f:3e:25: 40:40:10:5d:5d:fd:c9:04:4c:51:57:58:c2:d9:f5: 9f:3b:b4:7c:05:39:46:64:54:fc:e0:c1:99:8e:20: d3:02:b8:b1:58:7f:56:04:52:59:b8:f0:4b:32:ba: bc:ce:09:46:4e:c0:83:00:3d:01:a0:3f:b3:cc:f2: 8f:5c:88:06:b3:10:5c:18:9f:6d:5f:ce:88:a7:eb: 31:d0:b7:9d:b0:2d:c2:4e:82:3b:22:72:7e:1b:20: b2:89:b3:8f:5d:89:d2:c6:da:95:5d:be:31:50:ff: 37:32:a4:3b:53:2a:2e:01:7e:5a:9b:d2:6f:54:b6: 66:05:13:ec:14:14:08:99:3d:b2:80:3e:03:4b:b5: e7:31:13:6e:72:9f:c5:6e:e7:ec:51:dc:37:c7:34: db:d9:81:07:1d:d1:01:3d:be:49:03:0d:1e:38:6e: a0:1d:32:69:2a:90:15:f3:b0:b0:b8:c1:f8:ef:ce: f5:d4:c6:47:9d:ce:cb:ec:b1:2c:fb:8f:65:38:2b: b2:80:13:c8:f7:96:90:b4:14:da:f1:3e:fc:3c:96: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E0:FA:DB:C7:6C:1F:74:62:51:4D:28:12:AF:19:34:3B:18:E9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:12:51:3f:23:62:ed:25:98:1a:8e:7b:51:c3:6d:25:02:99: 4a:db:99:25:5f:44:00:ed:19:b0:f1:77:51:e8:8f:cd:cd:6c: 81:1e:df:22:2b:ad:e1:16:29:65:3f:f6:6d:43:db:3c:9d:dd: 25:98:f1:e7:01:e5:81:8b:1a:98:5b:29:ce:6d:80:2b:94:a7: 5d:52:36:07:1f:cd:73:d1:be:b8:23:c4:0a:e5:d8:5c:63:16: 05:26:89:e5:2c:60:4b:e1:af:1e:33:16:b6:ba:38:59:52:ab: 19:12:06:78:55:aa:eb:5c:a3:21:53:76:6d:19:a3:c3:25:dc: 1a:98:77:91:7a:85:42:40:e3:44:df:7e:fc:3c:38:62:c8:ba: 1f:62:53:36:58:60:12:1c:9b:0c:d4:ef:aa:75:1f:88:23:d3: b1:d4:f3:7f:7a:61:6a:d8:85:66:bf:e2:b3:9b:0b:27:c8:b5: b6:3f:89:b6:59:34:d2:3f:03:a9:04:58:08:f6:c1:bc:81:60: 0b:cb:56:6b:83:c3:d5:e3:fc:df:6c:b6:1d:76:dc:6f:7b:b4: 64:41:a0:d0:98:89:f8:8c:40:f4:d2:1d:31:8b:e1:8a:8e:27: db:59:7c:11:14:9b:56:74:36:3a:a3:2f:2e:57:f1:a2:21:0c: e9:65:40:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKjDc61I9yEvJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDk0ZTc3MjEtNDgwMS00M2FmLWExYTItNzUxYzZkMmU1NWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEcW6Wgm6qYj5TD6jgpk03tJqKNntLaKyU9 s9gINdtG+0vUy3Qo8PQvPiVAQBBdXf3JBExRV1jC2fWfO7R8BTlGZFT84MGZjiDT ArixWH9WBFJZuPBLMrq8zglGTsCDAD0BoD+zzPKPXIgGsxBcGJ9tX86Ip+sx0Led sC3CToI7InJ+GyCyibOPXYnSxtqVXb4xUP83MqQ7UyouAX5am9JvVLZmBRPsFBQI mT2ygD4DS7XnMRNucp/FbufsUdw3xzTb2YEHHdEBPb5JAw0eOG6gHTJpKpAV87Cw uMH478711MZHnc7L7LEs+49lOCuygBPI95aQtBTa8T78PJaHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbg+tvHbB90YlFNKBKvGTQ7GOmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2E3ZjJjZDItNDE5Ny0z ZDc1LTlmNmYtOGIzZTJlNjM3OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHESUT8jYu0lmBqOe1HDbSUCmUrbmSVfRADtGbDxd1Hoj83NbIEe3yIr reEWKWU/9m1D2zyd3SWY8ecB5YGLGphbKc5tgCuUp11SNgcfzXPRvrgjxArl2Fxj FgUmieUsYEvhrx4zFra6OFlSqxkSBnhVqutcoyFTdm0Zo8Ml3BqYd5F6hUJA40Tf fvw8OGLIuh9iUzZYYBIcmwzU76p1H4gj07HU8396YWrYhWa/4rObCyfItbY/ibZZ NNI/A6kEWAj2wbyBYAvLVmuDw9Xj/N9sth123G97tGRBoNCYifiMQPTSHTGL4YqO J9tZfBEUm1Z0NjqjLy5X8aIhDOllQP0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:59 2025 by rpki-client