$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eaaeb47-b397-37f1-ba5f-159705edafb2.roa File: 4eaaeb47-b397-37f1-ba5f-159705edafb2.roa (raw, json) Hash identifier: JK4BBP41P9BZcH2EqfZ7/hX7Ci2PGwTLfoXB9RBJhhk= Subject key identifier: F9:80:AF:00:71:0A:7E:C8:63:C3:71:28:D6:FA:12:28:24:A2:FC:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24D780262AC9C686D10C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eaaeb47-b397-37f1-ba5f-159705edafb2.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.154.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d7:80:26:2a:c9:c6:86:d1:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e24e700d-f176-4d93-87e8-6a9a6dc5b541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:9f:66:a4:d6:66:29:52:7e:46:c6:81:98: 04:f8:1e:93:59:5c:bd:75:3b:bc:2f:dc:9b:84:f2: 85:eb:37:ce:c7:26:ba:92:ac:f8:63:45:51:25:cd: 5f:19:d6:48:00:6d:c9:e3:e8:78:70:9f:15:b2:ca: 50:6c:77:ac:da:0b:23:12:c7:f7:df:71:4a:d8:6a: 8d:4e:49:71:f7:8e:34:62:23:30:01:f8:f0:7a:4c: 14:d9:e1:d2:52:99:4f:e9:ca:4d:49:3a:15:0d:b7: d3:e8:1d:e0:5c:b9:99:6a:dc:e3:1f:55:c5:1d:c3: 47:f0:f0:bd:20:42:62:20:d8:55:92:b2:c9:4c:92: 19:19:a2:17:5d:88:65:7d:b9:32:41:92:30:e4:a1: 72:e9:5f:46:e6:fd:f6:06:99:11:be:5e:ab:0d:d3: 00:8a:a7:99:0c:8c:11:b6:67:a8:27:91:6a:da:99: da:50:60:16:7f:18:ba:52:17:16:d7:94:87:54:14: ff:47:eb:b8:cf:90:1e:a1:76:12:01:7f:4b:ac:31: 89:12:7a:bf:0e:4e:5c:dd:93:24:66:3a:66:4c:29: 90:1a:4a:1f:78:0e:98:cd:2f:90:a8:b8:aa:cd:33: 5d:d1:1a:b3:70:bf:be:48:9e:e2:57:f0:14:94:56: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:AF:00:71:0A:7E:C8:63:C3:71:28:D6:FA:12:28:24:A2:FC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4eaaeb47-b397-37f1-ba5f-159705edafb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8e:d7:09:b1:f9:13:3b:9b:e8:7b:6d:58:06:a2:d5:13:e3: fa:e5:bb:06:66:66:ae:f2:1f:04:46:78:60:c1:02:d1:a2:6d: 2c:20:9d:e4:dd:24:ed:62:42:cf:27:7f:f4:de:05:9c:07:cf: fa:3e:11:eb:2c:d6:3a:be:09:42:1c:50:ed:2b:b3:f9:d0:ae: 69:fa:10:1f:51:71:19:55:75:2e:2d:b9:80:0c:11:9f:12:34: c4:c3:98:fd:0b:05:96:f0:5f:12:e4:ee:34:ed:29:6f:cc:92: 00:33:65:1d:c8:35:8e:1f:4a:7c:9f:c5:d4:b2:d6:c3:22:bc: 51:02:33:4c:8f:65:99:8d:9d:cd:65:4b:ce:e5:18:8e:44:03: bb:8a:e9:a4:2c:61:ad:d7:22:a4:a0:64:e8:dc:dc:d8:09:73: 67:ad:98:61:74:fa:19:23:61:2c:d0:48:7e:db:7f:c1:e7:e9: 82:e7:11:ce:2c:65:07:6a:0e:31:ff:ae:60:6e:47:99:d4:38: 31:ce:11:f2:72:f9:e8:ad:35:80:49:53:1d:2c:a7:7e:f1:3d: 77:2e:a0:1b:fd:c5:12:ce:7d:e7:e7:31:25:e3:45:45:df:e2: e0:0b:7b:8d:db:5b:77:36:51:56:e6:b7:db:ba:42:0e:8f:d3: de:85:0a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNeAJirJxobRDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTI0ZTcwMGQtZjE3Ni00ZDkzLTg3ZTgtNmE5YTZkYzViNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1+fZqTWZilSfkbGgZgE+B6TWVy9dTu8L9yb hPKF6zfOxya6kqz4Y0VRJc1fGdZIAG3J4+h4cJ8VsspQbHes2gsjEsf333FK2GqN Tklx9440YiMwAfjwekwU2eHSUplP6cpNSToVDbfT6B3gXLmZatzjH1XFHcNH8PC9 IEJiINhVkrLJTJIZGaIXXYhlfbkyQZIw5KFy6V9G5v32BpkRvl6rDdMAiqeZDIwR tmeoJ5Fq2pnaUGAWfxi6UhcW15SHVBT/R+u4z5AeoXYSAX9LrDGJEnq/Dk5c3ZMk ZjpmTCmQGkofeA6YzS+QqLiqzTNd0RqzcL++SJ7iV/AUlFbB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmArwBxCn7IY8NxKNb6EigkovzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGVhYWViNDctYjM5Ny0z N2YxLWJhNWYtMTU5NzA1ZWRhZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6O1wmx+RM7m+h7bVgGotUT4/rluwZmZq7yHwRGeGDBAtGibSwgneTd JO1iQs8nf/TeBZwHz/o+Eess1jq+CUIcUO0rs/nQrmn6EB9RcRlVdS4tuYAMEZ8S NMTDmP0LBZbwXxLk7jTtKW/MkgAzZR3INY4fSnyfxdSy1sMivFECM0yPZZmNnc1l S87lGI5EA7uK6aQsYa3XIqSgZOjc3NgJc2etmGF0+hkjYSzQSH7bf8Hn6YLnEc4s ZQdqDjH/rmBuR5nUODHOEfJy+eitNYBJUx0sp37xPXcuoBv9xRLOfefnMSXjRUXf 4uALe43bW3c2UVbmt9u6Qg6P096FCvg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:18 2025 by rpki-client