$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa File: 5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa (raw, json) Hash identifier: 54GTKZYYdd56rHh0ZKaBI2NRDW85DMO5OOU6iiwv/i4= Subject key identifier: 58:8C:99:9F:58:E1:34:43:8E:67:2B:2E:2C:92:92:E1:FE:8F:D0:5B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A50D25FBD99E12075800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.196.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a5:0d:25:fb:d9:9e:12:07:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e4c995fd-2db7-4a8f-ae68-a6c25460a655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:44:1a:04:9b:f2:3f:c7:7c:dd:55:51:0d: 63:61:7b:7a:86:ab:8c:7e:61:c5:f6:5e:bc:36:d4: 88:2b:ad:aa:71:61:cd:04:71:1b:eb:55:0e:6e:81: 6c:ff:82:22:05:26:6c:0b:9d:ce:fb:df:9b:11:70: 90:8b:70:7e:7a:b7:3c:d8:6a:fa:4e:52:8a:33:e2: ac:bc:6e:a2:44:db:38:c1:41:2f:72:70:f6:24:e3: 49:38:0e:ba:53:b3:b7:dd:6a:4c:0d:15:6d:3d:c7: 05:34:96:da:64:eb:f6:55:37:b3:a4:b1:9e:43:c0: a0:a8:8a:f7:ba:32:3b:b8:cd:c9:cc:58:be:29:d9: 0e:33:ed:0d:11:1d:44:30:5a:ba:8f:a1:8f:b1:0a: 1c:be:e0:5a:3e:73:32:a6:2b:1a:74:fb:b4:2b:36: dd:24:c6:65:de:78:9e:63:8c:d4:97:82:33:5e:41: c2:25:f3:d7:af:26:39:99:d1:bc:11:79:c8:07:da: fd:df:66:26:d9:3d:36:cf:ce:09:5f:09:79:35:ec: fe:34:07:53:01:74:c3:e0:e9:21:a1:2d:20:d7:0f: d5:1a:07:bb:97:97:d7:37:73:b1:e9:b6:9f:0e:49: ab:b7:77:9e:68:69:a9:ab:4b:1f:c8:d3:8e:2b:73: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:99:9F:58:E1:34:43:8E:67:2B:2E:2C:92:92:E1:FE:8F:D0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5abd9c9d-08e3-39e4-b8d2-30dc4d415157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0b:92:17:af:30:5d:cb:2a:30:df:18:ec:b5:55:fb:00:36: 18:a8:b2:a9:c6:7c:7b:31:d9:94:2d:ca:e2:f0:92:3a:64:47: 92:8f:fd:a5:5e:75:20:9b:0c:18:c6:bb:d0:44:82:5d:31:8a: 7e:cd:93:a0:44:8f:38:ce:e8:3e:08:b1:08:13:46:8e:35:51: 13:86:42:88:04:cf:48:f8:7f:cd:e1:52:a9:86:fd:68:2f:40: c9:eb:56:ba:d7:7e:76:cc:4e:f4:50:19:f1:d5:4c:8b:5e:a3: 06:4c:a1:c8:ad:d3:0a:83:84:5b:67:3d:4d:3f:15:f9:b9:42: a9:6f:4a:a5:94:3b:8e:b7:68:1c:ba:1c:80:8d:1f:fa:3c:87: 50:fc:49:83:de:5a:01:e7:80:5a:63:69:bc:2e:c6:7c:dc:b4: 21:e6:8e:25:cd:f7:c8:0a:e8:c1:fe:a2:6c:24:5b:c1:eb:49: 0d:2a:cc:6e:9b:d8:89:15:0e:53:27:b3:8b:87:50:6b:09:10: 74:43:ba:b4:dc:bc:3c:3a:95:27:fd:61:8a:6e:70:a9:6b:38: 75:f4:80:4b:2a:05:1a:1b:37:63:cb:b5:98:2c:c9:88:bd:d2: fa:2b:06:a5:f4:cf:77:10:94:71:e8:05:36:e5:1a:1a:d8:e0: 09:47:93:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKUNJfvZnhIHWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTRjOTk1ZmQtMmRiNy00YThmLWFlNjgtYTZjMjU0NjBhNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOZEGgSb8j/HfN1VUQ1jYXt6hquMfmHF9l68 NtSIK62qcWHNBHEb61UOboFs/4IiBSZsC53O+9+bEXCQi3B+erc82Gr6TlKKM+Ks vG6iRNs4wUEvcnD2JONJOA66U7O33WpMDRVtPccFNJbaZOv2VTezpLGeQ8CgqIr3 ujI7uM3JzFi+KdkOM+0NER1EMFq6j6GPsQocvuBaPnMypisadPu0KzbdJMZl3nie Y4zUl4IzXkHCJfPXryY5mdG8EXnIB9r932Ym2T02z84JXwl5Nez+NAdTAXTD4Okh oS0g1w/VGge7l5fXN3Ox6bafDkmrt3eeaGmpq0sfyNOOK3OHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiMmZ9Y4TRDjmcrLiySkuH+j9BbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFiZDljOWQtMDhlMy0z OWU0LWI4ZDItMzBkYzRkNDE1MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0LkhevMF3LKjDfGOy1VfsANhiosqnGfHsx2ZQtyuLwkjpkR5KP/aVe dSCbDBjGu9BEgl0xin7Nk6BEjzjO6D4IsQgTRo41UROGQogEz0j4f83hUqmG/Wgv QMnrVrrXfnbMTvRQGfHVTIteowZMocit0wqDhFtnPU0/Ffm5QqlvSqWUO463aBy6 HICNH/o8h1D8SYPeWgHngFpjabwuxnzctCHmjiXN98gK6MH+omwkW8HrSQ0qzG6b 2IkVDlMns4uHUGsJEHRDurTcvDw6lSf9YYpucKlrOHX0gEsqBRobN2PLtZgsyYi9 0vorBqX0z3cQlHHoBTblGhrY4AlHk6M= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:16 2025 by rpki-client