$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa File: 5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa (raw, json) Hash identifier: L4/RRpgJYNbzVFW0ndaPGGUZU0bY7Yt7qUfqkYk32S4= Subject key identifier: 5A:6D:A7:CA:D0:74:C3:71:86:F0:ED:D3:97:3B:3E:81:C0:DC:AD:65 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B99D7D7289BC06EB8500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.196.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b9:9d:7d:72:89:bc:06:eb:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d13cad1c-946f-47e3-b261-5b1c434ec214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:4d:2b:fa:9f:5f:66:ad:68:a8:ba:01:63: 3a:88:d9:69:5d:d0:32:13:4e:d7:7b:93:1f:02:e1: c8:bb:70:92:ff:f5:f3:9f:c2:ef:41:9a:cf:43:9f: e8:aa:1d:e6:d1:c6:7c:bd:46:ad:45:d7:d6:1c:3e: d1:7d:7f:e5:3c:b3:66:4f:be:0a:e9:fa:0f:ba:03: f6:aa:13:78:f8:98:a2:78:f7:92:dc:43:3f:19:b2: 5b:4f:ad:10:72:80:18:ec:c0:f2:03:9b:62:9c:be: 8c:e0:36:7c:85:0e:eb:fe:0e:3a:17:69:7f:82:f9: 9b:60:7c:2b:95:52:22:6b:f2:7f:65:26:43:b4:a7: 03:84:a5:8e:40:fd:4d:b8:6f:53:08:c7:8b:11:4f: 6f:c4:98:aa:ad:58:90:a5:64:72:7d:1f:4b:8c:7d: 7c:c1:3d:9d:9e:90:f9:7d:85:ac:02:4c:05:4b:55: d3:66:be:2c:99:0c:13:16:5a:53:c0:f4:cd:65:e0: 66:56:17:64:01:82:5a:ec:2a:9c:98:59:9a:3e:c0: ce:f8:42:42:8b:d9:bb:0a:f0:c9:bb:c0:d1:ad:11: 1f:63:dc:cb:fc:d7:9c:13:f7:18:f2:60:00:23:e2: 8b:39:53:9d:37:6b:79:80:f2:6a:d0:4c:bf:c2:f4: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:A7:CA:D0:74:C3:71:86:F0:ED:D3:97:3B:3E:81:C0:DC:AD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:78:bb:95:92:84:95:6c:05:a0:ac:c1:d7:a9:9b:63:7a:28: cf:84:ee:14:45:37:a5:42:32:b0:bd:88:89:cf:75:cb:41:bc: 30:5b:22:3e:dd:cd:c8:e0:ad:8c:fd:58:b6:bf:d6:08:58:5c: ce:0a:cc:14:13:84:a1:f4:2f:24:fc:5f:b3:52:b2:c2:46:cd: ff:5e:36:8c:17:d1:54:6f:21:b3:23:d8:ea:b0:38:c8:d7:bb: 53:bf:a8:4c:24:cd:a8:2a:4d:d8:f1:0a:98:ae:a0:17:7f:b7: 8e:74:f5:6a:74:4c:9d:92:48:cd:2b:c1:15:06:76:a2:7a:03: 57:04:8d:a5:bd:58:6a:da:58:28:9a:86:4c:3b:13:67:e4:29: d6:90:63:40:1a:34:11:d1:c7:b0:35:6b:f9:62:0e:0e:45:a7: 9a:23:38:5e:b9:f6:67:80:2d:7e:96:fb:a7:b0:30:bf:5a:bf: 46:7b:c1:3c:bd:3b:09:45:a8:38:26:45:cb:c5:8c:f9:e4:27: 95:9f:b0:0c:05:57:fb:ff:9d:d0:6a:f7:a5:94:ff:70:21:49: 8f:41:d9:6a:aa:80:8b:72:ac:91:8c:23:20:bb:f5:56:2e:ac: cd:91:91:45:e3:06:1a:0e:46:fc:11:6a:d2:ec:44:49:5f:e1: d3:a4:12:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLmdfXKJvAbrhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDEzY2FkMWMtOTQ2Zi00N2UzLWIyNjEtNWIxYzQzNGVjMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg5NK/qfX2ataKi6AWM6iNlpXdAyE07Xe5Mf AuHIu3CS//Xzn8LvQZrPQ5/oqh3m0cZ8vUatRdfWHD7RfX/lPLNmT74K6foPugP2 qhN4+JiiePeS3EM/GbJbT60QcoAY7MDyA5tinL6M4DZ8hQ7r/g46F2l/gvmbYHwr lVIia/J/ZSZDtKcDhKWOQP1NuG9TCMeLEU9vxJiqrViQpWRyfR9LjH18wT2dnpD5 fYWsAkwFS1XTZr4smQwTFlpTwPTNZeBmVhdkAYJa7CqcmFmaPsDO+EJCi9m7CvDJ u8DRrREfY9zL/NecE/cY8mAAI+KLOVOdN2t5gPJq0Ey/wvSFwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFptp8rQdMNxhvDt05c7PoHA3K1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQzNWRiZjEtYjU0MC0z MmVlLThiNmMtNDhmOTFlNTFmY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB4u5WShJVsBaCswdepm2N6KM+E7hRFN6VCMrC9iInPdctBvDBbIj7d zcjgrYz9WLa/1ghYXM4KzBQThKH0LyT8X7NSssJGzf9eNowX0VRvIbMj2OqwOMjX u1O/qEwkzagqTdjxCpiuoBd/t4509Wp0TJ2SSM0rwRUGdqJ6A1cEjaW9WGraWCia hkw7E2fkKdaQY0AaNBHRx7A1a/liDg5Fp5ojOF659meALX6W+6ewML9av0Z7wTy9 OwlFqDgmRcvFjPnkJ5WfsAwFV/v/ndBq96WU/3AhSY9B2WqqgItyrJGMIyC79VYu rM2RkUXjBhoORvwRatLsRElf4dOkEoM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:11 2025 by rpki-client