$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfaecda-9f95-3c48-a751-2a371186a19d.roa File: 5dfaecda-9f95-3c48-a751-2a371186a19d.roa (raw, json) Hash identifier: KEq1ri/zMpDgq7Zy6f2/2Auy0pj+VIOWpaqRVePdXDo= Subject key identifier: 79:70:E2:A3:57:69:9C:5D:13:9F:C2:5F:3E:B1:58:52:0A:9D:7D:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A3ACC183661EC1DBC400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfaecda-9f95-3c48-a751-2a371186a19d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.199.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a3:ac:c1:83:66:1e:c1:db:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d93b3f35-72f6-4e72-befb-82c7c66268b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:b7:c2:c6:04:96:e2:6f:ba:30:22:e7:14: 60:d0:15:72:6b:db:04:63:6b:a3:fc:24:34:a9:f7: 89:52:ee:0e:74:08:74:9e:21:93:42:08:52:50:98: 00:2c:a4:1c:62:89:26:77:0a:8f:58:65:38:f0:7c: 5b:d5:be:4b:64:95:5d:04:1b:0c:28:22:0c:f8:bd: cd:38:d6:65:7d:75:6a:6d:e4:b1:43:a5:9e:5c:a3: 35:19:43:b7:60:ff:20:2b:a7:3d:8a:eb:59:56:3c: c8:06:c6:b9:d0:0d:51:04:57:3f:3c:76:29:53:9c: fb:01:19:14:92:ed:2c:b7:11:9c:09:93:c5:a7:fa: 93:f2:33:72:e0:4b:ac:d4:bb:b1:ff:fe:f8:e7:3c: 2d:38:51:65:59:6d:c0:18:12:4e:b7:be:dc:11:8f: d0:07:88:d6:dd:18:a9:24:01:d7:09:74:76:9b:d4: 4b:3c:45:91:02:50:34:70:5e:3d:35:34:bf:90:af: 51:62:28:9b:2c:61:41:9c:81:00:57:23:ab:f0:56: 6c:ec:02:da:6c:b2:b3:a9:31:6a:36:38:be:3b:2a: 72:cb:82:a1:50:8f:82:2e:64:65:6f:62:7a:fd:91: 93:7e:3f:6a:00:6d:ab:e4:3a:4c:36:34:7b:cc:ad: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:70:E2:A3:57:69:9C:5D:13:9F:C2:5F:3E:B1:58:52:0A:9D:7D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfaecda-9f95-3c48-a751-2a371186a19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8b:7b:cc:8e:20:ca:51:c6:3c:79:7a:9f:86:54:05:89:72: b3:1e:97:a3:7e:f5:3f:33:75:cd:da:db:ca:75:2a:4b:ed:6b: 6e:d7:39:a8:f8:c1:ae:5e:54:cb:1c:fa:3d:80:c6:23:45:06: 3f:3d:a1:cb:4b:48:d7:69:97:c7:51:07:9a:14:57:bc:06:5a: 73:e9:64:97:62:a0:66:af:5b:b5:75:4b:0c:69:f0:e3:86:1b: b6:25:bc:91:e6:47:6e:9e:61:f7:83:96:73:98:35:43:5a:67: d6:59:87:0f:81:bb:fc:67:90:66:42:31:92:d3:e1:8e:ea:8a: bc:9a:e6:bc:e7:0c:00:03:4d:f7:3b:57:c8:9a:bc:0e:9c:12: 12:44:4a:b1:3d:1f:cb:c1:8f:39:b2:7b:a8:d2:25:b8:e0:bd: 3a:b8:89:d7:20:19:06:cf:87:5e:c3:58:4c:42:14:46:d1:bb: 3b:63:35:b7:94:23:7e:f7:21:ce:3d:2d:99:d0:f6:68:39:15: 69:de:fd:08:5a:29:be:8f:fc:8c:90:f1:f6:99:9f:47:e6:aa: 5b:5f:a8:c6:4f:31:6c:93:79:97:03:26:f1:7c:62:8b:67:83: 92:76:62:83:6e:e5:19:73:73:e8:dd:ac:7c:3f:47:ed:b4:55: 39:79:a9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKOswYNmHsHbxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDkzYjNmMzUtNzJmNi00ZTcyLWJlZmItODJjN2M2NjI2OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPy3wsYEluJvujAi5xRg0BVya9sEY2uj/CQ0 qfeJUu4OdAh0niGTQghSUJgALKQcYokmdwqPWGU48Hxb1b5LZJVdBBsMKCIM+L3N ONZlfXVqbeSxQ6WeXKM1GUO3YP8gK6c9iutZVjzIBsa50A1RBFc/PHYpU5z7ARkU ku0stxGcCZPFp/qT8jNy4Eus1Lux//745zwtOFFlWW3AGBJOt77cEY/QB4jW3Rip JAHXCXR2m9RLPEWRAlA0cF49NTS/kK9RYiibLGFBnIEAVyOr8FZs7ALabLKzqTFq Nji+Oypyy4KhUI+CLmRlb2J6/ZGTfj9qAG2r5DpMNjR7zK3NpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlw4qNXaZxdE5/CXz6xWFIKnX0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmYWVjZGEtOWY5NS0z YzQ4LWE3NTEtMmEzNzExODZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKLe8yOIMpRxjx5ep+GVAWJcrMel6N+9T8zdc3a28p1Kkvta27XOaj4 wa5eVMsc+j2AxiNFBj89octLSNdpl8dRB5oUV7wGWnPpZJdioGavW7V1Swxp8OOG G7YlvJHmR26eYfeDlnOYNUNaZ9ZZhw+Bu/xnkGZCMZLT4Y7qirya5rznDAADTfc7 V8iavA6cEhJESrE9H8vBjzmye6jSJbjgvTq4idcgGQbPh17DWExCFEbRuztjNbeU I373Ic49LZnQ9mg5FWne/QhaKb6P/IyQ8faZn0fmqltfqMZPMWyTeZcDJvF8Yotn g5J2YoNu5Rlzc+jdrHw/R+20VTl5qf8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:40:49 2025 by rpki-client