$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f032378-47d6-37ac-af0b-c39a0edea420.roa File: 8f032378-47d6-37ac-af0b-c39a0edea420.roa (raw, json) Hash identifier: 1Wen8EhKSRcNugm+otzHVuz3GHMAxuK+ZooNi6abz/s= Subject key identifier: ED:C1:09:01:AF:A0:09:5A:F1:7C:4D:6B:49:00:D7:BB:1D:94:0A:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24D1BB768BBD284821CE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f032378-47d6-37ac-af0b-c39a0edea420.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.198.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d1:bb:76:8b:bd:28:48:21:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=ba0637d4-5667-4bca-86a3-f55c6883be1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:8d:28:ee:04:e2:bd:cf:91:83:c0:a0:d1: 93:3e:34:06:de:73:66:78:a9:ad:4a:28:e5:28:79: 6e:9e:39:3e:dd:76:d0:84:42:ce:82:3d:2b:c9:48: 0f:69:32:1b:e9:69:60:58:ab:55:c8:f2:ea:bf:11: 95:51:33:5e:db:59:e3:ee:77:d2:45:bb:99:e0:5a: 22:2f:8b:de:e0:1e:bd:7d:11:57:25:95:fa:f4:3f: e1:19:90:2e:d3:cd:d5:11:42:6b:76:70:01:ae:97: 8e:eb:7f:b5:0f:b2:d6:bb:d0:d1:e8:03:22:d2:06: fa:35:44:29:f6:53:bd:78:bb:80:c2:b5:e6:d0:b8: 1e:e2:96:5e:c4:77:18:1e:5c:25:d3:bf:b3:c4:9c: 35:2b:e8:f7:12:e0:59:8b:73:6b:c7:54:6c:fb:c5: 91:ed:90:7a:4c:fd:a6:bb:25:94:8c:61:41:44:72: c1:ff:fe:b0:15:20:a0:dc:a4:3f:a5:08:af:47:4f: e2:b0:b1:5e:98:21:29:ca:8f:4d:66:08:13:63:7d: 33:d1:ea:a3:fd:11:b9:26:c0:ea:94:29:42:f8:bc: ff:cb:f5:a9:94:0e:52:4e:ba:a4:09:ac:6e:1c:9d: 2b:a7:1e:90:fc:c6:39:d4:9f:b7:d3:09:a8:2f:01: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C1:09:01:AF:A0:09:5A:F1:7C:4D:6B:49:00:D7:BB:1D:94:0A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8f032378-47d6-37ac-af0b-c39a0edea420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:55:28:62:19:12:2e:f1:1a:b1:36:ef:df:fd:03:bd:3f:87: 61:a8:c5:50:0a:56:42:e6:65:ad:1d:df:70:33:40:ad:a7:d2: d9:1e:bf:2c:8e:3e:ee:0a:3a:58:25:7f:53:fa:92:05:99:df: e9:46:eb:03:4e:3b:1a:d4:14:e5:83:34:b3:a5:35:df:93:23: 13:2e:0c:68:cc:b3:96:27:0c:52:e8:4c:8e:25:6a:4e:a5:87: be:9e:20:cb:a4:03:6f:6d:78:0a:46:0f:ca:f8:c1:2a:d8:f4: f9:02:aa:d6:c0:59:4f:99:7f:b3:d8:02:7a:36:a0:a2:0c:30: c5:c1:d6:95:6e:7c:d2:11:85:37:70:24:c5:2c:fb:4f:fe:c1: 01:7a:66:46:29:61:6a:2c:c1:c5:7b:72:fe:a9:75:eb:1b:65: 2a:03:9d:49:e5:82:ca:f5:f8:73:09:28:38:07:53:d2:3c:ce: 52:c9:1b:0d:f1:be:d7:4e:b9:88:7e:bd:4d:db:5e:c9:21:75: 57:03:1d:c6:37:77:8d:c2:35:60:a0:22:25:d0:da:aa:c1:40: c5:34:f5:0d:a0:d0:e2:5d:bc:86:e4:9e:60:85:fe:d7:2e:7d: 8a:32:e6:8c:25:7e:b0:e5:7b:5d:0b:49:2f:eb:b0:8e:86:e3: 12:e9:18:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNG7dou9KEghzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmEwNjM3ZDQtNTY2Ny00YmNhLTg2YTMtZjU1YzY4ODNiZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOSNKO4E4r3PkYPAoNGTPjQG3nNmeKmtSijl KHlunjk+3XbQhELOgj0ryUgPaTIb6WlgWKtVyPLqvxGVUTNe21nj7nfSRbuZ4Foi L4ve4B69fRFXJZX69D/hGZAu083VEUJrdnABrpeO63+1D7LWu9DR6AMi0gb6NUQp 9lO9eLuAwrXm0Lge4pZexHcYHlwl07+zxJw1K+j3EuBZi3Nrx1Rs+8WR7ZB6TP2m uyWUjGFBRHLB//6wFSCg3KQ/pQivR0/isLFemCEpyo9NZggTY30z0eqj/RG5JsDq lClC+Lz/y/WplA5STrqkCaxuHJ0rpx6Q/MY51J+30wmoLwHd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3BCQGvoAla8XxNa0kA17sdlAoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGYwMzIzNzgtNDdkNi0z N2FjLWFmMGItYzM5YTBlZGVhNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhVKGIZEi7xGrE279/9A70/h2GoxVAKVkLmZa0d33AzQK2n0tkevyyO Pu4KOlglf1P6kgWZ3+lG6wNOOxrUFOWDNLOlNd+TIxMuDGjMs5YnDFLoTI4lak6l h76eIMukA29teApGD8r4wSrY9PkCqtbAWU+Zf7PYAno2oKIMMMXB1pVufNIRhTdw JMUs+0/+wQF6ZkYpYWoswcV7cv6pdesbZSoDnUnlgsr1+HMJKDgHU9I8zlLJGw3x vtdOuYh+vU3bXskhdVcDHcY3d43CNWCgIiXQ2qrBQMU09Q2g0OJdvIbknmCF/tcu fYoy5owlfrDle10LSS/rsI6G4xLpGCk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:46 2025 by rpki-client