$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91eeeaea-e86b-3929-8076-ad42a7787a7c.roa File: 91eeeaea-e86b-3929-8076-ad42a7787a7c.roa (raw, json) Hash identifier: k0CpVLpS8u7s7vMF5+nZiE4MBN0svWzJrTyMh8tQV2k= Subject key identifier: 6A:9E:E1:06:FE:E8:8C:CF:1F:C7:29:68:AB:4E:16:EC:C0:28:3E:71 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24D355490396046D2EA480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91eeeaea-e86b-3929-8076-ad42a7787a7c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.196.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d3:55:49:03:96:04:6d:2e:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=f95b9314-7554-4f3d-9f78-226fddf6e9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:8f:9f:3a:5a:b1:b3:2e:82:7b:d5:14:50: 61:a2:50:eb:80:0c:04:eb:c3:28:da:95:c4:69:3d: f8:0e:4e:33:01:78:32:4b:7e:ff:4e:5c:1c:75:a1: a6:8e:01:c1:e2:fb:b9:07:40:45:fe:22:2f:77:6e: ab:b9:83:51:16:b2:40:69:aa:f8:f0:bf:1c:13:05: 27:7a:ef:63:41:bb:41:71:5c:ba:a6:d4:ed:97:39: 02:92:f1:49:64:18:ad:3d:3b:0d:9b:7d:ca:da:40: c9:f9:2a:f5:59:62:f5:69:57:03:9e:14:8e:60:66: b2:c8:da:02:af:5f:09:32:78:9d:e0:a6:06:21:70: d7:45:d7:91:5a:37:f7:2a:35:b7:b4:53:9b:82:fb: d5:9f:a8:da:ba:ac:83:2f:a0:49:86:3f:4f:fd:e0: ae:f8:73:65:45:87:9b:48:d1:66:84:91:7a:8d:d0: 56:fe:d2:4c:20:a6:f8:2b:b6:18:14:ac:f6:c4:1d: ab:36:7c:cb:70:cc:57:6e:70:01:7c:b9:5f:79:5a: 4d:85:a1:09:1e:73:79:be:cd:7e:bc:d7:b5:5c:1f: ef:81:ab:d6:66:b9:2b:68:65:a2:08:7c:5f:4a:89: 76:57:8c:e6:2c:a4:d6:4a:39:de:08:23:5f:d8:ea: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9E:E1:06:FE:E8:8C:CF:1F:C7:29:68:AB:4E:16:EC:C0:28:3E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91eeeaea-e86b-3929-8076-ad42a7787a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ed:e7:7a:55:01:94:5a:2d:e3:cd:00:70:6c:b0:29:38:d2: 5d:f9:5e:2c:9d:f1:8a:ea:ff:a8:cb:1d:a7:9e:fa:21:40:25: 95:c6:5e:29:62:5b:1b:14:ce:16:9e:e9:72:2f:d0:08:04:25: 02:fb:77:d1:5c:e4:01:18:49:f3:cb:59:13:f0:41:8c:d8:8c: c4:50:ba:b4:ac:a1:1f:99:ca:78:c4:d9:70:03:8b:05:36:b3: 20:f8:3a:e8:5d:e2:b4:d7:60:01:ae:21:b7:c0:e3:4a:a9:df: 7d:18:d1:32:6e:2c:70:5b:37:36:3d:41:71:2a:04:e1:77:92: bc:e7:37:0d:26:c1:f8:bc:2a:db:ca:54:fd:75:48:1b:72:5a: 0c:f9:52:e2:2e:12:d9:9b:7e:4b:07:76:6c:4e:48:80:29:a4: 23:9d:0a:c3:5f:b7:b2:e7:6c:16:7e:c0:7e:d9:35:16:f2:96: 02:5f:05:2a:fd:0f:2e:77:7a:2b:fc:0a:b1:02:a7:eb:87:55: 50:d5:cc:dd:5a:41:f5:c5:03:f1:b7:c4:84:34:09:b9:ae:c8: a8:7a:da:58:4d:71:b1:ff:da:24:ca:d9:cb:ff:5c:0e:9d:a8: be:c8:c2:2a:f7:52:00:c0:f2:8e:e1:b5:2b:71:90:13:a8:87: 66:4e:4b:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNNVSQOWBG0upIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk Zjk1YjkzMTQtNzU1NC00ZjNkLTlmNzgtMjI2ZmRkZjZlOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E6PnzpasbMugnvVFFBholDrgAwE68Mo2pXE aT34Dk4zAXgyS37/TlwcdaGmjgHB4vu5B0BF/iIvd26ruYNRFrJAaar48L8cEwUn eu9jQbtBcVy6ptTtlzkCkvFJZBitPTsNm33K2kDJ+Sr1WWL1aVcDnhSOYGayyNoC r18JMnid4KYGIXDXRdeRWjf3KjW3tFObgvvVn6jauqyDL6BJhj9P/eCu+HNlRYeb SNFmhJF6jdBW/tJMIKb4K7YYFKz2xB2rNnzLcMxXbnABfLlfeVpNhaEJHnN5vs1+ vNe1XB/vgavWZrkraGWiCHxfSol2V4zmLKTWSjneCCNf2OpyqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqe4Qb+6IzPH8cpaKtOFuzAKD5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFlZWVhZWEtZTg2Yi0z OTI5LTgwNzYtYWQ0MmE3Nzg3YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnt53pVAZRaLePNAHBssCk40l35Xiyd8Yrq/6jLHaee+iFAJZXGXili WxsUzhae6XIv0AgEJQL7d9Fc5AEYSfPLWRPwQYzYjMRQurSsoR+ZynjE2XADiwU2 syD4Ouhd4rTXYAGuIbfA40qp330Y0TJuLHBbNzY9QXEqBOF3krznNw0mwfi8KtvK VP11SBtyWgz5UuIuEtmbfksHdmxOSIAppCOdCsNft7LnbBZ+wH7ZNRbylgJfBSr9 Dy53eiv8CrECp+uHVVDVzN1aQfXFA/G3xIQ0CbmuyKh62lhNcbH/2iTK2cv/XA6d qL7Iwir3UgDA8o7htStxkBOoh2ZOS9M= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:37 2025 by rpki-client