$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa File: 9baeeff1-275e-3c98-a3ea-85555542d7e8.roa (raw, json) Hash identifier: Bkdwx8TJmKQ/e54N5BAXKSjZJZh1BtNZEOcUPAgANG4= Subject key identifier: 30:68:5E:3F:94:79:AE:3B:E9:B4:72:9C:2E:53:5F:1D:B9:8D:C8:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24DB3C6509316733EEA830 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.197.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:db:3c:65:09:31:67:33:ee:a8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4027d5e2-5abe-4244-87d2-8319ea3da09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:8f:fd:5b:ba:fa:d0:6b:89:2d:7e:6e:b3: 15:a4:e7:9a:ab:48:fd:18:bc:8f:3b:24:ee:5f:ce: 38:12:c4:90:75:60:5a:8f:9e:53:4e:49:f1:f0:da: ba:a0:86:03:7d:82:65:99:dc:2c:b7:64:f4:bf:dc: ba:f3:c0:6c:ba:cf:30:c2:19:aa:6c:46:5a:15:dd: 01:18:1d:37:dc:22:2c:56:06:49:6b:04:59:77:06: 59:b8:44:0a:83:b6:a0:0f:c6:3d:9b:c8:e8:87:82: a9:1a:77:36:0c:bb:f2:70:27:a1:08:5c:90:34:fe: 25:a3:b4:62:69:0f:a0:b2:7d:76:a2:1c:b1:49:7d: 94:e7:00:40:91:83:aa:cf:8b:58:4e:b7:d6:70:f4: 42:86:77:52:1e:b3:a9:c7:61:fd:be:ae:45:d1:60: 86:01:f0:7e:81:28:77:57:fa:45:c3:9c:fe:ff:ec: cc:aa:35:36:c4:23:b7:e2:42:70:16:7a:2a:d5:69: 8f:37:cb:d5:8b:f5:c7:11:50:0f:54:d4:5b:fa:37: c7:86:86:e0:04:3f:6a:c1:e4:d5:a7:33:a1:9a:b4: 76:f0:0d:88:ed:15:cd:76:36:47:cd:a3:55:00:ba: 44:b7:35:fb:00:8f:cf:6b:03:35:fe:5c:de:37:b6: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:68:5E:3F:94:79:AE:3B:E9:B4:72:9C:2E:53:5F:1D:B9:8D:C8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b6:54:a2:5f:02:b1:54:f8:c6:de:92:42:7b:b2:66:45:22: 0f:a4:53:d4:a9:74:a9:27:e2:a9:8b:27:c6:49:42:aa:e9:e4: 94:1e:ce:de:2f:75:50:7a:25:2b:7d:96:4d:77:66:5f:5b:a6: d2:48:b3:cf:4a:e0:4b:92:9b:9c:84:c4:5b:13:30:da:3a:84: 30:97:60:e1:eb:1c:ea:93:bf:50:33:a2:a3:27:6f:70:e3:26: 25:28:f1:4b:85:58:1c:c8:4e:a9:fa:8f:ef:10:0b:4f:ca:d8: 54:54:8d:c8:d9:d2:32:52:60:90:7d:e9:48:c6:7f:5c:4e:10: d5:34:47:43:2b:f9:c3:72:20:9f:85:03:74:f4:79:53:77:af: 46:11:1a:bf:0a:88:6f:bd:36:31:80:0f:b4:10:68:14:cd:d9: da:d7:c8:80:57:e9:f8:c6:8f:f7:58:37:b3:2d:31:73:ee:3f: ef:f0:da:a8:12:de:9e:03:49:4b:06:67:94:33:7c:1d:4b:ef: 8c:d3:18:38:97:1f:c8:5a:16:7d:6b:9b:f0:5c:5a:c7:6e:9c: 31:c0:da:71:2e:b4:55:fa:58:d7:e4:22:26:4b:cd:c9:06:19: 72:34:2a:85:29:18:76:e3:96:0f:43:38:f6:ac:16:08:bf:ab: f2:18:35:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNs8ZQkxZzPuqDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDAyN2Q1ZTItNWFiZS00MjQ0LTg3ZDItODMxOWVhM2RhMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYuP/Vu6+tBriS1+brMVpOeaq0j9GLyPOyTu X844EsSQdWBaj55TTknx8Nq6oIYDfYJlmdwst2T0v9y688Bsus8wwhmqbEZaFd0B GB033CIsVgZJawRZdwZZuEQKg7agD8Y9m8joh4KpGnc2DLvycCehCFyQNP4lo7Ri aQ+gsn12ohyxSX2U5wBAkYOqz4tYTrfWcPRChndSHrOpx2H9vq5F0WCGAfB+gSh3 V/pFw5z+/+zMqjU2xCO34kJwFnoq1WmPN8vVi/XHEVAPVNRb+jfHhobgBD9qweTV pzOhmrR28A2I7RXNdjZHzaNVALpEtzX7AI/PawM1/lzeN7ZvnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBoXj+Uea476bRynC5TXx25jcinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJhZWVmZjEtMjc1ZS0z Yzk4LWEzZWEtODU1NTU1NDJkN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe2VKJfArFU+MbekkJ7smZFIg+kU9SpdKkn4qmLJ8ZJQqrp5JQezt4v dVB6JSt9lk13Zl9bptJIs89K4EuSm5yExFsTMNo6hDCXYOHrHOqTv1AzoqMnb3Dj JiUo8UuFWBzITqn6j+8QC0/K2FRUjcjZ0jJSYJB96UjGf1xOENU0R0Mr+cNyIJ+F A3T0eVN3r0YRGr8KiG+9NjGAD7QQaBTN2drXyIBX6fjGj/dYN7MtMXPuP+/w2qgS 3p4DSUsGZ5QzfB1L74zTGDiXH8haFn1rm/BcWsdunDHA2nEutFX6WNfkIiZLzckG GXI0KoUpGHbjlg9DOPasFgi/q/IYNU8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:00 2025 by rpki-client