$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8c61210-0fbf-351f-a919-916417d9802b.roa File: c8c61210-0fbf-351f-a919-916417d9802b.roa (raw, json) Hash identifier: MUYom3hheIAiEtO9E2WhGsFftfHhfb4yyO4JNd4OaMk= Subject key identifier: F3:A6:BA:EB:25:20:EA:36:4B:B0:27:1B:07:0E:0A:05:52:D8:C4:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A3124775C45E41643280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8c61210-0fbf-351f-a919-916417d9802b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.198.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a3:12:47:75:c4:5e:41:64:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=80af4711-97c1-4470-a0f9-f15ea2220ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:d5:a8:2b:57:79:bd:1b:fc:71:de:16:d9: a4:33:21:25:59:6b:c9:b5:81:ee:87:4f:5f:ee:1c: 0f:5d:06:29:db:b5:60:68:f1:0d:ae:d1:d5:71:10: 5b:1c:01:8c:78:51:b7:1c:63:80:b4:7d:d3:9e:26: 75:2d:13:d6:6d:aa:3d:ea:ca:0d:09:a8:a3:64:95: 0e:f4:8f:73:8c:59:e4:c0:09:0e:c4:4e:00:c5:d3: 1a:0b:17:e7:57:8c:13:7f:75:d7:e5:4a:0a:5f:04: e1:7c:84:3f:54:ee:43:e8:75:17:93:2f:76:80:97: 4a:ea:ab:a3:37:f6:c6:0e:57:ca:e6:90:da:86:e7: b3:c1:cb:09:2b:e4:b1:14:02:01:94:c5:b5:b2:da: 68:72:9b:64:59:de:1e:c1:87:c1:5b:87:6a:b4:6a: d5:b1:c8:3f:19:bd:01:6d:54:be:86:b3:dc:46:4d: c8:90:03:11:48:86:f2:5c:85:e4:bc:1e:18:1a:36: 5b:24:b5:0e:8f:81:d7:ac:7a:5c:2e:80:6e:16:79: 6a:e7:40:c3:eb:f5:cb:a8:3b:b1:a2:e8:ca:ae:42: 3a:bc:a5:45:46:eb:78:20:cd:c7:d2:6c:c0:bd:f7: 06:b5:27:48:a6:af:61:0b:6b:af:19:07:55:5b:a6: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A6:BA:EB:25:20:EA:36:4B:B0:27:1B:07:0E:0A:05:52:D8:C4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8c61210-0fbf-351f-a919-916417d9802b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d3:18:b6:3c:fa:c6:c0:95:34:f4:b9:5f:28:0b:19:d2:66: 8d:9b:3a:49:fb:22:fe:b4:a0:f7:be:23:5f:d1:9e:83:9a:74: 14:75:c8:ee:40:8b:3a:d2:40:71:3f:95:46:06:2f:25:22:df: 75:6c:05:38:04:74:1a:0f:5e:00:13:5e:32:22:51:e2:14:01: a8:84:bd:2e:23:d6:8d:e4:2d:10:52:86:67:ed:be:5f:f9:24: 41:03:22:58:5a:77:7d:61:64:23:df:f1:3f:52:58:fa:3e:f7: 02:ae:5d:d7:d6:e8:c5:c3:99:e1:c1:42:89:ec:2e:bd:d8:f0: ea:b8:6b:a3:ee:18:7f:af:65:78:03:6c:86:68:12:c9:0d:6e: dd:88:e6:4f:6b:1c:8a:c3:5a:c1:08:cb:4e:56:58:af:40:bf: ae:0c:38:c5:0d:f3:bc:a0:a8:97:05:df:d4:6f:9e:cb:b4:1d: 4b:1d:e2:17:a5:ed:6f:eb:dc:32:58:78:70:50:1d:69:9e:f9: fb:00:f4:66:90:43:cf:a0:97:78:b3:94:ec:cc:22:c5:b7:50: 68:d3:1f:21:81:e2:29:27:c1:6b:09:86:2f:05:17:90:7a:b2: 6e:a5:4f:b9:43:b1:0b:aa:73:f4:f3:d2:67:80:5e:77:8f:a8: 92:74:71:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKMSR3XEXkFkMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODBhZjQ3MTEtOTdjMS00NDcwLWEwZjktZjE1ZWEyMjIwZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cDVqCtXeb0b/HHeFtmkMyElWWvJtYHuh09f 7hwPXQYp27VgaPENrtHVcRBbHAGMeFG3HGOAtH3TniZ1LRPWbao96soNCaijZJUO 9I9zjFnkwAkOxE4AxdMaCxfnV4wTf3XX5UoKXwThfIQ/VO5D6HUXky92gJdK6quj N/bGDlfK5pDahuezwcsJK+SxFAIBlMW1stpocptkWd4ewYfBW4dqtGrVscg/Gb0B bVS+hrPcRk3IkAMRSIbyXIXkvB4YGjZbJLUOj4HXrHpcLoBuFnlq50DD6/XLqDux oujKrkI6vKVFRut4IM3H0mzAvfcGtSdIpq9hC2uvGQdVW6ZJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOmuuslIOo2S7AnGwcOCgVS2MSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzhjNjEyMTAtMGZiZi0z NTFmLWE5MTktOTE2NDE3ZDk4MDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvTGLY8+sbAlTT0uV8oCxnSZo2bOkn7Iv60oPe+I1/RnoOadBR1yO5A izrSQHE/lUYGLyUi33VsBTgEdBoPXgATXjIiUeIUAaiEvS4j1o3kLRBShmftvl/5 JEEDIlhad31hZCPf8T9SWPo+9wKuXdfW6MXDmeHBQonsLr3Y8Oq4a6PuGH+vZXgD bIZoEskNbt2I5k9rHIrDWsEIy05WWK9Av64MOMUN87ygqJcF39Rvnsu0HUsd4hel 7W/r3DJYeHBQHWme+fsA9GaQQ8+gl3izlOzMIsW3UGjTHyGB4iknwWsJhi8FF5B6 sm6lT7lDsQuqc/Tz0meAXnePqJJ0cYk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:44 2025 by rpki-client