$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa File: db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa (raw, json) Hash identifier: l/fQk6TJKCX2oJsyOc3Mlc1ZlRkLzkBuadmtQf5VoPk= Subject key identifier: DB:C5:5D:2C:B6:25:81:4A:B2:A4:64:84:0C:43:E6:6F:EE:F4:38:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B17913D5D8BC0E0B9AB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.197.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b1:79:13:d5:d8:bc:0e:0b:9a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b681f637-cd4e-4390-b118-a2edaef0f305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:cf:f7:1d:66:ba:ee:7e:c1:8a:4d:39:88: 5e:c6:2b:4f:f7:73:5c:47:c8:1e:2f:71:f2:bb:f9: c7:5f:ef:a6:fd:75:7b:a1:a3:52:d2:61:ba:1c:7f: a9:e4:e7:bc:90:87:6c:61:73:df:56:f3:5d:e5:d5: 58:23:6b:d1:18:c0:84:88:f1:0a:58:a0:2e:32:50: d2:15:68:dd:e6:a3:ee:d0:e9:54:17:66:7c:35:3e: 07:0e:e5:aa:64:e7:e1:9f:37:46:55:2f:77:71:f4: 8e:53:ba:6e:86:65:2b:45:8a:8e:6b:80:8f:d2:46: 40:cb:d4:bc:1f:d4:78:89:1e:3f:7e:1e:dc:fd:8b: 7b:61:fc:d4:b8:6e:93:bd:7c:11:b4:d3:4b:1d:57: f1:23:2e:4c:b2:88:24:54:0a:7e:3c:84:63:d4:30: 5f:2b:27:c7:61:bc:00:3b:05:48:70:ca:79:7b:c5: 37:10:d4:5e:76:37:9b:da:8c:11:6d:a0:81:8b:fb: b2:f6:43:c3:56:81:91:23:0c:27:d6:36:46:20:a0: c8:9a:0f:7f:a6:ae:b2:20:50:d5:62:56:ae:c0:5f: 85:4d:88:53:8f:f3:50:04:59:1c:0d:38:34:cf:d4: 91:c6:e8:cc:e1:8e:43:fe:e0:b8:36:8b:b7:24:29: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C5:5D:2C:B6:25:81:4A:B2:A4:64:84:0C:43:E6:6F:EE:F4:38:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:18:54:d1:c8:20:1d:d0:2d:f6:5e:99:8a:4a:c5:6c:54:c7: ac:cd:ae:fd:b0:80:4f:0c:ca:8e:2d:4b:29:6b:92:f8:9a:78: dd:55:da:14:80:36:0b:28:90:de:4f:28:d5:b3:6d:68:81:5b: fc:3f:d6:d7:70:9a:4a:e0:0f:9b:fe:32:dd:1b:8f:6a:bc:7b: 2d:38:61:25:d5:6a:07:cf:9c:3c:d1:ea:5f:9f:8e:8f:b3:04: 97:7f:92:c6:32:1b:a0:5d:fd:4d:99:0f:88:5f:04:27:9b:13: 29:52:b6:7f:d2:72:f0:5d:51:0b:5b:84:05:8e:59:33:34:ff: a6:98:97:f9:4f:fc:91:d3:d9:d9:a4:5a:6c:57:cb:52:ac:94: 36:14:9e:1e:bf:d7:4c:37:76:8d:de:1f:0b:7b:50:b8:04:d8: aa:20:64:9d:03:45:18:0e:3a:7f:18:d6:5f:ab:90:e3:e2:70: 7a:c5:97:67:15:e3:32:f3:f9:09:64:b6:d8:d4:14:aa:8a:6a: 22:a5:cf:89:f5:a0:4f:b5:cd:5a:5e:74:fd:bf:3a:e9:f1:e4: 00:20:3f:ff:03:04:4f:96:e7:f4:37:7c:e9:18:f3:92:6f:89: 89:a1:9a:1c:69:5f:eb:cf:04:ae:ce:a6:59:c8:88:74:75:ad: 08:de:28:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLF5E9XYvA4LmrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YjY4MWY2MzctY2Q0ZS00MzkwLWIxMTgtYTJlZGFlZjBmMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigvP9x1muu5+wYpNOYhexitP93NcR8geL3Hy u/nHX++m/XV7oaNS0mG6HH+p5Oe8kIdsYXPfVvNd5dVYI2vRGMCEiPEKWKAuMlDS FWjd5qPu0OlUF2Z8NT4HDuWqZOfhnzdGVS93cfSOU7puhmUrRYqOa4CP0kZAy9S8 H9R4iR4/fh7c/Yt7YfzUuG6TvXwRtNNLHVfxIy5MsogkVAp+PIRj1DBfKyfHYbwA OwVIcMp5e8U3ENRedjeb2owRbaCBi/uy9kPDVoGRIwwn1jZGIKDImg9/pq6yIFDV YlauwF+FTYhTj/NQBFkcDTg0z9SRxujM4Y5D/uC4Nou3JCkhswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvFXSy2JYFKsqRkhAxD5m/u9DhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyOGE4YmYtNzhhZi0z NWFhLWFmN2EtOGQ0Y2JjMzE4OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8YVNHIIB3QLfZemYpKxWxUx6zNrv2wgE8Myo4tSylrkviaeN1V2hSA NgsokN5PKNWzbWiBW/w/1tdwmkrgD5v+Mt0bj2q8ey04YSXVagfPnDzR6l+fjo+z BJd/ksYyG6Bd/U2ZD4hfBCebEylStn/ScvBdUQtbhAWOWTM0/6aYl/lP/JHT2dmk WmxXy1KslDYUnh6/10w3do3eHwt7ULgE2KogZJ0DRRgOOn8Y1l+rkOPicHrFl2cV 4zLz+QlkttjUFKqKaiKlz4n1oE+1zVpedP2/Ounx5AAgP/8DBE+W5/Q3fOkY85Jv iYmhmhxpX+vPBK7OplnIiHR1rQjeKB4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:26 2025 by rpki-client