$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa File: db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa (raw, json) Hash identifier: SAxP/Gpg8f0fuirySw7vDqLvidQmjfJyxSq6E1xHGn4= Subject key identifier: E7:ED:44:EB:CD:20:F5:97:8C:47:C1:41:C4:41:0A:74:33:66:13:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24D5CDE6950F5C897B8FE8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.154.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d5:cd:e6:95:0f:5c:89:7b:8f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=97a9cee8-9c1d-4ec4-b6a6-83d098a5365d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fb:81:7b:78:d7:f5:40:2c:13:92:07:3b:1a: af:2b:2b:f7:a4:21:64:9a:ca:f9:be:34:24:11:bb: a0:e7:38:e7:de:1d:68:83:d9:a1:5a:77:04:b6:0b: 9a:3a:73:3f:36:12:9b:d2:e7:ca:03:bb:3a:f4:33: 5c:ec:fa:4e:64:cf:9a:5e:72:97:b9:3a:8f:b0:b3: 41:34:f1:fa:cc:76:17:62:d3:5d:a5:0d:60:bb:a4: 13:2b:7e:f0:1d:93:1f:85:38:7e:78:b9:4a:94:93: 0e:20:fd:02:05:07:cc:44:2a:9e:7e:82:e1:4d:09: 74:73:6b:17:cf:79:04:90:2a:5b:a9:80:0a:e7:e1: cc:97:69:5d:64:0b:2d:ce:6c:91:86:54:ee:9e:21: 4b:a4:13:f8:8b:d0:f8:b5:5c:27:f7:bf:dc:be:c2: 66:b8:bb:19:cb:fe:33:07:65:8c:69:37:94:7e:be: b1:68:30:ab:59:1d:16:f6:7c:e7:f6:10:36:05:33: 07:97:40:af:2c:b1:e7:40:c4:4a:f8:cb:dc:4f:15: 25:d2:13:29:83:6b:6d:f9:d1:44:6b:e7:8f:9f:f6: e2:5c:f5:3e:0e:ce:15:64:a0:0c:13:17:90:3a:e1: 81:33:67:d6:6e:7e:40:7c:06:d1:e0:c7:e7:bc:da: 94:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:ED:44:EB:CD:20:F5:97:8C:47:C1:41:C4:41:0A:74:33:66:13:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d6:00:ef:5a:f0:6b:b1:84:d4:07:0e:aa:1f:18:0d:9e:66: 90:42:0e:19:da:68:c9:a8:0f:21:62:83:fa:74:82:c1:13:a2: a2:0b:c5:6e:b6:b2:91:50:d5:47:b2:04:ff:f0:06:fb:2f:8d: 94:5d:1b:3b:8e:1e:a4:36:3b:78:a7:8b:2a:e7:60:0a:dd:61: fa:55:11:ff:fa:97:a2:75:c0:6f:e3:bf:f1:30:21:aa:20:33: a2:66:89:0b:08:02:b9:ba:8a:e3:b5:b7:21:c3:56:d4:5f:0b: c1:04:db:c3:54:59:58:4a:21:f8:2b:09:73:9d:89:08:f3:fa: 47:fc:18:c9:b7:b5:02:51:52:a2:23:da:0b:75:24:c8:4a:d6: 67:49:84:95:70:ad:fe:00:2c:1d:7f:d7:6d:ef:76:76:be:68: a2:cd:bf:fa:31:28:3b:8f:ac:cb:78:57:c0:91:e0:08:6c:a2: de:6f:b7:c1:27:81:07:2d:f8:4e:b2:76:c6:b3:43:1b:1a:ef: bb:bf:54:d7:bd:f9:8f:3d:07:25:2e:fb:93:48:ac:e5:59:77: c8:b3:59:2d:b8:d7:68:44:07:42:68:ce:22:b3:a0:e2:94:42: 45:7d:17:7e:9d:75:ab:78:30:3a:74:c6:30:70:71:e5:0f:56: 7a:83:46:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNXN5pUPXIl7j+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTdhOWNlZTgtOWMxZC00ZWM0LWI2YTYtODNkMDk4YTUzNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPuBe3jX9UAsE5IHOxqvKyv3pCFkmsr5vjQk Ebug5zjn3h1og9mhWncEtguaOnM/NhKb0ufKA7s69DNc7PpOZM+aXnKXuTqPsLNB NPH6zHYXYtNdpQ1gu6QTK37wHZMfhTh+eLlKlJMOIP0CBQfMRCqefoLhTQl0c2sX z3kEkCpbqYAK5+HMl2ldZAstzmyRhlTuniFLpBP4i9D4tVwn97/cvsJmuLsZy/4z B2WMaTeUfr6xaDCrWR0W9nzn9hA2BTMHl0CvLLHnQMRK+MvcTxUl0hMpg2tt+dFE a+ePn/biXPU+Ds4VZKAMExeQOuGBM2fWbn5AfAbR4MfnvNqUUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOftROvNIPWXjEfBQcRBCnQzZhM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI5OWI0ZjItY2M1Yi0z NmU0LWFhYTItYjdmMzZmNDZmMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/WAO9a8GuxhNQHDqofGA2eZpBCDhnaaMmoDyFig/p0gsEToqILxW62 spFQ1UeyBP/wBvsvjZRdGzuOHqQ2O3iniyrnYArdYfpVEf/6l6J1wG/jv/EwIaog M6JmiQsIArm6iuO1tyHDVtRfC8EE28NUWVhKIfgrCXOdiQjz+kf8GMm3tQJRUqIj 2gt1JMhK1mdJhJVwrf4ALB1/123vdna+aKLNv/oxKDuPrMt4V8CR4Ahsot5vt8En gQct+E6ydsazQxsa77u/VNe9+Y89ByUu+5NIrOVZd8izWS2412hEB0JoziKzoOKU QkV9F36ddat4MDp0xjBwceUPVnqDRgE= -----END CERTIFICATE-----Generated at Sun Apr 27 06:24:48 2025 by rpki-client