$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e210af77-315d-3701-91d5-11da8856a87b.roa File: e210af77-315d-3701-91d5-11da8856a87b.roa (raw, json) Hash identifier: 2jrXF3MMA1QUVN1bDiTAI1+ZIy8JQqBhAT91IVIm7JU= Subject key identifier: 5B:80:8F:0E:0D:C9:91:99:2D:5D:7C:A4:CD:4A:95:C0:B9:83:78:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24D564BB359D8F23886338 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e210af77-315d-3701-91d5-11da8856a87b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.154.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d5:64:bb:35:9d:8f:23:88:63:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=931ead84-aff3-46c5-830f-4dec61744f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:da:ed:6e:b9:7a:a6:23:81:13:c9:24:ee: 1c:d3:b3:d7:d5:a0:c3:ef:f1:b1:5a:18:00:09:cc: 57:b1:fb:d4:2e:19:f9:51:5f:0a:71:80:bd:4f:a7: 96:62:98:2d:94:95:6f:61:89:81:c7:38:2f:fc:61: 2f:50:ed:16:96:08:7e:7d:03:7e:8a:ad:b3:2b:06: 6b:db:c0:53:09:0c:1e:70:6a:26:1d:f2:7d:ee:7d: 4c:c1:f4:6a:75:fb:d5:c8:86:9c:d7:c5:38:dc:3b: a6:cc:76:7f:f6:24:77:77:1d:ff:79:66:fc:e2:17: ec:c1:f4:44:3a:58:1e:51:39:7e:6f:f0:0e:2d:3e: 29:3a:fe:32:b6:44:e2:3c:fb:9d:62:65:a7:e4:67: 72:dd:43:e3:0a:ee:b2:ce:e4:ac:92:81:5b:65:71: cd:a7:55:b2:71:2c:4d:94:80:93:ee:04:59:7a:54: cc:44:c7:e3:51:7f:7b:ea:da:c1:52:b0:1e:3e:10: 0f:4e:19:51:ec:3b:91:98:ec:c1:73:d1:0a:79:f8: cf:73:9b:5a:b9:7e:ee:07:db:b8:8b:5a:c6:e0:e3: 8d:af:9e:e1:a2:18:5f:d4:e4:ed:37:3e:d9:3b:65: 59:51:c9:02:df:07:0a:59:66:b2:04:6d:b9:82:a5: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:8F:0E:0D:C9:91:99:2D:5D:7C:A4:CD:4A:95:C0:B9:83:78:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e210af77-315d-3701-91d5-11da8856a87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:49:87:e4:32:d9:8e:42:84:0f:65:05:22:b0:96:2c:9d:0c: fa:f9:2d:4a:11:3d:bd:51:8a:1b:16:65:07:76:43:95:0f:8b: 44:f5:2b:22:0c:c5:ef:3a:ec:4a:b4:91:09:2c:ea:35:8b:ec: 54:c4:8f:52:ba:2c:19:a8:e0:87:38:f0:27:ee:ac:24:69:6e: ed:9a:7b:9e:9a:1b:f6:c6:8b:76:32:45:00:28:79:3e:28:f5: 24:e1:59:bf:31:cd:7e:1a:08:71:be:8b:46:03:57:01:88:49: d0:c6:1d:a5:ae:d4:3c:c1:32:e4:49:13:7e:c6:df:f8:88:1b: 46:6f:83:c0:20:33:ea:fb:05:26:71:36:13:fa:66:d6:87:a6: d1:db:ee:83:31:94:30:9f:ff:d1:37:e6:84:8d:69:f6:4b:29: 89:c2:9d:e9:b9:1c:a5:98:1d:99:83:b4:2e:09:ea:9d:36:25: 48:f2:ce:53:ee:ec:27:00:54:c1:f9:25:72:2d:14:7a:a3:fe: fe:94:29:4c:62:c5:ed:05:6f:d4:ab:7a:3e:a0:99:48:07:16: c9:6c:23:78:fa:e1:57:b6:a6:b1:0c:b7:92:fd:d2:5f:a5:2b: 36:40:fa:60:5c:61:e0:20:64:69:ea:cc:5a:65:94:65:da:3e: 7d:9d:10:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNVkuzWdjyOIYzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTMxZWFkODQtYWZmMy00NmM1LTgzMGYtNGRlYzYxNzQ0ZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uja7W65eqYjgRPJJO4c07PX1aDD7/GxWhgA CcxXsfvULhn5UV8KcYC9T6eWYpgtlJVvYYmBxzgv/GEvUO0Wlgh+fQN+iq2zKwZr 28BTCQwecGomHfJ97n1MwfRqdfvVyIac18U43DumzHZ/9iR3dx3/eWb84hfswfRE OlgeUTl+b/AOLT4pOv4ytkTiPPudYmWn5Gdy3UPjCu6yzuSskoFbZXHNp1WycSxN lICT7gRZelTMRMfjUX976trBUrAePhAPThlR7DuRmOzBc9EKefjPc5tauX7uB9u4 i1rG4OONr57hohhf1OTtNz7ZO2VZUckC3wcKWWayBG25gqX/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuAjw4NyZGZLV18pM1KlcC5g3ipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTIxMGFmNzctMzE1ZC0z NzAxLTkxZDUtMTFkYTg4NTZhODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJp3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJJh+Qy2Y5ChA9lBSKwliydDPr5LUoRPb1RihsWZQd2Q5UPi0T1KyIM xe867Eq0kQks6jWL7FTEj1K6LBmo4Ic48CfurCRpbu2ae56aG/bGi3YyRQAoeT4o 9SThWb8xzX4aCHG+i0YDVwGISdDGHaWu1DzBMuRJE37G3/iIG0Zvg8AgM+r7BSZx NhP6ZtaHptHb7oMxlDCf/9E35oSNafZLKYnCnem5HKWYHZmDtC4J6p02JUjyzlPu 7CcAVMH5JXItFHqj/v6UKUxixe0Fb9Srej6gmUgHFslsI3j64Ve2prEMt5L90l+l KzZA+mBcYeAgZGnqzFpllGXaPn2dEK0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:31 2025 by rpki-client