$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5e74810-3768-3fa8-b0e0-c582683d152f.roa File: e5e74810-3768-3fa8-b0e0-c582683d152f.roa (raw, json) Hash identifier: zfj/+/Vg2puvRyMMz6fe4Is85U0IdgyzPO3ZUAQfiX4= Subject key identifier: D5:72:26:2B:9B:C3:4E:A2:AF:11:EC:B2:5A:E4:60:6A:0B:3D:DC:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B76ACBA5AB0D51398D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5e74810-3768-3fa8-b0e0-c582683d152f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.199.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b7:6a:cb:a5:ab:0d:51:39:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=75bbcf05-cc36-49a2-8860-6920d88cf02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:8a:13:fc:04:56:dd:75:31:8c:81:0c:3a: 60:87:86:df:bb:41:45:d1:9e:cd:dd:8e:e0:21:34: a8:16:b7:a2:5a:61:45:67:b9:7a:a6:03:85:b5:90: cf:64:04:48:2e:3f:19:5a:8a:fb:d2:4c:41:bf:f5: 6c:10:bf:8f:b2:58:d3:c6:f6:cf:57:0e:b2:9a:16: 79:dd:41:2f:97:fa:82:f9:48:81:7f:6a:d8:81:59: cb:79:57:75:ad:d9:c0:bd:f0:25:51:a6:c2:08:33: 5f:9c:fd:e7:a0:f9:1c:ca:70:1c:8f:a7:40:2d:ca: 26:b5:47:0b:10:cd:d4:ba:68:c4:f5:0d:77:fe:f2: 34:46:e7:57:91:71:91:19:fd:2d:e0:fd:fb:8f:98: 8b:0d:5c:c3:e7:fd:83:04:5a:5e:b0:fb:7a:15:c4: d4:28:06:d2:c5:b1:be:cc:4a:e5:de:f6:ba:7e:4b: b2:49:57:a1:38:1b:52:6d:3d:66:20:25:61:aa:70: 4b:83:56:eb:08:5a:10:27:b2:16:92:2a:61:a3:46: 7a:3a:6b:09:71:87:7f:50:e2:8b:49:df:1c:d7:6d: fb:5c:4c:cd:39:40:6f:c0:53:29:35:20:2e:88:7b: ef:e9:30:29:ba:ab:95:49:5c:a0:5e:0c:77:02:3f: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:72:26:2B:9B:C3:4E:A2:AF:11:EC:B2:5A:E4:60:6A:0B:3D:DC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5e74810-3768-3fa8-b0e0-c582683d152f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ad:5c:a6:0c:7d:a6:90:c0:b7:97:e0:5e:16:9b:a1:25:2f: 16:7e:a7:a8:06:b0:7c:2d:7b:cd:a4:7c:f1:65:1f:35:2a:a1: 18:b7:d7:72:9a:e9:81:c0:71:b8:48:58:c4:3b:c6:79:b2:74: 05:24:73:aa:a9:f9:44:e5:c7:fa:42:d5:71:31:c7:45:fe:6f: 0f:ba:53:3f:5f:ee:2a:4c:f2:42:d6:35:c8:c8:9c:6b:cd:de: c3:79:ce:89:73:78:7f:4e:61:92:e9:a1:92:30:ae:bc:d3:ee: 6e:4a:f4:9b:80:fc:56:85:2e:da:12:0f:d5:1a:47:3c:aa:4f: e7:d4:27:f4:33:66:76:4b:8f:eb:b6:80:2d:06:77:0f:a6:a3: 18:25:40:15:ed:c2:d5:f3:bd:27:6d:5a:db:c8:bb:8f:2b:38: d6:bd:a3:48:49:92:4e:1f:a2:76:a8:2e:1a:39:f5:aa:3f:b3: 68:41:eb:26:1b:0a:51:a2:d7:45:08:da:14:c5:75:17:18:63: b4:42:58:57:eb:7e:b1:b9:38:7d:74:a7:5e:b5:d4:63:0a:81: 51:b6:8e:e8:b3:a1:8d:f6:2c:c3:89:96:2f:0f:57:3a:67:33: 2c:f5:38:84:68:7b:e1:51:8d:a9:55:40:18:d9:fd:31:0b:03: ed:b9:d6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLdqy6WrDVE5jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzViYmNmMDUtY2MzNi00OWEyLTg4NjAtNjkyMGQ4OGNmMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqqKE/wEVt11MYyBDDpgh4bfu0FF0Z7N3Y7g ITSoFreiWmFFZ7l6pgOFtZDPZARILj8ZWor70kxBv/VsEL+PsljTxvbPVw6ymhZ5 3UEvl/qC+UiBf2rYgVnLeVd1rdnAvfAlUabCCDNfnP3noPkcynAcj6dALcomtUcL EM3UumjE9Q13/vI0RudXkXGRGf0t4P37j5iLDVzD5/2DBFpesPt6FcTUKAbSxbG+ zErl3va6fkuySVehOBtSbT1mICVhqnBLg1brCFoQJ7IWkipho0Z6OmsJcYd/UOKL Sd8c1237XEzNOUBvwFMpNSAuiHvv6TApuquVSVygXgx3Aj95bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVyJiubw06irxHsslrkYGoLPdyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVlNzQ4MTAtMzc2OC0z ZmE4LWIwZTAtYzU4MjY4M2QxNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABetXKYMfaaQwLeX4F4Wm6ElLxZ+p6gGsHwte82kfPFlHzUqoRi313Ka 6YHAcbhIWMQ7xnmydAUkc6qp+UTlx/pC1XExx0X+bw+6Uz9f7ipM8kLWNcjInGvN 3sN5zolzeH9OYZLpoZIwrrzT7m5K9JuA/FaFLtoSD9UaRzyqT+fUJ/QzZnZLj+u2 gC0Gdw+moxglQBXtwtXzvSdtWtvIu48rONa9o0hJkk4fonaoLho59ao/s2hB6yYb ClGi10UI2hTFdRcYY7RCWFfrfrG5OH10p1611GMKgVG2juizoY32LMOJli8PVzpn Myz1OIRoe+FRjalVQBjZ/TELA+251kE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:42 2025 by rpki-client