$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed773950-9457-3598-b56f-dcbaf96e3721.roa File: ed773950-9457-3598-b56f-dcbaf96e3721.roa (raw, json) Hash identifier: 4CV0MTJ6ziUoZh3kjhav2wxiTXNGBVTBsboAvR3veo8= Subject key identifier: AF:42:D8:32:32:82:0F:7B:41:A1:E9:FE:51:A9:C8:B7:FC:3E:31:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B0E494509C2CB7ED2D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed773950-9457-3598-b56f-dcbaf96e3721.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.196.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b0:e4:94:50:9c:2c:b7:ed:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=07588046-564d-4093-975f-749257ea2844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:d2:f7:74:a9:4b:02:07:50:48:d0:3e:c1: 04:7c:2d:aa:67:ea:ee:4e:33:6f:52:3f:84:69:0d: 96:66:7b:f2:be:28:a7:a9:59:22:1c:8f:f7:f9:04: 37:f6:c9:22:af:3a:52:79:09:56:c5:95:0c:4d:58: 4a:0c:fe:dc:95:a3:32:a5:83:0f:c4:60:84:c5:d8: 9f:63:65:1a:fc:bf:2d:70:0f:38:c6:e4:9d:1d:0b: 86:31:2c:6c:83:d7:51:ac:66:3b:ad:d7:0d:0a:f1: 44:2b:15:64:76:fc:e6:3b:2e:08:c2:b4:c1:ee:06: 35:fe:b5:96:cd:f8:c0:fe:7c:f8:45:35:38:14:88: 82:12:c2:ab:f6:77:f6:8a:80:2c:bc:9b:1d:73:bb: c3:da:ff:e9:42:f6:10:f5:0b:2f:90:99:5c:64:56: 81:c9:0f:63:c8:59:c0:32:25:6b:69:cc:21:3c:33: 78:1f:7a:e6:57:c5:44:ac:03:51:10:c1:dc:df:2f: bb:52:91:70:46:af:b3:cf:d0:36:0a:97:0c:77:c1: 66:8b:08:b4:6a:e3:6f:3d:81:fb:d6:58:ae:d1:5a: 88:6a:57:e5:41:9c:66:ef:f1:4f:95:b2:1f:b4:fc: 09:1f:5e:d4:09:91:10:0b:83:9a:d3:63:aa:d9:0a: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:D8:32:32:82:0F:7B:41:A1:E9:FE:51:A9:C8:B7:FC:3E:31:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ed773950-9457-3598-b56f-dcbaf96e3721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2f:39:7d:17:ee:c6:05:77:98:a4:b4:7d:e2:e0:41:bd:c8: d0:d6:c4:54:ca:7b:a2:0f:1a:87:ab:05:16:08:b8:9f:7f:91: 8c:2f:85:9e:b9:01:48:af:de:ce:86:00:3c:4b:99:5a:ff:8d: cc:a4:af:d4:cf:b8:90:2e:2f:c2:80:06:c0:0b:63:57:35:b1: 3f:f6:3d:a4:c7:d8:52:0b:5b:78:6f:15:84:d9:28:02:f5:a1: 5c:27:93:9a:2d:b4:1d:11:3d:26:ef:8e:a0:19:e4:6d:44:70: 98:d6:79:ea:07:0b:91:4b:ba:46:46:94:b0:69:29:94:b4:97: 20:7d:56:45:2d:ca:c5:aa:12:24:8b:1a:fe:c8:ec:ea:cb:60: e4:47:39:72:88:fb:ea:56:c4:b4:db:b0:7c:86:d2:5b:ce:7b: 7f:e4:d5:34:58:81:34:9c:ce:d2:dd:b7:55:07:55:03:a6:f4: 58:c7:10:d3:bb:a5:d6:01:c7:82:18:8e:32:d1:de:ca:ed:4d: 71:42:a9:e1:ae:94:65:04:21:9b:c5:85:8f:18:09:d5:d3:05: 0d:88:42:ca:b3:69:9e:f1:2b:97:fe:76:4e:96:b0:b7:40:d4: 3a:db:9e:e4:c0:f7:fd:52:70:2d:cb:79:cf:0b:15:77:4f:b1: 37:fc:b3:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLDklFCcLLftLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MDc1ODgwNDYtNTY0ZC00MDkzLTk3NWYtNzQ5MjU3ZWEyODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmvS93SpSwIHUEjQPsEEfC2qZ+ruTjNvUj+E aQ2WZnvyviinqVkiHI/3+QQ39skirzpSeQlWxZUMTVhKDP7claMypYMPxGCExdif Y2Ua/L8tcA84xuSdHQuGMSxsg9dRrGY7rdcNCvFEKxVkdvzmOy4IwrTB7gY1/rWW zfjA/nz4RTU4FIiCEsKr9nf2ioAsvJsdc7vD2v/pQvYQ9QsvkJlcZFaByQ9jyFnA MiVracwhPDN4H3rmV8VErANREMHc3y+7UpFwRq+zz9A2CpcMd8Fmiwi0auNvPYH7 1liu0VqIalflQZxm7/FPlbIftPwJH17UCZEQC4Oa02Oq2QqpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9C2DIygg97QaHp/lGpyLf8PjGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWQ3NzM5NTAtOTQ1Ny0z NTk4LWI1NmYtZGNiYWY5NmUzNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIvOX0X7sYFd5iktH3i4EG9yNDWxFTKe6IPGoerBRYIuJ9/kYwvhZ65 AUiv3s6GADxLmVr/jcykr9TPuJAuL8KABsALY1c1sT/2PaTH2FILW3hvFYTZKAL1 oVwnk5ottB0RPSbvjqAZ5G1EcJjWeeoHC5FLukZGlLBpKZS0lyB9VkUtysWqEiSL Gv7I7OrLYORHOXKI++pWxLTbsHyG0lvOe3/k1TRYgTScztLdt1UHVQOm9FjHENO7 pdYBx4IYjjLR3srtTXFCqeGulGUEIZvFhY8YCdXTBQ2IQsqzaZ7xK5f+dk6WsLdA 1DrbnuTA9/1ScC3Lec8LFXdPsTf8sw8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:39 2025 by rpki-client