$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9fb8f8d-efb9-394d-a803-838366b277e1.roa File: f9fb8f8d-efb9-394d-a803-838366b277e1.roa (raw, json) Hash identifier: Df4oiseOd6KGyn1t46PQPX6AN1Imfvao/FyTN6dL2nY= Subject key identifier: F6:9C:5C:0D:52:E1:7F:E2:84:80:D3:9C:6F:A3:2E:91:C3:AF:BF:85 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24C98423570FACAD94D880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9fb8f8d-efb9-394d-a803-838366b277e1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.196.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c9:84:23:57:0f:ac:ad:94:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e7746261-a5a5-47a7-b003-bdd8993111b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:d2:65:75:53:58:be:01:86:03:a7:5e:ea: c3:93:37:fb:5a:de:66:30:f8:39:c2:65:dc:2c:58: 60:2d:5a:1c:4a:f3:89:a3:18:3d:9f:5b:20:58:9b: f2:cf:25:4e:48:c1:cf:82:47:69:f0:16:a6:2b:d9: 72:08:ea:65:8d:4d:6a:b3:d2:b8:c5:a8:b5:77:54: 4e:f5:c8:83:f1:2f:4d:0e:5b:8e:6e:b9:00:fe:e5: a5:22:14:28:07:f3:5c:b1:7e:ba:a7:69:09:bc:15: ef:0b:ee:01:3b:8a:38:e0:10:29:db:3c:83:92:c4: b8:c2:38:e3:e6:f5:b9:2b:86:93:b0:56:63:1c:ce: a9:4b:2e:6c:74:1a:2b:cb:7b:13:75:24:67:ed:24: 6c:22:42:5c:0e:18:32:c8:c7:f3:e8:35:d8:78:56: 2c:2e:25:a5:22:ab:05:73:75:96:6c:c1:5b:1c:a9: 6a:1e:0c:ed:72:b3:e5:50:0b:ff:a3:76:dd:2c:3c: 35:64:21:66:59:57:0a:5a:60:65:dc:f1:07:68:c9: be:47:94:d4:29:fc:9d:1f:7c:4c:ba:f8:43:a9:21: 24:10:57:0c:f6:65:c3:af:3c:8f:66:60:41:aa:a6: 9f:c0:10:e2:ff:da:77:b3:64:d5:a3:c1:db:58:bc: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:5C:0D:52:E1:7F:E2:84:80:D3:9C:6F:A3:2E:91:C3:AF:BF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9fb8f8d-efb9-394d-a803-838366b277e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:73:9e:15:cd:09:0c:f8:4a:3d:88:e2:3e:05:fb:54:a0:aa: 20:8a:84:7c:04:a6:f9:f5:d2:1f:59:1f:c8:6c:b9:53:af:5e: 14:6f:82:2b:3b:31:f5:5d:96:30:c4:ca:e6:ec:87:28:77:7d: 1f:99:dc:b3:a5:21:e6:65:0c:65:8e:dd:c1:b6:b1:6b:b4:03: 4e:55:57:19:45:a5:4b:4f:46:01:cf:8f:64:3a:b2:a4:7e:08: 24:5c:18:92:33:3e:6d:64:e7:59:d7:22:c7:44:d7:35:c3:b2: 5b:09:c0:0b:4a:26:17:a0:73:78:79:f1:b9:b4:a5:96:71:a9: e8:fd:ff:16:7d:2e:fb:d5:65:a9:94:20:f1:60:2d:52:b1:25: 8d:dc:b4:36:5e:d0:02:a6:4c:cd:1f:ea:26:c3:a5:9b:c5:1b: c3:da:d0:24:d6:de:dd:85:cf:be:82:f3:71:74:9d:c3:f2:64: 0d:38:fd:a2:72:b1:5e:09:01:fe:5d:c0:d6:75:b1:e1:67:a4: 6c:7d:5f:53:9f:49:3e:f2:fa:38:5c:76:ae:80:e0:a1:49:e4: 77:81:0a:1c:a9:37:0b:d5:ea:75:e1:f9:97:60:ac:0b:1e:03: ea:29:5e:32:b4:7f:f9:c5:4b:d3:7a:d4:3c:da:f1:9a:f4:d3: da:9e:b0:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMmEI1cPrK2U2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTc3NDYyNjEtYTVhNS00N2E3LWIwMDMtYmRkODk5MzExMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGTSZXVTWL4BhgOnXurDkzf7Wt5mMPg5wmXc LFhgLVocSvOJoxg9n1sgWJvyzyVOSMHPgkdp8BamK9lyCOpljU1qs9K4xai1d1RO 9ciD8S9NDluObrkA/uWlIhQoB/NcsX66p2kJvBXvC+4BO4o44BAp2zyDksS4wjjj 5vW5K4aTsFZjHM6pSy5sdBory3sTdSRn7SRsIkJcDhgyyMfz6DXYeFYsLiWlIqsF c3WWbMFbHKlqHgztcrPlUAv/o3bdLDw1ZCFmWVcKWmBl3PEHaMm+R5TUKfydH3xM uvhDqSEkEFcM9mXDrzyPZmBBqqafwBDi/9p3s2TVo8HbWLzGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPacXA1S4X/ihIDTnG+jLpHDr7+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjlmYjhmOGQtZWZiOS0z OTRkLWE4MDMtODM4MzY2YjI3N2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpznhXNCQz4Sj2I4j4F+1SgqiCKhHwEpvn10h9ZH8hsuVOvXhRvgis7 MfVdljDEyubshyh3fR+Z3LOlIeZlDGWO3cG2sWu0A05VVxlFpUtPRgHPj2Q6sqR+ CCRcGJIzPm1k51nXIsdE1zXDslsJwAtKJhegc3h58bm0pZZxqej9/xZ9LvvVZamU IPFgLVKxJY3ctDZe0AKmTM0f6ibDpZvFG8Pa0CTW3t2Fz76C83F0ncPyZA04/aJy sV4JAf5dwNZ1seFnpGx9X1OfST7y+jhcdq6A4KFJ5HeBChypNwvV6nXh+ZdgrAse A+opXjK0f/nFS9N61Dza8Zr009qesPw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:24 2025 by rpki-client