$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faedf950-c66c-3b14-ac74-e50d1d659e18.roa File: faedf950-c66c-3b14-ac74-e50d1d659e18.roa (raw, json) Hash identifier: 4rW9Bj4bF1NFFqZCLI4Dfqtik3WX5VdkRzWDXTrNQp0= Subject key identifier: FF:88:21:C6:21:FC:84:96:74:5C:59:12:E7:C9:AA:35:69:B2:EF:6C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24CDCD5160EF0D4779E680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faedf950-c66c-3b14-ac74-e50d1d659e18.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 104.154.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cd:cd:51:60:ef:0d:47:79:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8b6d16fe-6377-47b4-b92a-88ba343baf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ca:5d:95:61:dc:d7:d5:b5:07:b3:36:51:2e: a8:a6:13:e1:f2:a7:d2:a4:cc:05:22:d0:b6:19:5a: 6b:ec:6b:63:ad:ed:ec:c6:36:f5:70:ac:66:b0:88: 3e:2a:c0:00:e2:b3:61:da:96:4f:25:f0:ae:51:20: 5a:24:e6:eb:6d:ed:ff:92:43:b4:5d:12:1f:8c:05: 1e:a6:e2:3b:f4:ee:f6:29:39:c6:51:3d:a2:7f:d7: fe:17:fe:b9:74:c5:d0:b7:a2:1c:35:e9:c8:bc:a9: 19:cd:e3:a3:52:97:86:e0:0e:62:52:ee:40:f5:b6: 19:e2:ca:18:68:76:cc:f4:de:8f:cf:7c:e4:68:12: 5f:a5:a3:04:53:14:19:e5:5f:23:7d:fa:40:a7:7d: e0:ed:3b:e3:07:9c:4a:74:4a:d8:45:c1:f4:0f:f9: bd:38:53:02:06:9f:cd:ec:7f:e3:43:2d:dd:34:bc: ae:05:83:70:37:36:32:14:3c:e0:8c:fa:3b:e8:e5: ca:d5:28:55:02:f7:cc:61:fd:aa:f0:66:94:09:42: b4:8e:ba:cc:36:82:11:8d:fe:c8:16:d9:50:ca:8e: 64:bd:f6:d2:4c:d6:21:63:5a:53:2f:a7:cd:cb:a6: 5b:bf:53:3d:4d:a4:62:62:62:63:a3:dc:e6:80:64: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:21:C6:21:FC:84:96:74:5C:59:12:E7:C9:AA:35:69:B2:EF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/faedf950-c66c-3b14-ac74-e50d1d659e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b9:07:cb:7f:2e:59:02:95:74:2f:45:c2:0c:41:2d:71:00: 1f:0f:4c:ec:b3:56:13:44:73:85:58:09:9d:62:5c:6a:60:2c: 5a:02:33:fa:e7:d5:82:79:94:72:8e:e5:ef:47:06:d4:5d:78: e9:3d:65:df:ce:cb:34:12:42:cd:0c:e1:0f:77:8a:27:e9:e6: 50:e5:49:61:82:ff:cd:f8:eb:ed:0a:85:27:fe:e8:59:63:ba: 62:59:fe:a7:49:0f:cc:ed:9d:26:31:fc:b5:39:a7:45:b5:cc: f7:d1:b2:81:09:3d:66:50:b5:d4:c4:8a:7c:0d:68:a7:3e:c1: 24:24:30:49:0d:d5:fe:a9:ab:e5:b4:c3:57:f5:a5:e7:d0:50: ae:3e:2e:5f:08:26:d8:72:7b:12:af:9c:15:99:a4:16:d6:f8: 3e:1d:8a:e7:a5:84:ab:ec:40:38:6d:5e:b1:e0:d0:44:fd:87: 5e:4d:02:3a:55:0b:48:91:5c:ea:9b:5c:56:98:51:82:ea:67: 1f:68:6e:72:d9:e7:6f:00:17:fd:60:85:2e:a7:41:08:a2:02: e3:4a:14:40:a9:eb:f8:f1:85:41:33:be:f8:7c:7f:b2:68:dc: 04:39:a8:07:26:80:91:2d:50:8b:2a:75:79:8f:e2:be:e4:2b: c1:d7:31:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJM3NUWDvDUd55oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGI2ZDE2ZmUtNjM3Ny00N2I0LWI5MmEtODhiYTM0M2JhZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMpdlWHc19W1B7M2US6ophPh8qfSpMwFItC2 GVpr7Gtjre3sxjb1cKxmsIg+KsAA4rNh2pZPJfCuUSBaJObrbe3/kkO0XRIfjAUe puI79O72KTnGUT2if9f+F/65dMXQt6IcNenIvKkZzeOjUpeG4A5iUu5A9bYZ4soY aHbM9N6Pz3zkaBJfpaMEUxQZ5V8jffpAp33g7TvjB5xKdErYRcH0D/m9OFMCBp/N 7H/jQy3dNLyuBYNwNzYyFDzgjPo76OXK1ShVAvfMYf2q8GaUCUK0jrrMNoIRjf7I FtlQyo5kvfbSTNYhY1pTL6fNy6Zbv1M9TaRiYmJjo9zmgGQM9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+IIcYh/ISWdFxZEufJqjVpsu9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmFlZGY5NTAtYzY2Yy0z YjE0LWFjNzQtZTUwZDFkNjU5ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe5B8t/LlkClXQvRcIMQS1xAB8PTOyzVhNEc4VYCZ1iXGpgLFoCM/rn 1YJ5lHKO5e9HBtRdeOk9Zd/OyzQSQs0M4Q93iifp5lDlSWGC/8346+0KhSf+6Flj umJZ/qdJD8ztnSYx/LU5p0W1zPfRsoEJPWZQtdTEinwNaKc+wSQkMEkN1f6pq+W0 w1f1pefQUK4+Ll8IJthyexKvnBWZpBbW+D4diuelhKvsQDhtXrHg0ET9h15NAjpV C0iRXOqbXFaYUYLqZx9obnLZ528AF/1ghS6nQQiiAuNKFECp6/jxhUEzvvh8f7Jo 3AQ5qAcmgJEtUIsqdXmP4r7kK8HXMbo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:53 2025 by rpki-client