$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa File: 142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa (raw, json) Hash identifier: gABcrRDONXAe0bgt0smvZbp2rH2zcfAv+FiYxn7GZKI= Subject key identifier: B5:20:0A:36:AC:E4:E1:F1:3D:65:7B:FE:82:20:6F:E8:BA:6D:3B:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD369FDFAFAE6FFA01800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.198.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d3:69:fd:fa:fa:e6:ff:a0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=f757a76e-2b3d-4111-8d03-a8737ce7a962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:69:00:28:c3:24:39:92:30:d8:d6:d3:4d: d3:49:7a:5a:7e:6b:70:c6:85:c2:af:78:76:6a:a7: c6:b1:70:90:89:31:81:f6:d0:a1:da:e9:f8:1c:81: 54:d1:34:2b:0f:4a:42:b9:9c:7f:ba:c1:84:df:1f: 77:b1:c0:33:78:40:09:98:5d:c6:60:51:36:31:cc: 9d:bf:04:eb:6e:52:48:1d:16:68:26:cd:a8:b0:ca: 53:f9:c7:f8:ef:4a:03:26:4c:d5:4a:1b:a4:a3:1c: d0:7d:49:7e:04:ec:07:bf:92:1d:ae:4a:9a:02:f5: 82:b3:dc:1e:a9:18:73:0d:06:8b:cc:e7:f4:f3:3e: 13:b0:b6:db:dc:97:87:4e:83:be:81:4d:72:17:72: fe:ff:88:40:9c:7c:aa:ca:a6:a4:eb:d1:60:4e:0c: 26:cd:f2:41:1f:49:84:3d:b6:dd:ed:8d:e6:11:8d: e1:42:43:72:e9:c8:d7:47:cf:a1:42:54:75:11:92: 8c:82:13:bb:eb:32:5c:f4:c6:42:a3:ad:02:0c:70: fb:e3:7c:1b:98:9b:1c:f9:d0:e9:97:0b:c1:ad:84: 6b:47:8c:06:8e:09:e2:63:62:1f:4e:39:3e:e4:30: 3d:02:41:b7:2d:0f:40:18:98:11:f5:7c:fd:f3:b9: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:0A:36:AC:E4:E1:F1:3D:65:7B:FE:82:20:6F:E8:BA:6D:3B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/142aa89b-12c7-3797-8ae4-c5cb7ec3ab3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0f:80:51:67:ba:21:ee:78:27:c4:6d:49:9a:a6:2d:f1:7e: c7:97:30:f7:3a:30:36:81:62:31:7e:34:d5:94:1c:d9:3c:11: 9f:66:a0:02:c4:4a:b6:3f:61:c5:b9:1a:7a:10:73:d6:46:eb: 1f:b0:a3:4a:f1:81:15:74:0c:91:22:c1:6a:80:a8:4b:8c:78: cc:2d:27:84:7f:68:f9:e7:8a:61:cb:68:f2:59:a7:6f:83:e6: 31:22:d7:b3:f0:70:d1:5b:dd:ce:b8:fb:e8:b3:7b:a0:da:9c: bb:77:20:d0:bc:96:30:aa:46:7c:68:6f:db:f7:75:e2:ca:0b: 67:e9:1a:5b:33:e1:05:2e:59:90:db:47:9c:30:ad:10:ad:9d: 95:e4:5c:26:62:79:6b:bf:bc:12:f3:e1:1e:3e:2c:75:41:0c: f2:e9:9a:df:16:90:c5:18:09:1b:25:9d:01:87:a6:17:de:f3: d6:26:d0:9b:80:c8:86:f7:5e:ad:c9:9b:2d:53:c1:07:b9:8f: e4:63:c5:df:a8:61:9a:24:57:a6:f9:52:d0:2c:51:64:16:1e: 54:af:cd:04:49:7a:c3:5f:42:9c:90:18:ce:75:75:85:d9:27: d2:60:79:e5:20:17:7b:23:b3:b6:8c:6c:58:b7:1c:6d:a8:50: ae:e8:18:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69Np/fr65v+gGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Zjc1N2E3NmUtMmIzZC00MTExLThkMDMtYTg3MzdjZTdhOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm39pACjDJDmSMNjW003TSXpafmtwxoXCr3h2 aqfGsXCQiTGB9tCh2un4HIFU0TQrD0pCuZx/usGE3x93scAzeEAJmF3GYFE2Mcyd vwTrblJIHRZoJs2osMpT+cf470oDJkzVShukoxzQfUl+BOwHv5IdrkqaAvWCs9we qRhzDQaLzOf08z4TsLbb3JeHToO+gU1yF3L+/4hAnHyqyqak69FgTgwmzfJBH0mE Pbbd7Y3mEY3hQkNy6cjXR8+hQlR1EZKMghO76zJc9MZCo60CDHD743wbmJsc+dDp lwvBrYRrR4wGjgniY2IfTjk+5DA9AkG3LQ9AGJgR9Xz987mqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUgCjas5OHxPWV7/oIgb+i6bTtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTQyYWE4OWItMTJjNy0z Nzk3LThhZTQtYzVjYjdlYzNhYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwPgFFnuiHueCfEbUmapi3xfseXMPc6MDaBYjF+NNWUHNk8EZ9moALE SrY/YcW5GnoQc9ZG6x+wo0rxgRV0DJEiwWqAqEuMeMwtJ4R/aPnnimHLaPJZp2+D 5jEi17PwcNFb3c64++ize6DanLt3INC8ljCqRnxob9v3deLKC2fpGlsz4QUuWZDb R5wwrRCtnZXkXCZieWu/vBLz4R4+LHVBDPLpmt8WkMUYCRslnQGHphfe89Ym0JuA yIb3Xq3Jmy1TwQe5j+Rjxd+oYZokV6b5UtAsUWQWHlSvzQRJesNfQpyQGM51dYXZ J9JgeeUgF3sjs7aMbFi3HG2oUK7oGNg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:58 2025 by rpki-client