$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa File: 1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa (raw, json) Hash identifier: 0Y9Mqo8sN5DLh9x8t5LGB5pFr3IluUR7OR/NWiKkC+E= Subject key identifier: 94:FB:EE:CA:BB:B5:1C:95:C2:E2:B0:10:2A:6D:60:9A:80:55:F9:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBBB1E7E03B2757F9BB980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.198.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bb:1e:7e:03:b2:75:7f:9b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=1b46535c-4877-4a09-b2b5-02d0dfaadbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4f:eb:9c:b1:e9:99:6c:6c:88:12:ad:ef:60: 7d:d3:0f:1e:44:6e:0c:6f:8a:9d:9b:be:e4:c4:85: ab:90:9f:3e:08:08:14:7c:ce:1f:0c:07:1b:60:62: 41:4b:1b:c8:00:08:5f:e2:19:98:f8:73:0e:5e:99: 70:7b:0e:1f:85:9f:da:69:f7:a1:97:4a:09:bb:6b: f9:63:ba:f1:bd:d3:08:25:f0:1e:90:93:85:e9:16: d5:c8:1b:5c:c4:44:af:4f:78:ef:1e:e6:bd:5e:c0: 7c:01:b6:85:82:22:70:87:56:00:16:7b:ed:50:f9: 7f:98:e5:88:e2:c9:b5:e3:54:03:aa:00:cc:cb:0f: d1:5f:e2:24:13:f7:a7:bd:5a:cc:85:26:00:d3:f3: 9b:1a:94:75:25:f3:eb:3e:a4:0f:88:23:34:8a:ff: e8:af:b4:0e:64:5c:25:85:82:4f:01:78:72:0e:92: 52:b5:ff:b2:44:b8:e9:95:0d:b5:33:d5:4d:8d:f2: 52:84:01:f4:90:30:56:31:d6:61:4b:14:e6:16:97: f4:c1:3f:e2:a5:4a:8b:9d:79:e8:a9:ed:70:f3:60: 37:75:2e:e8:bd:a2:14:ff:41:78:d1:c5:af:82:8b: ef:96:47:49:48:9a:8c:10:56:aa:9e:b9:79:6d:80: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FB:EE:CA:BB:B5:1C:95:C2:E2:B0:10:2A:6D:60:9A:80:55:F9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e8:0c:d2:18:f2:e5:c2:99:3a:5a:49:ef:72:eb:c9:7d:fd: 77:56:fe:a9:3b:e5:04:be:0c:f4:3e:52:1c:ba:ae:6b:57:81: 4b:47:ac:d4:65:10:7b:63:bd:7f:5f:92:70:21:26:7d:a4:81: e5:d3:da:c9:ad:74:e5:27:d3:16:f9:28:6e:8c:1c:02:d4:7c: 71:90:b2:cc:42:80:0f:13:bf:ed:49:00:1f:b5:0e:b1:32:73: a0:4f:dd:68:43:c5:9f:64:15:4a:6b:09:a9:e1:d9:30:59:31: 52:f5:d6:ab:d3:28:f5:44:b8:70:1b:5a:fc:29:df:ac:24:21: bd:4c:3b:4f:94:2e:5b:81:22:42:ba:b0:6f:9f:78:e5:cf:4d: c2:f7:8b:47:98:f3:1f:40:4f:7e:f8:c4:e6:e2:17:38:0c:2b: a0:25:61:19:2f:b5:02:92:8e:9e:52:fb:d0:1a:cc:88:5b:6b: f1:ba:34:3b:bb:b7:fb:1f:16:63:be:74:6f:8a:80:39:18:b2: 59:b9:41:d7:dd:90:4e:6b:c3:f9:5a:94:e0:9c:56:62:6a:00: 3c:c9:74:4a:1a:bb:0c:ba:f8:ef:30:46:8f:56:87:f5:86:75: d5:92:10:e9:f9:4c:23:64:af:bd:2d:00:ea:e1:98:60:ec:df: 84:6c:c9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67sefgOydX+buYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MWI0NjUzNWMtNDg3Ny00YTA5LWIyYjUtMDJkMGRmYWFkYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE/rnLHpmWxsiBKt72B90w8eRG4Mb4qdm77k xIWrkJ8+CAgUfM4fDAcbYGJBSxvIAAhf4hmY+HMOXplwew4fhZ/aafehl0oJu2v5 Y7rxvdMIJfAekJOF6RbVyBtcxESvT3jvHua9XsB8AbaFgiJwh1YAFnvtUPl/mOWI 4sm141QDqgDMyw/RX+IkE/envVrMhSYA0/ObGpR1JfPrPqQPiCM0iv/or7QOZFwl hYJPAXhyDpJStf+yRLjplQ21M9VNjfJShAH0kDBWMdZhSxTmFpf0wT/ipUqLnXno qe1w82A3dS7ovaIU/0F40cWvgovvlkdJSJqMEFaqnrl5bYCm1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT77sq7tRyVwuKwECptYJqAVfnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIyMWE2YmQtMzkzYS0z NzU4LWI2ZjgtOGJmMDBjYzk2NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEboDNIY8uXCmTpaSe9y68l9/XdW/qk75QS+DPQ+Uhy6rmtXgUtHrNRl EHtjvX9fknAhJn2kgeXT2smtdOUn0xb5KG6MHALUfHGQssxCgA8Tv+1JAB+1DrEy c6BP3WhDxZ9kFUprCanh2TBZMVL11qvTKPVEuHAbWvwp36wkIb1MO0+ULluBIkK6 sG+feOXPTcL3i0eY8x9AT374xObiFzgMK6AlYRkvtQKSjp5S+9AazIhba/G6NDu7 t/sfFmO+dG+KgDkYslm5QdfdkE5rw/lalOCcVmJqADzJdEoauwy6+O8wRo9Wh/WG ddWSEOn5TCNkr70tAOrhmGDs34RsyYM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:48 2025 by rpki-client