$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf13d3e-d161-3588-90e2-3c993e901546.roa File: 2cf13d3e-d161-3588-90e2-3c993e901546.roa (raw, json) Hash identifier: Wc9DJBDgM6WIjvzIf6IrRjOxKkzTDZmF3fdoKZGvemI= Subject key identifier: C3:9D:DD:C4:33:66:05:E9:84:67:88:9B:84:D3:9A:DF:B2:6D:54:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB2236FC28034B2B7D280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf13d3e-d161-3588-90e2-3c993e901546.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.198.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b2:23:6f:c2:80:34:b2:b7:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=fcf0d6b9-c1f1-4200-9e5f-5f3791ac1f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:e0:1a:04:b6:d5:ee:65:e8:7e:18:7a:84: c6:b1:84:a3:aa:05:69:75:10:13:47:00:2f:c6:9b: 77:3b:aa:24:b2:ef:3f:bf:03:52:1f:38:a3:7e:1c: f5:a0:88:20:68:df:fa:04:b1:b6:4f:cd:c6:f6:c8: c4:19:09:f3:cf:9f:83:c1:74:1a:52:c0:b2:ce:b3: 8f:b5:4a:60:67:8a:47:6e:f2:b2:9a:e5:9e:fe:16: e1:a2:38:f8:c5:98:62:e7:be:55:19:52:b2:eb:45: ea:3a:97:56:72:84:6e:11:1b:4e:66:f7:cb:24:ca: b9:b7:9c:ae:51:e4:b9:0c:8a:93:cd:7a:58:c0:4f: 99:b2:5f:9e:68:61:2b:11:66:73:b6:2c:a3:b7:02: d4:c9:01:fd:7f:bc:cc:3d:0d:c7:19:34:1e:8d:25: 8d:92:d0:0d:1a:60:0a:5b:ff:5c:5f:af:fa:7b:29: a2:87:fd:9f:41:0f:3b:49:82:66:9d:dd:5b:d1:a3: 31:63:6d:26:ad:f4:55:f2:f0:33:01:4f:b2:2e:2c: b8:ba:55:4a:3e:6e:55:cd:ee:88:d4:d4:e3:4f:46: 51:14:f6:e7:c0:98:78:0d:0f:d3:92:1f:ad:48:79: 4e:9b:6d:95:c5:49:69:be:a2:a4:15:63:1c:eb:ce: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:DD:C4:33:66:05:E9:84:67:88:9B:84:D3:9A:DF:B2:6D:54:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cf13d3e-d161-3588-90e2-3c993e901546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:60:76:32:2a:eb:c5:64:a9:65:c2:e1:6f:2d:cb:1e:a5:23: 5e:92:a7:50:bc:f1:fe:c8:4a:f0:16:d6:33:4a:be:2b:8c:09: 24:00:0f:56:b0:8b:61:20:5e:f0:b1:e0:83:07:15:2a:72:2a: 67:54:eb:7d:f9:fa:b4:44:43:91:1c:e2:3e:7a:83:0e:09:10: a4:0a:07:ab:44:9c:ee:88:33:bd:09:2d:de:64:4f:d6:03:d9: e1:4c:cc:8d:e3:5e:35:33:d1:7c:3f:88:26:15:82:88:bf:78: 68:42:a2:32:4d:0c:25:31:06:6a:45:14:40:e7:8b:cb:b6:e9: 10:92:3d:dd:4c:85:40:b5:34:08:0d:d2:17:cc:bf:30:40:90: b1:e7:e1:7e:a0:4a:4c:3a:37:43:f6:60:1e:06:60:f8:0d:68: 5e:96:90:66:9d:de:38:22:c2:ea:d6:eb:b2:3a:81:02:19:39: 89:e5:40:8e:90:1a:82:13:41:36:8e:7e:a8:9c:18:41:a8:e5: cd:6f:a5:68:55:49:19:ba:0a:4b:66:3e:db:fc:a4:f4:99:22: c3:8c:fb:b2:83:ad:37:53:92:fe:cf:f7:58:14:85:cd:03:ab: 2b:dd:11:7c:1d:e2:1d:44:ff:98:1a:28:51:63:e5:9d:4b:98: 1c:2b:84:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67Ijb8KANLK30oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZmNmMGQ2YjktYzFmMS00MjAwLTllNWYtNWYzNzkxYWMxZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjTgGgS21e5l6H4YeoTGsYSjqgVpdRATRwAv xpt3O6oksu8/vwNSHzijfhz1oIggaN/6BLG2T83G9sjEGQnzz5+DwXQaUsCyzrOP tUpgZ4pHbvKymuWe/hbhojj4xZhi575VGVKy60XqOpdWcoRuERtOZvfLJMq5t5yu UeS5DIqTzXpYwE+Zsl+eaGErEWZztiyjtwLUyQH9f7zMPQ3HGTQejSWNktANGmAK W/9cX6/6eymih/2fQQ87SYJmnd1b0aMxY20mrfRV8vAzAU+yLiy4ulVKPm5Vze6I 1NTjT0ZRFPbnwJh4DQ/Tkh+tSHlOm22VxUlpvqKkFWMc687iQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOd3cQzZgXphGeIm4TTmt+ybVSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNmMTNkM2UtZDE2MS0z NTg4LTkwZTItM2M5OTNlOTAxNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlgdjIq68VkqWXC4W8tyx6lI16Sp1C88f7ISvAW1jNKviuMCSQAD1aw i2EgXvCx4IMHFSpyKmdU6335+rREQ5Ec4j56gw4JEKQKB6tEnO6IM70JLd5kT9YD 2eFMzI3jXjUz0Xw/iCYVgoi/eGhCojJNDCUxBmpFFEDni8u26RCSPd1MhUC1NAgN 0hfMvzBAkLHn4X6gSkw6N0P2YB4GYPgNaF6WkGad3jgiwurW67I6gQIZOYnlQI6Q GoITQTaOfqicGEGo5c1vpWhVSRm6CktmPtv8pPSZIsOM+7KDrTdTkv7P91gUhc0D qyvdEXwd4h1E/5gaKFFj5Z1LmBwrhP0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:11:20 2025 by rpki-client