$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa File: 3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa (raw, json) Hash identifier: wJ+emPLRqDSR3WORn1OKPbHPgqJm5dzUeHTwKgz/9aE= Subject key identifier: DB:27:BE:47:4D:D9:D5:1D:22:C0:08:58:EB:37:47:C0:52:1E:72:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB1FB4C8D9176C2904040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.196.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b1:fb:4c:8d:91:76:c2:90:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=68fc2918-ac5a-4ac1-8e28-8468d3b24ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:9e:2f:29:8f:07:d1:b6:e6:fc:79:f3:40: 92:e5:92:98:30:8a:71:7c:ca:4e:21:44:22:0a:f6: bb:1d:91:0b:11:7f:6a:81:39:73:54:d7:13:f8:89: c7:59:1b:eb:1d:c7:41:2a:10:74:d0:98:c8:45:11: 30:a5:63:da:4e:29:22:55:90:93:de:15:06:cd:42: e0:0d:47:72:5c:1a:a1:34:70:68:d2:62:7b:8d:e6: 94:44:95:26:5b:9a:5e:85:d8:51:75:95:85:6a:c1: bd:ff:af:5d:e2:26:6d:cc:31:74:46:41:bc:15:75: b1:66:37:3b:eb:e1:ee:8a:33:e0:bd:e5:54:52:78: 4e:63:84:63:24:19:fe:f5:b3:6c:0c:0b:7a:7e:2c: 73:f0:4b:34:ec:9b:3f:81:ba:e9:1e:c5:b5:ff:cf: 24:32:d3:89:10:db:34:5b:2d:0b:1d:fd:6a:c7:55: 53:2d:36:f7:ea:9f:4e:1c:d3:3f:cb:6f:cc:37:eb: d7:bb:75:ff:4b:12:cc:e4:1f:73:f8:82:2d:97:f7: 31:82:c2:ec:08:b8:0b:a8:16:27:09:49:11:26:fb: 31:ff:c4:23:b3:e0:51:77:83:d7:37:3e:cb:cb:45: 8d:d7:b0:ce:88:69:5f:15:f0:07:95:a1:79:b0:df: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:BE:47:4D:D9:D5:1D:22:C0:08:58:EB:37:47:C0:52:1E:72:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a7f2cd2-4197-3d75-9f6f-8b3e2e637991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d8:03:59:36:a4:ca:3a:8f:21:a5:de:bb:67:31:da:b8:61: a3:21:e1:24:cf:29:c6:50:e6:f3:00:b6:93:51:46:31:01:98: 4a:19:70:55:e0:81:6c:f1:e2:42:f4:6e:35:0d:9f:2d:81:bd: c0:cd:af:0f:83:08:43:10:35:f0:46:c3:ad:81:20:2b:49:e1: d9:46:be:da:a1:ae:35:8a:9e:7c:d2:15:f8:d3:ea:5b:b4:83: 56:76:08:a7:8f:39:33:41:99:8d:c2:31:14:43:b7:ba:c7:9c: 9f:19:df:81:b3:de:25:4e:0b:0e:c4:17:56:47:21:8c:1b:01: d3:ab:cd:ec:a1:ad:85:b4:a8:de:2e:0e:3f:87:11:a3:d3:90: 90:46:dc:7c:d9:b7:f5:19:f1:92:b5:6a:da:11:ed:2b:0d:a6: 84:06:11:69:2a:34:c1:a2:f5:cd:7e:17:b0:88:7d:d9:c2:d5: f0:89:66:f7:17:ef:cf:f7:cc:30:06:3e:08:a2:01:87:b8:f1: c4:85:2a:5f:e8:f3:c5:70:cd:75:7d:84:78:d6:16:81:30:09: c9:d8:c8:28:7d:3f:16:c8:f2:a8:2b:2e:8e:42:94:83:fa:96: ec:36:45:46:2a:4f:73:9c:00:db:15:10:a4:f4:fc:e1:15:03: d3:c5:c1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67H7TI2RdsKQQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NjhmYzI5MTgtYWM1YS00YWMxLThlMjgtODQ2OGQzYjI0ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvmeLymPB9G25vx580CS5ZKYMIpxfMpOIUQi Cva7HZELEX9qgTlzVNcT+InHWRvrHcdBKhB00JjIRREwpWPaTikiVZCT3hUGzULg DUdyXBqhNHBo0mJ7jeaURJUmW5pehdhRdZWFasG9/69d4iZtzDF0RkG8FXWxZjc7 6+HuijPgveVUUnhOY4RjJBn+9bNsDAt6fixz8Es07Js/gbrpHsW1/88kMtOJENs0 Wy0LHf1qx1VTLTb36p9OHNM/y2/MN+vXu3X/SxLM5B9z+IItl/cxgsLsCLgLqBYn CUkRJvsx/8Qjs+BRd4PXNz7Ly0WN17DOiGlfFfAHlaF5sN8kkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsnvkdN2dUdIsAIWOs3R8BSHnIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2E3ZjJjZDItNDE5Ny0z ZDc1LTlmNmYtOGIzZTJlNjM3OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHYA1k2pMo6jyGl3rtnMdq4YaMh4STPKcZQ5vMAtpNRRjEBmEoZcFXg gWzx4kL0bjUNny2BvcDNrw+DCEMQNfBGw62BICtJ4dlGvtqhrjWKnnzSFfjT6lu0 g1Z2CKePOTNBmY3CMRRDt7rHnJ8Z34Gz3iVOCw7EF1ZHIYwbAdOrzeyhrYW0qN4u Dj+HEaPTkJBG3HzZt/UZ8ZK1atoR7SsNpoQGEWkqNMGi9c1+F7CIfdnC1fCJZvcX 78/3zDAGPgiiAYe48cSFKl/o88VwzXV9hHjWFoEwCcnYyCh9PxbI8qgrLo5ClIP6 luw2RUYqT3OcANsVEKT0/OEVA9PFwYc= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:15 2025 by rpki-client