$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa File: 4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa (raw, json) Hash identifier: Q3qe2KgjYXCaEHYrm8RC4rPPVdpeKcDswrZwofDPYMM= Subject key identifier: 83:13:66:7A:06:1F:51:75:D4:03:60:6F:AE:0A:76:5D:6E:49:F6:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB8F8C16E081DC7B4C5B0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.199.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b8:f8:c1:6e:08:1d:c7:b4:c5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=5c1b1c5b-fec4-4bbc-8813-d18f1025f76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:ee:ba:3c:c3:90:de:b8:75:62:fc:50:e4: d0:84:0a:7e:22:88:86:f8:09:f0:b4:7f:1e:e2:3a: d1:dd:c2:77:fd:f4:54:ef:46:3c:59:b7:8d:f2:93: 33:81:65:dc:2e:4e:ee:07:73:89:4b:33:27:9b:50: a6:fa:ef:d0:e6:5c:0d:c0:10:11:06:cd:4c:f9:dc: a7:16:cc:a2:d5:90:53:47:93:d6:14:d2:8b:6c:b1: 8e:18:70:ed:26:88:3b:37:20:ae:c6:20:a2:c3:51: 7b:f3:42:20:88:c6:dc:74:6d:64:ec:93:57:d5:53: 94:a6:3e:e1:e5:e7:00:f1:6b:c1:0a:a4:e9:4b:59: 35:3f:56:bd:9e:3a:41:f6:70:4b:98:5b:82:af:fb: 0c:07:f6:27:a1:77:71:a8:2b:c8:91:fb:00:a7:6b: ed:b4:33:52:e5:a9:0f:95:39:a7:8b:a6:3e:e6:bf: 9e:c2:3b:f5:34:70:cb:ef:0c:20:e6:2d:39:39:6d: ca:06:e1:b2:71:52:a4:59:06:26:dd:f4:0d:3f:10: 85:69:10:b3:5b:6e:fd:b8:d6:ed:ec:8f:2d:d4:0a: 1d:c4:40:ab:9e:cf:03:77:30:8a:47:f0:26:cf:92: 0a:f7:10:ee:46:25:e8:19:c6:16:cf:72:65:75:5c: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:13:66:7A:06:1F:51:75:D4:03:60:6F:AE:0A:76:5D:6E:49:F6:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c09ba4a-4141-3ddf-91fd-cf438c2970b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e4:3a:6d:78:8c:ea:9c:a6:41:7a:56:02:08:ee:52:a8:b7: 28:1c:82:25:d4:85:eb:dd:a0:d7:46:1a:3c:98:1f:d2:44:b6: 81:0f:2f:df:cc:d0:ca:6f:de:b0:21:03:4c:a1:d3:bf:89:10: a8:8f:af:af:2f:f9:81:b3:53:18:ce:0d:19:a3:5a:3e:d4:6a: c5:6d:06:4f:f4:0d:3e:a9:52:89:13:fe:83:7e:27:6d:be:e6: a9:f4:38:84:7c:7b:54:72:62:ad:b1:4a:03:cf:a3:f3:7c:76: f7:70:c1:51:0b:6f:8c:0a:db:70:84:bf:24:1e:46:9f:b4:73: 50:a6:cc:f3:7d:b7:f0:4c:53:ff:6d:11:46:09:59:21:e7:a7: 4f:b6:20:43:97:b4:15:68:1c:5f:4c:5f:4f:1c:23:2a:0b:56: b2:c8:1d:36:c6:c2:d6:5f:f8:96:d3:ef:12:36:5a:96:d4:a6: 66:42:ac:45:32:1f:b1:83:14:53:2d:a9:02:ba:8e:07:45:79: 6c:ed:45:ba:3a:2c:b7:ef:be:51:03:68:69:81:19:d0:82:03: 7b:c6:be:5e:24:72:1e:a4:3e:a1:7f:c6:a4:47:7b:d0:6d:25: 5d:bf:85:40:94:0d:8e:5f:f4:bc:c4:b3:ae:ed:1a:a4:7f:30: 62:98:0c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67j4wW4IHce0xbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NWMxYjFjNWItZmVjNC00YmJjLTg4MTMtZDE4ZjEwMjVmNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmDuujzDkN64dWL8UOTQhAp+IoiG+AnwtH8e 4jrR3cJ3/fRU70Y8WbeN8pMzgWXcLk7uB3OJSzMnm1Cm+u/Q5lwNwBARBs1M+dyn Fsyi1ZBTR5PWFNKLbLGOGHDtJog7NyCuxiCiw1F780IgiMbcdG1k7JNX1VOUpj7h 5ecA8WvBCqTpS1k1P1a9njpB9nBLmFuCr/sMB/YnoXdxqCvIkfsAp2vttDNS5akP lTmni6Y+5r+ewjv1NHDL7wwg5i05OW3KBuGycVKkWQYm3fQNPxCFaRCzW279uNbt 7I8t1AodxECrns8DdzCKR/Amz5IK9xDuRiXoGcYWz3JldVwaAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMTZnoGH1F11ANgb64Kdl1uSfYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGMwOWJhNGEtNDE0MS0z ZGRmLTkxZmQtY2Y0MzhjMjk3MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7kOm14jOqcpkF6VgII7lKotygcgiXUhevdoNdGGjyYH9JEtoEPL9/M 0Mpv3rAhA0yh07+JEKiPr68v+YGzUxjODRmjWj7UasVtBk/0DT6pUokT/oN+J22+ 5qn0OIR8e1RyYq2xSgPPo/N8dvdwwVELb4wK23CEvyQeRp+0c1CmzPN9t/BMU/9t EUYJWSHnp0+2IEOXtBVoHF9MX08cIyoLVrLIHTbGwtZf+JbT7xI2WpbUpmZCrEUy H7GDFFMtqQK6jgdFeWztRbo6LLfvvlEDaGmBGdCCA3vGvl4kch6kPqF/xqRHe9Bt JV2/hUCUDY5f9LzEs67tGqR/MGKYDNI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:07 2025 by rpki-client