$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/57f61a7b-18da-3e3d-bf27-6f375a65c7d6.roa File: 57f61a7b-18da-3e3d-bf27-6f375a65c7d6.roa (raw, json) Hash identifier: 3GKJfkxwyZuqHIDW0vbcQWEg0aI0cFZpOX7UsZjNHqs= Subject key identifier: DC:4C:20:1E:A0:77:73:A8:E6:53:4C:F3:38:7D:1C:75:80:3F:F3:91 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBBE47D9A72781D13A7400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/57f61a7b-18da-3e3d-bf27-6f375a65c7d6.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:be:47:d9:a7:27:81:d1:3a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=400d4879-44cf-4f25-9822-2bf9d9adcb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:63:79:28:0b:be:86:c7:ff:7b:bf:d7:2b:16: 00:3a:3d:41:a3:97:00:68:eb:dc:3e:39:f3:d0:fa: 68:d5:4c:23:f5:71:2c:95:45:6a:59:32:87:08:42: 41:19:bc:71:03:9c:0f:48:f2:ab:4c:c6:1c:9e:94: 40:53:6b:4f:dd:2a:36:d4:ef:23:7a:0c:3c:0d:b6: 6d:db:5d:08:7d:37:2c:cd:dd:2e:6e:e1:b8:42:e8: 7e:6b:65:01:cf:87:58:b1:8b:80:6b:7f:17:70:d6: ca:2e:08:94:18:0e:54:3b:b5:20:25:d7:c7:6d:e7: 75:9c:d2:68:ab:64:97:0e:2d:f7:51:19:61:7a:b0: 1c:cd:f8:26:cb:b9:b0:cc:e7:84:d0:e6:8a:a7:46: f0:43:80:da:99:8f:ca:df:2a:6c:24:1c:14:ad:96: 13:47:75:80:65:d7:0a:2c:57:f7:15:04:b8:43:d2: 1f:41:78:93:24:38:64:bf:9e:e1:d0:0d:1e:e3:4c: b3:89:90:69:f0:f5:db:a0:3c:2f:70:9d:e6:73:93: cc:47:08:64:63:33:3c:00:83:54:44:3f:9c:76:2f: 26:d2:a3:95:f8:75:12:2e:95:1a:07:6a:d0:70:02: 76:a8:9f:f3:5c:d5:3c:7f:78:a7:aa:38:92:fc:08: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4C:20:1E:A0:77:73:A8:E6:53:4C:F3:38:7D:1C:75:80:3F:F3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/57f61a7b-18da-3e3d-bf27-6f375a65c7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8f:ec:21:da:02:9e:5e:a6:c5:d8:8f:a4:4f:e3:e8:d7:86: 0e:44:3b:e9:47:c0:bd:ea:b2:46:e9:81:84:f2:ef:ba:17:4c: d4:65:fe:e2:80:ac:23:1c:c0:c8:5b:a5:35:91:40:84:0d:fc: 9d:06:8a:59:31:61:f5:51:82:fd:27:40:c4:2e:24:6c:2b:38: c0:a5:df:18:9a:19:bb:f9:de:3c:c9:59:c7:7c:15:be:01:bb: 04:c8:86:8f:5f:b4:20:d0:5c:3c:85:5a:6e:93:04:fa:93:50: 7e:1f:5a:12:4c:9f:68:ad:b2:40:70:e4:c3:61:28:64:ed:b4: 0f:b4:93:aa:0d:ce:52:5c:c1:ef:ee:2f:e1:9f:1a:54:4d:9b: 99:cf:df:f2:ce:bd:36:9e:20:ff:70:d3:12:a2:0e:4c:31:b5: 04:dd:38:db:cf:0a:4a:23:1c:d0:26:71:92:57:5d:c2:10:6f: 19:b1:bd:43:8a:a4:67:ed:eb:42:5c:6c:73:af:ff:a9:88:82: 1d:ba:ef:df:e5:e4:c4:4e:22:53:14:ba:ee:60:43:48:f9:43: f3:25:d5:2d:1c:1f:bb:52:02:f0:93:3c:6d:86:ae:c4:f2:df: d0:d8:35:36:77:ee:20:79:9b:82:79:70:c4:0d:f5:5a:61:a8: 2d:19:35:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/675H2acngdE6dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDAwZDQ4NzktNDRjZi00ZjI1LTk4MjItMmJmOWQ5YWRjYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmN5KAu+hsf/e7/XKxYAOj1Bo5cAaOvcPjnz 0Ppo1Uwj9XEslUVqWTKHCEJBGbxxA5wPSPKrTMYcnpRAU2tP3So21O8jegw8DbZt 210IfTcszd0ubuG4Quh+a2UBz4dYsYuAa38XcNbKLgiUGA5UO7UgJdfHbed1nNJo q2SXDi33URlherAczfgmy7mwzOeE0OaKp0bwQ4DamY/K3ypsJBwUrZYTR3WAZdcK LFf3FQS4Q9IfQXiTJDhkv57h0A0e40yziZBp8PXboDwvcJ3mc5PMRwhkYzM8AINU RD+cdi8m0qOV+HUSLpUaB2rQcAJ2qJ/zXNU8f3inqjiS/AhrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxMIB6gd3Oo5lNM8zh9HHWAP/ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTdmNjFhN2ItMThkYS0z ZTNkLWJmMjctNmYzNzVhNjVjN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmP7CHaAp5epsXYj6RP4+jXhg5EO+lHwL3qskbpgYTy77oXTNRl/uKA rCMcwMhbpTWRQIQN/J0GilkxYfVRgv0nQMQuJGwrOMCl3xiaGbv53jzJWcd8Fb4B uwTIho9ftCDQXDyFWm6TBPqTUH4fWhJMn2itskBw5MNhKGTttA+0k6oNzlJcwe/u L+GfGlRNm5nP3/LOvTaeIP9w0xKiDkwxtQTdONvPCkojHNAmcZJXXcIQbxmxvUOK pGft60JcbHOv/6mIgh2679/l5MROIlMUuu5gQ0j5Q/Ml1S0cH7tSAvCTPG2GrsTy 39DYNTZ37iB5m4J5cMQN9VphqC0ZNcg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:38 2025 by rpki-client