$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59cf7429-e653-3db7-aadd-450a4517b4f4.roa File: 59cf7429-e653-3db7-aadd-450a4517b4f4.roa (raw, json) Hash identifier: Ktz6wNAkbNcPMU63gLzAljVmFydjUmMR8JmCc34XD2Q= Subject key identifier: E2:7D:2A:E8:06:7D:C7:B4:95:3E:AA:8B:FB:A2:CE:DA:68:01:C5:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD6D71F888485367F0300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59cf7429-e653-3db7-aadd-450a4517b4f4.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.155.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d6:d7:1f:88:84:85:36:7f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=32ec7026-47b6-43a1-95c3-eb622818bd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:cf:b7:a7:24:d1:af:bb:ce:17:91:20:52: b2:a5:5a:ca:92:82:58:ab:b4:07:9f:53:d3:7f:df: 37:d0:66:ca:b6:5f:09:e9:42:5c:f9:8e:4e:b4:2f: 06:75:e4:5a:e0:7e:ee:35:4f:a2:bb:8e:8d:0a:f3: 36:9b:20:21:c0:17:7e:5b:9b:7c:28:06:a6:54:a0: fa:f8:89:0d:72:6f:21:8e:c6:a4:7c:24:65:bc:7d: c0:7d:d6:5f:10:19:2f:5a:9d:00:96:22:46:21:39: a2:e1:fb:4d:ec:8b:6b:7d:b9:36:48:ad:79:57:5e: 4f:bd:96:de:a7:a7:24:a4:ad:8a:ae:9e:f7:f4:fc: cf:e5:0e:78:ed:9f:f3:4c:89:04:bf:3a:39:e6:08: ce:c1:18:62:3a:cf:d1:ab:40:81:c7:a6:a4:5a:b9: 0d:df:72:1a:f9:e7:cc:3b:a9:2a:a1:77:08:86:a4: 9f:8b:55:f4:2e:54:a5:41:69:7c:52:53:89:c8:23: 96:4a:de:10:cb:3c:55:88:e5:bc:55:c8:22:50:e0: b7:f5:fb:c7:1b:c0:da:ec:bb:8c:c0:7a:e1:a7:02: 00:8b:65:98:89:22:61:fc:73:70:26:53:b8:90:f3: 94:ea:eb:40:67:b6:96:88:f0:57:c9:52:a4:bd:1e: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7D:2A:E8:06:7D:C7:B4:95:3E:AA:8B:FB:A2:CE:DA:68:01:C5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/59cf7429-e653-3db7-aadd-450a4517b4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.155.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4e:8e:2a:1a:c6:bb:98:c9:52:e3:82:b2:62:52:9a:a1:20: d6:2e:d3:2c:5c:c9:9b:e1:89:da:8c:28:97:b9:81:ff:11:f4: 28:1b:b7:c2:fb:88:26:89:3a:0e:46:7c:e6:e4:a9:10:61:2c: b1:69:70:fc:75:06:d4:dd:ee:15:c6:98:b6:54:73:a5:33:cb: 94:7c:73:92:9b:d9:3d:49:03:b2:2b:66:b7:4d:a4:d0:50:3f: 83:62:af:9b:c5:f0:3a:87:c9:3a:a8:b6:4c:e8:08:a9:51:e0: 5d:a6:a6:c5:35:fd:82:40:55:76:53:24:27:d8:b6:ac:c0:79: c4:b6:46:d4:cf:3b:6c:a9:9f:87:98:4c:73:67:38:a9:6f:00: d6:ab:e8:7c:c3:73:27:dd:8a:81:03:88:9b:95:38:92:73:8c: a7:c5:dc:84:92:cb:3d:04:ad:b2:df:e0:18:f4:cb:ec:41:0d: e8:4f:f1:8c:02:85:6f:35:81:b1:2f:b3:43:9b:f3:f5:42:3a: b3:71:fe:14:98:b1:50:b0:18:90:82:99:fd:9e:8c:9c:2a:f2: 95:76:af:fe:bc:fd:89:62:70:80:68:f7:69:38:d9:0f:f9:14: 4d:08:14:71:90:4d:59:9f:8b:54:58:a3:40:ba:2c:dc:7b:b3: fa:a9:fc:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69bXH4iEhTZ/AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MzJlYzcwMjYtNDdiNi00M2ExLTk1YzMtZWI2MjI4MThiZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFnPt6ck0a+7zheRIFKypVrKkoJYq7QHn1PT f9830GbKtl8J6UJc+Y5OtC8GdeRa4H7uNU+iu46NCvM2myAhwBd+W5t8KAamVKD6 +IkNcm8hjsakfCRlvH3AfdZfEBkvWp0AliJGITmi4ftN7Itrfbk2SK15V15PvZbe p6ckpK2Krp739PzP5Q547Z/zTIkEvzo55gjOwRhiOs/Rq0CBx6akWrkN33Ia+efM O6kqoXcIhqSfi1X0LlSlQWl8UlOJyCOWSt4QyzxViOW8VcgiUOC39fvHG8Da7LuM wHrhpwIAi2WYiSJh/HNwJlO4kPOU6utAZ7aWiPBXyVKkvR6zYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ9KugGfce0lT6qi/uiztpoAcX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTljZjc0MjktZTY1My0z ZGI3LWFhZGQtNDUwYTQ1MTdiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNOjioaxruYyVLjgrJiUpqhINYu0yxcyZvhidqMKJe5gf8R9Cgbt8L7 iCaJOg5GfObkqRBhLLFpcPx1BtTd7hXGmLZUc6Uzy5R8c5Kb2T1JA7IrZrdNpNBQ P4Nir5vF8DqHyTqotkzoCKlR4F2mpsU1/YJAVXZTJCfYtqzAecS2RtTPO2ypn4eY THNnOKlvANar6HzDcyfdioEDiJuVOJJzjKfF3ISSyz0ErbLf4Bj0y+xBDehP8YwC hW81gbEvs0Ob8/VCOrNx/hSYsVCwGJCCmf2ejJwq8pV2r/68/YlicIBo92k42Q/5 FE0IFHGQTVmfi1RYo0C6LNx7s/qp/No= -----END CERTIFICATE-----Generated at Fri Mar 14 13:22:42 2025 by rpki-client