$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa File: 5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa (raw, json) Hash identifier: slYCZlBQJJuyVCljoFNPUQkwt9wpehduCrKUaob5H50= Subject key identifier: 1D:CD:45:62:45:11:98:75:15:94:8C:50:34:1B:A7:5A:F1:82:3A:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBC2097D8730CD3676E9F0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.196.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c2:09:7d:87:30:cd:36:76:e9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=e2e6f1b3-e396-431c-a56e-d4bec9a7bb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:90:04:95:e5:95:75:a9:86:38:82:88:63: 7b:68:85:1b:73:ed:8a:6c:7e:66:9d:e5:76:ae:97: 38:e9:78:c6:33:29:ca:ff:15:88:0d:16:8b:74:09: 15:e2:4d:36:3d:37:55:f0:be:87:8e:f8:d6:8e:e3: f3:57:25:ce:c2:d2:2a:bc:1d:4e:e2:a2:69:84:c7: dd:0f:b3:d9:1f:6e:7a:82:97:95:4a:be:ad:30:02: c8:76:f9:5a:55:9a:51:a3:21:fe:10:ea:cc:e3:49: 24:c9:1c:14:ba:c2:62:f9:b7:62:9e:34:65:02:c9: 69:0b:2d:82:88:e5:7e:ba:17:38:b9:6c:c6:bb:91: 83:a8:71:9c:13:75:93:50:9b:e5:f2:a9:5e:2a:25: 85:06:e9:47:01:a0:ce:94:4d:b1:ab:68:ad:7d:d2: 7a:8b:2c:3e:bd:3d:42:c1:df:76:82:71:4e:65:a7: c9:3b:1a:93:ee:0c:60:4b:8f:ba:38:a6:02:f6:a0: 5b:a1:38:b3:ec:10:f3:9c:87:b9:a5:6b:f8:4b:81: 8c:e6:92:4c:8a:07:9a:9a:3d:2b:29:7b:2a:a2:c4: 1d:ba:e3:7e:2c:18:85:61:85:a2:65:5b:55:a0:0f: a4:89:44:c6:2d:37:e3:b0:52:d8:41:cf:b3:ed:ac: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CD:45:62:45:11:98:75:15:94:8C:50:34:1B:A7:5A:F1:82:3A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d35dbf1-b540-32ee-8b6c-48f91e51fcad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7c:ae:95:35:3a:b1:d9:6b:6a:a6:88:e4:eb:3a:25:a5:b2: 10:52:39:f9:34:2c:0e:0d:90:d3:96:2a:8a:27:8d:c4:17:84: 21:dd:44:ae:e5:bc:42:a9:61:eb:ad:1a:2e:d0:2b:cc:ec:b2: dc:8f:ea:16:c2:7b:b6:e5:21:76:c9:8a:2f:ee:5f:c0:66:8e: f2:e9:43:8e:09:00:ac:ec:53:e2:e9:b8:f3:a6:4f:0b:25:95: 04:43:7a:45:b3:0c:d7:f7:77:44:44:da:bd:53:4f:61:04:9e: fb:1e:09:d2:93:10:d8:dd:40:a6:a3:c4:63:a3:db:48:aa:a2: cc:09:ce:fc:71:21:86:61:c8:e7:59:a1:96:4d:05:a7:85:06: b4:1b:7b:05:ab:32:18:7e:e1:1c:ae:f2:7a:28:68:d0:b5:fa: 0a:6c:bf:5c:b8:17:55:0f:90:65:e6:e9:2b:bb:e3:05:cb:a8: 1f:47:bb:84:d8:f5:77:9f:c5:f3:d0:62:7b:60:a8:ce:66:5c: 89:d7:9c:29:8c:fb:54:85:73:20:54:61:6e:8e:73:c4:e5:b8: 9e:af:a1:55:c2:56:96:44:8d:f5:33:31:7f:62:91:73:36:76: c4:27:e4:16:df:c5:2d:60:ca:4e:1e:03:25:16:b3:f8:a2:b6: ea:0b:3f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68IJfYcwzTZ26fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTJlNmYxYjMtZTM5Ni00MzFjLWE1NmUtZDRiZWM5YTdiYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEqQBJXllXWphjiCiGN7aIUbc+2KbH5mneV2 rpc46XjGMynK/xWIDRaLdAkV4k02PTdV8L6HjvjWjuPzVyXOwtIqvB1O4qJphMfd D7PZH256gpeVSr6tMALIdvlaVZpRoyH+EOrM40kkyRwUusJi+bdinjRlAslpCy2C iOV+uhc4uWzGu5GDqHGcE3WTUJvl8qleKiWFBulHAaDOlE2xq2itfdJ6iyw+vT1C wd92gnFOZafJOxqT7gxgS4+6OKYC9qBboTiz7BDznIe5pWv4S4GM5pJMigeamj0r KXsqosQduuN+LBiFYYWiZVtVoA+kiUTGLTfjsFLYQc+z7azgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3NRWJFEZh1FZSMUDQbp1rxgjpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQzNWRiZjEtYjU0MC0z MmVlLThiNmMtNDhmOTFlNTFmY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ8rpU1OrHZa2qmiOTrOiWlshBSOfk0LA4NkNOWKoonjcQXhCHdRK7l vEKpYeutGi7QK8zsstyP6hbCe7blIXbJii/uX8BmjvLpQ44JAKzsU+LpuPOmTwsl lQRDekWzDNf3d0RE2r1TT2EEnvseCdKTENjdQKajxGOj20iqoswJzvxxIYZhyOdZ oZZNBaeFBrQbewWrMhh+4Ryu8nooaNC1+gpsv1y4F1UPkGXm6Su74wXLqB9Hu4TY 9XefxfPQYntgqM5mXInXnCmM+1SFcyBUYW6Oc8TluJ6voVXCVpZEjfUzMX9ikXM2 dsQn5BbfxS1gyk4eAyUWs/iituoLP3E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:27 2025 by rpki-client