$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/662d2908-1c62-3cd8-a1b5-e487cae330fd.roa File: 662d2908-1c62-3cd8-a1b5-e487cae330fd.roa (raw, json) Hash identifier: swKs7Q047tqFUcFuc9CzUVMbc31Ldoyqi2Z3Ezbau8E= Subject key identifier: 7E:47:1F:A2:30:C8:B5:75:60:78:F9:24:11:56:E3:29:2B:51:F6:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBC895AC8F8E33AD8F71E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/662d2908-1c62-3cd8-a1b5-e487cae330fd.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.196.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c8:95:ac:8f:8e:33:ad:8f:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=8a8d9346-a973-453e-a665-78d648978d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:aa:8e:bb:57:1f:ff:8d:36:64:e4:17:99: ce:77:9f:1d:49:26:52:14:2d:89:6d:ac:28:4a:03: 95:e4:df:1c:cc:8e:10:71:71:6f:71:f9:93:4c:cc: 9d:ff:47:09:2c:e0:c2:75:18:e8:a6:ce:84:95:d1: df:43:65:00:8f:95:f1:f5:83:3b:05:b3:3e:6f:0f: f9:ab:2b:82:a0:3a:ea:98:40:21:46:4d:dd:3a:81: aa:b8:7e:5d:7f:7d:ff:19:d6:d9:38:0b:00:3e:ff: 27:99:0d:af:44:a5:51:e9:fe:4a:06:4a:83:01:44: 9d:32:71:39:b1:3e:1d:a2:9c:3a:8b:89:5c:a6:87: bb:47:64:4f:58:5b:97:39:fd:b3:22:51:79:2d:f1: f4:97:59:28:d3:ad:02:5d:8b:99:aa:60:3b:d8:f3: bb:3b:61:fa:ec:44:05:3c:e5:38:e5:20:4c:e6:5f: 17:a0:97:84:3c:94:06:d5:5a:e1:36:38:9d:3c:99: d6:62:77:c5:f1:43:84:95:ca:08:41:66:88:15:89: 5e:ac:55:9f:22:0b:ad:89:21:bb:5f:34:64:c8:ad: 98:2a:0d:67:de:e1:c5:44:b6:7f:9f:9e:79:fc:ec: 21:5f:3b:8b:a6:3b:88:f9:17:4c:2f:57:e8:41:38: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:47:1F:A2:30:C8:B5:75:60:78:F9:24:11:56:E3:29:2B:51:F6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/662d2908-1c62-3cd8-a1b5-e487cae330fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3e:91:35:1f:5a:38:ee:25:49:77:87:f1:6b:af:ba:d7:76: cc:b9:99:0f:96:51:1c:a3:60:7d:bd:0e:c1:c6:c7:25:c8:c1: 67:44:eb:f3:04:ea:22:85:3b:04:25:83:54:43:0c:d4:9f:02: db:df:76:13:54:05:23:12:20:23:82:15:6d:ff:16:f6:80:3f: 99:07:72:0e:fc:a6:e2:29:a0:3a:ad:9e:7b:9a:15:6b:6d:e7: f4:ac:ff:f0:e6:62:b6:60:68:fd:ad:7a:d0:ec:41:fd:0e:e6: 50:91:a1:a5:11:45:91:ef:b1:9d:18:33:2a:c0:a8:d6:dc:33: bb:88:de:c5:8b:61:cd:8a:7e:98:5d:fa:21:39:ce:a7:d7:12: 85:bd:e6:95:c1:6a:2b:e5:7a:55:5a:93:ea:51:42:64:18:0c: 7c:76:79:db:f1:e1:ad:aa:44:51:ad:36:df:54:63:a1:db:a0: 70:04:73:1f:d7:92:77:82:f4:79:7e:2b:ce:55:c7:86:6b:81: d2:99:b6:27:a2:fb:ba:fb:be:30:92:60:5f:46:6f:f8:69:8a: 94:f6:53:8a:72:3b:a5:09:11:b8:ff:77:43:54:44:7a:c1:0f: 83:fd:59:1c:dc:bc:97:57:bf:b2:08:8e:ac:9e:61:83:c4:bd: 42:40:39:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68iVrI+OM62PceAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OGE4ZDkzNDYtYTk3My00NTNlLWE2NjUtNzhkNjQ4OTc4ZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvOqjrtXH/+NNmTkF5nOd58dSSZSFC2Jbawo SgOV5N8czI4QcXFvcfmTTMyd/0cJLODCdRjops6EldHfQ2UAj5Xx9YM7BbM+bw/5 qyuCoDrqmEAhRk3dOoGquH5df33/GdbZOAsAPv8nmQ2vRKVR6f5KBkqDAUSdMnE5 sT4dopw6i4lcpoe7R2RPWFuXOf2zIlF5LfH0l1ko060CXYuZqmA72PO7O2H67EQF POU45SBM5l8XoJeEPJQG1VrhNjidPJnWYnfF8UOElcoIQWaIFYlerFWfIgutiSG7 XzRkyK2YKg1n3uHFRLZ/n555/OwhXzuLpjuI+RdML1foQTgpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5HH6IwyLV1YHj5JBFW4ykrUfYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjYyZDI5MDgtMWM2Mi0z Y2Q4LWExYjUtZTQ4N2NhZTMzMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc+kTUfWjjuJUl3h/Frr7rXdsy5mQ+WURyjYH29DsHGxyXIwWdE6/ME 6iKFOwQlg1RDDNSfAtvfdhNUBSMSICOCFW3/FvaAP5kHcg78puIpoDqtnnuaFWtt 5/Ss//DmYrZgaP2tetDsQf0O5lCRoaURRZHvsZ0YMyrAqNbcM7uI3sWLYc2Kfphd +iE5zqfXEoW95pXBaivlelVak+pRQmQYDHx2edvx4a2qRFGtNt9UY6HboHAEcx/X kneC9Hl+K85Vx4ZrgdKZtiei+7r7vjCSYF9Gb/hpipT2U4pyO6UJEbj/d0NURHrB D4P9WRzcvJdXv7IIjqyeYYPEvUJAOaA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:21 2025 by rpki-client