$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa File: 72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa (raw, json) Hash identifier: jNwgNXiAe6tJTy1oQsDFtj7m5OjJ44LxPwsiHeRHNGA= Subject key identifier: DA:6F:4C:C7:9E:CF:97:77:18:89:16:97:DB:75:1C:62:F7:7F:C4:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD3A4877EDCD7496F78A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d3:a4:87:7e:dc:d7:49:6f:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=10dff28b-8589-4175-9c44-8ada88f71e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:68:af:2b:c1:b0:f0:e0:62:83:e8:5e:c9: 06:6e:5a:bb:21:96:67:0b:73:79:a8:79:94:8b:3e: 69:07:bb:b5:9d:4e:8a:8f:c1:47:93:40:5e:3f:bb: 5c:d6:6c:c8:bb:f4:3c:c7:6b:f4:7e:9e:b6:4f:9e: c1:f7:23:d1:40:f0:23:dc:89:cd:45:de:8f:68:f1: 46:83:23:3b:e9:f9:2d:03:41:85:ae:2c:cc:2a:41: 53:f8:31:65:8c:1c:42:4d:33:1e:5d:cc:82:0e:f2: aa:2a:de:8e:79:34:4a:bd:e3:6a:02:0e:6a:9b:1c: 41:e0:21:a7:cb:3f:70:49:37:5a:6d:c5:0a:67:27: 59:68:ce:62:1d:77:16:5d:1b:06:6a:84:5b:b8:14: 91:83:4e:96:7b:0e:bc:25:4e:63:93:90:e2:81:56: 90:c5:a2:8d:98:19:26:b3:6b:33:75:7b:8f:1e:1a: f1:3d:e0:63:25:a3:03:b4:89:8a:4f:52:0b:72:87: 07:1e:50:b3:c1:a4:9f:32:19:54:54:41:2e:60:cb: 84:2f:a3:1b:81:2a:1b:65:7f:46:08:4d:39:85:cd: 7a:1d:9e:38:3b:c4:b6:48:e6:dc:41:91:7d:1d:30: 22:fb:c2:f4:2f:43:53:d6:d6:c5:a5:c3:a9:a9:a7: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6F:4C:C7:9E:CF:97:77:18:89:16:97:DB:75:1C:62:F7:7F:C4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72dcbb8a-a7e3-3c6f-aa39-914d0b7d06d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d7:de:53:db:52:b0:5c:09:b1:7c:87:20:15:a1:a9:1b:d9: d7:06:6c:39:5c:03:97:6d:3f:47:14:fb:83:18:0f:cf:51:4b: 67:5a:f5:2a:a7:10:66:e2:df:2f:ce:a6:d0:5a:a5:6d:04:de: 60:7a:00:38:20:76:99:be:29:35:dd:70:06:84:e2:b8:40:bf: f8:d1:1a:d1:0f:d1:cf:31:b7:0d:ed:d8:63:ee:4c:90:9e:de: dd:9f:7e:05:2c:f2:38:67:28:e2:c3:01:08:9c:fa:8d:aa:3a: 86:08:ea:ee:6b:42:bf:a4:01:bc:e4:05:46:71:9a:de:c9:21: 76:18:58:60:e6:a1:01:4f:94:00:57:48:2f:f5:6d:dc:50:df: 34:15:ad:b9:9f:47:84:c1:e8:c4:8e:54:b0:da:81:3d:79:93: b2:af:57:85:31:81:65:ca:ec:c3:5f:f3:13:4c:c6:59:7b:95: ab:90:79:4a:06:30:17:d9:e6:33:1e:b8:64:c8:7a:e4:31:57: 3c:2d:ba:bb:8f:a0:62:1b:ef:a8:c3:03:be:4d:0b:32:fd:d8: 66:5b:18:24:9e:65:da:2e:a2:dd:1b:02:1c:49:38:c0:3a:7e: 8e:85:fa:13:2b:66:1c:1e:83:6b:ff:b8:47:f7:0c:8d:5f:93: f4:b0:1b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69Okh37c10lveKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MTBkZmYyOGItODU4OS00MTc1LTljNDQtOGFkYTg4ZjcxZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuRoryvBsPDgYoPoXskGblq7IZZnC3N5qHmU iz5pB7u1nU6Kj8FHk0BeP7tc1mzIu/Q8x2v0fp62T57B9yPRQPAj3InNRd6PaPFG gyM76fktA0GFrizMKkFT+DFljBxCTTMeXcyCDvKqKt6OeTRKveNqAg5qmxxB4CGn yz9wSTdabcUKZydZaM5iHXcWXRsGaoRbuBSRg06Wew68JU5jk5DigVaQxaKNmBkm s2szdXuPHhrxPeBjJaMDtImKT1ILcocHHlCzwaSfMhlUVEEuYMuEL6MbgSobZX9G CE05hc16HZ44O8S2SObcQZF9HTAi+8L0L0NT1tbFpcOpqachtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpvTMeez5d3GIkWl9t1HGL3f8Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzJkY2JiOGEtYTdlMy0z YzZmLWFhMzktOTE0ZDBiN2QwNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnX3lPbUrBcCbF8hyAVoakb2dcGbDlcA5dtP0cU+4MYD89RS2da9Sqn EGbi3y/OptBapW0E3mB6ADggdpm+KTXdcAaE4rhAv/jRGtEP0c8xtw3t2GPuTJCe 3t2ffgUs8jhnKOLDAQic+o2qOoYI6u5rQr+kAbzkBUZxmt7JIXYYWGDmoQFPlABX SC/1bdxQ3zQVrbmfR4TB6MSOVLDagT15k7KvV4UxgWXK7MNf8xNMxll7lauQeUoG MBfZ5jMeuGTIeuQxVzwturuPoGIb76jDA75NCzL92GZbGCSeZdouot0bAhxJOMA6 fo6F+hMrZhweg2v/uEf3DI1fk/SwGzc= -----END CERTIFICATE-----Generated at Fri Apr 4 21:00:01 2025 by rpki-client