$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa File: 9baeeff1-275e-3c98-a3ea-85555542d7e8.roa (raw, json) Hash identifier: 00gmX6TVNp5W1AIVLPhWl76p64U7cEnVC2yo2yJSf1k= Subject key identifier: 3E:9F:84:E1:39:44:EC:FA:22:BE:57:1A:10:7D:D0:F1:BB:1D:D7:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD87435273FAE466B5100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d8:74:35:27:3f:ae:46:6b:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=8bfbe078-0170-43cf-acfc-8b153f0ffeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d7:c6:0e:fe:f4:74:84:c9:11:6c:2a:5c:cd: 1c:6c:33:cf:aa:43:4a:1e:1e:a6:6c:10:27:19:10: 85:d7:01:4d:69:d8:5f:05:3c:4f:3b:9d:67:e8:c9: 88:2f:7d:10:10:11:40:de:17:2b:0b:8a:21:ed:68: 4a:35:23:05:c1:e3:6b:29:86:f9:ef:9f:88:e5:c0: e8:86:42:ec:f2:51:14:0a:59:44:1f:41:58:83:27: ec:26:1c:fb:c8:48:3d:27:d0:91:74:5c:0a:58:28: 47:91:43:e7:10:03:b0:14:50:09:b9:b1:94:60:b1: 3e:8f:36:55:40:52:8b:d1:43:bd:4f:4f:f1:de:ae: 5d:78:fd:15:e1:93:8c:3b:1a:07:91:49:63:f6:03: 81:bb:57:23:f7:c5:79:8b:22:ca:81:d8:e5:1e:dd: 3d:e1:76:32:1c:87:2c:b1:42:70:3d:3e:3c:32:07: 0a:57:b5:d1:75:1e:23:64:2d:49:1a:40:b5:53:56: eb:fe:2f:b4:62:8c:a1:32:50:17:a0:5b:91:1d:1a: 0f:4f:bf:12:eb:34:b2:93:3b:b3:23:cb:66:94:f9: 93:83:40:b5:66:47:e3:83:b5:d3:8f:c3:4d:c0:9e: 93:14:18:f6:f4:63:54:c6:cc:ea:a1:74:60:55:8e: fd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:84:E1:39:44:EC:FA:22:BE:57:1A:10:7D:D0:F1:BB:1D:D7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9baeeff1-275e-3c98-a3ea-85555542d7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d7:89:58:c0:82:6f:0b:6d:97:62:59:23:14:87:b4:5f:70: 05:d5:1f:d1:23:9e:0f:20:e9:84:d9:86:b7:24:40:93:41:f7: 01:3a:e4:68:1c:b6:6d:e1:4c:e5:7e:dc:fd:d1:ee:e1:fc:91: 01:88:d7:66:3d:68:04:1a:68:39:fd:11:77:5b:72:26:79:a9: 19:1e:3c:c8:c8:77:19:07:58:7d:45:00:7a:61:30:6b:6e:ba: fa:01:2d:71:e6:0c:d0:67:ef:ea:29:36:30:5e:06:1c:c2:90: 56:8e:f8:f0:a1:cf:87:ba:4c:ad:40:8c:19:31:05:b6:04:30: 98:27:9a:61:f8:f2:bc:da:7c:e4:08:38:3f:8c:54:c3:cc:8e: 40:4d:e9:10:ea:5d:4c:da:fe:cc:c8:74:98:b6:c8:c1:73:76: 4d:9d:f4:92:a8:9a:48:26:da:28:37:8d:fb:e6:47:f1:dd:e7: 32:ce:eb:7f:4d:f3:da:c1:9b:53:3a:dc:e3:11:e3:aa:8c:23: 96:99:78:a7:c2:ca:53:b7:41:b5:d1:0e:0e:d8:07:2e:1a:0c: 1f:cb:73:ca:29:7a:cd:9f:a1:2a:da:0d:c0:c5:ab:ac:be:0d: 68:9f:33:02:14:40:b3:3a:56:2b:75:06:64:96:6f:33:c4:11: a5:67:9b:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69h0NSc/rkZrUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OGJmYmUwNzgtMDE3MC00M2NmLWFjZmMtOGIxNTNmMGZmZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdfGDv70dITJEWwqXM0cbDPPqkNKHh6mbBAn GRCF1wFNadhfBTxPO51n6MmIL30QEBFA3hcrC4oh7WhKNSMFweNrKYb575+I5cDo hkLs8lEUCllEH0FYgyfsJhz7yEg9J9CRdFwKWChHkUPnEAOwFFAJubGUYLE+jzZV QFKL0UO9T0/x3q5deP0V4ZOMOxoHkUlj9gOBu1cj98V5iyLKgdjlHt094XYyHIcs sUJwPT48MgcKV7XRdR4jZC1JGkC1U1br/i+0YoyhMlAXoFuRHRoPT78S6zSykzuz I8tmlPmTg0C1Zkfjg7XTj8NNwJ6TFBj29GNUxszqoXRgVY79kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6fhOE5ROz6Ir5XGhB90PG7Hdd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJhZWVmZjEtMjc1ZS0z Yzk4LWEzZWEtODU1NTU1NDJkN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3XiVjAgm8LbZdiWSMUh7RfcAXVH9Ejng8g6YTZhrckQJNB9wE65Ggc tm3hTOV+3P3R7uH8kQGI12Y9aAQaaDn9EXdbciZ5qRkePMjIdxkHWH1FAHphMGtu uvoBLXHmDNBn7+opNjBeBhzCkFaO+PChz4e6TK1AjBkxBbYEMJgnmmH48rzafOQI OD+MVMPMjkBN6RDqXUza/szIdJi2yMFzdk2d9JKomkgm2ig3jfvmR/Hd5zLO639N 89rBm1M63OMR46qMI5aZeKfCylO3QbXRDg7YBy4aDB/Lc8opes2foSraDcDFq6y+ DWifMwIUQLM6Vit1BmSWbzPEEaVnmz4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:05:55 2025 by rpki-client