$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa File: a1f65c37-2173-3530-83d3-e99277d5c356.roa (raw, json) Hash identifier: P6pE5RVcWOCdzHVpdEul+TGhw4Rqs+h7l7BJZW6GGJw= Subject key identifier: 2E:DA:4E:44:17:67:63:96:A1:50:FB:7A:5F:D8:89:2F:E1:F7:7A:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB79A8EB8C4C1C4FB46C8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.155.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b7:9a:8e:b8:c4:c1:c4:fb:46:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=b1c0bf04-f0d4-44fa-b46a-9276ab7b8217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:61:aa:4d:c7:41:2f:27:7b:d4:cb:f2:b9: 97:4b:a2:4d:67:e8:3b:20:9d:9e:0c:52:b1:48:00: ca:1d:72:f7:1d:72:2c:e7:8e:8c:6b:ab:b6:70:33: dc:4f:51:58:bd:1c:f7:3c:f8:b7:31:84:ff:c6:db: ee:87:67:c9:29:ad:36:97:01:f2:c3:ad:8d:1f:ea: cf:b3:ed:ce:78:58:82:ce:ca:1b:67:cd:b4:f9:2f: 0b:fe:7b:27:39:1d:b4:11:4e:28:03:51:cb:f8:23: f6:48:0d:a3:10:55:e9:94:5f:f3:a8:62:26:f2:9e: 1a:c6:31:21:eb:8c:69:e7:98:1f:c6:07:fb:46:37: e5:d5:8b:80:2f:66:4a:d2:4f:e6:c6:6e:87:95:25: f0:c8:0d:58:8f:1c:22:c2:a5:f5:ff:b5:75:47:29: c5:73:cc:8a:4e:a9:22:72:bb:dd:e4:5e:95:7d:a7: 09:60:81:5d:47:f7:7e:94:c3:15:1b:f7:cb:d0:6c: e5:9f:e0:b3:1a:10:34:bf:09:8b:9b:2e:1d:f0:a2: b5:dd:d7:48:bf:69:0d:44:4f:6d:b8:76:a3:a6:cd: e8:5d:a2:d8:d2:04:27:0a:7d:6f:d7:cc:7d:f9:49: 75:1b:c8:14:c7:21:f6:e6:d1:3c:8d:f2:84:01:79: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DA:4E:44:17:67:63:96:A1:50:FB:7A:5F:D8:89:2F:E1:F7:7A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1f65c37-2173-3530-83d3-e99277d5c356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.155.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:22:e9:70:4b:ea:65:9e:1b:65:11:d8:37:a5:be:2c:6d:d1: 4c:c6:8e:55:4f:34:50:e1:1f:15:fa:3e:51:cd:93:d9:5b:5f: ff:dd:92:3d:c0:2b:ac:7d:66:52:7d:3e:70:0b:aa:e5:77:9f: 7f:37:a4:16:1f:4d:dc:d2:59:3a:f2:b3:95:13:9d:12:3f:f5: d2:34:54:db:f4:50:b2:c5:c9:6c:49:80:bc:bf:99:fd:11:22: bc:35:14:69:92:26:09:ca:83:bc:7c:79:4d:26:ca:eb:d6:f5: fd:1e:7c:f9:0b:d5:ab:73:a8:4d:cc:98:da:00:f7:48:f4:50: 28:14:af:36:f2:0d:42:0a:2c:1f:00:e3:de:db:8f:ff:cf:bf: 41:f8:7a:cb:18:42:b7:1f:92:29:aa:f7:21:b4:c3:3a:3e:d3: a9:d8:cc:0e:ca:8f:5a:11:13:c7:a2:a2:4c:bc:40:a4:c8:79: 02:44:0f:6b:89:e1:de:08:6a:38:12:42:35:30:42:49:60:57: e2:31:e5:56:95:60:fc:ce:4a:ad:20:a0:95:29:90:05:cd:fa: 55:5f:ce:ef:b2:69:8c:00:5e:8c:56:71:f8:f0:c8:b4:6c:6f: 13:48:d7:6f:b2:75:d5:25:94:c5:e0:aa:77:a9:d1:03:39:95: cf:96:e9:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67eajrjEwcT7RsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YjFjMGJmMDQtZjBkNC00NGZhLWI0NmEtOTI3NmFiN2I4MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXRhqk3HQS8ne9TL8rmXS6JNZ+g7IJ2eDFKx SADKHXL3HXIs546Ma6u2cDPcT1FYvRz3PPi3MYT/xtvuh2fJKa02lwHyw62NH+rP s+3OeFiCzsobZ820+S8L/nsnOR20EU4oA1HL+CP2SA2jEFXplF/zqGIm8p4axjEh 64xp55gfxgf7Rjfl1YuAL2ZK0k/mxm6HlSXwyA1YjxwiwqX1/7V1RynFc8yKTqki crvd5F6VfacJYIFdR/d+lMMVG/fL0Gzln+CzGhA0vwmLmy4d8KK13ddIv2kNRE9t uHajps3oXaLY0gQnCn1v18x9+Ul1G8gUxyH25tE8jfKEAXmPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7aTkQXZ2OWoVD7el/YiS/h93oqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTFmNjVjMzctMjE3My0z NTMwLTgzZDMtZTk5Mjc3ZDVjMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEi6XBL6mWeG2UR2Delvixt0UzGjlVPNFDhHxX6PlHNk9lbX//dkj3A K6x9ZlJ9PnALquV3n383pBYfTdzSWTrys5UTnRI/9dI0VNv0ULLFyWxJgLy/mf0R Irw1FGmSJgnKg7x8eU0myuvW9f0efPkL1atzqE3MmNoA90j0UCgUrzbyDUIKLB8A 497bj//Pv0H4essYQrcfkimq9yG0wzo+06nYzA7Kj1oRE8eioky8QKTIeQJED2uJ 4d4IajgSQjUwQklgV+Ix5VaVYPzOSq0goJUpkAXN+lVfzu+yaYwAXoxWcfjwyLRs bxNI12+yddUllMXgqnep0QM5lc+W6TA= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:36 2025 by rpki-client