$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a46b4c43-2389-3fa8-85dd-dba983edd9c8.roa File: a46b4c43-2389-3fa8-85dd-dba983edd9c8.roa (raw, json) Hash identifier: 4fHq8Yt8LcofW8Cqm+MLktC6Lqo3iSbSUJ9z+yBzT48= Subject key identifier: 59:89:FF:42:54:D2:3D:DC:1C:00:11:6C:33:0A:06:ED:29:86:CC:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBC8A5EF06713ED13DB5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a46b4c43-2389-3fa8-85dd-dba983edd9c8.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.199.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c8:a5:ef:06:71:3e:d1:3d:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=9e782f04-8a73-4006-9d19-b9c9858b726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4f:73:07:86:ab:df:f4:be:2c:b3:a5:7c:03: 5b:f0:e7:e3:6d:36:0c:05:00:7c:04:ce:b1:27:c3: 00:2c:b7:d3:50:25:64:c9:04:46:84:9d:d8:a0:59: 3e:36:c7:88:dc:c8:09:d7:7e:6a:86:90:94:7f:2f: 0b:93:85:b8:4d:d3:72:b4:27:4d:77:2a:bd:b3:1b: a7:4d:93:b5:98:02:0d:5e:51:18:60:b9:25:de:96: 92:6e:bd:93:6a:25:66:49:7f:e0:af:67:21:7d:54: df:87:23:34:a7:96:c0:d8:1e:c0:4f:bc:5e:18:e8: 74:88:e3:2d:f1:b8:17:31:50:87:02:bc:ba:8d:86: 66:46:68:b5:09:96:1e:28:b8:4f:48:ff:1e:e7:d1: 5e:ca:42:b8:d9:34:89:3f:97:03:a4:a4:b9:67:e9: 9e:4f:46:96:f1:15:44:39:02:e0:34:51:ae:ca:67: 2e:30:4b:51:e4:ff:bb:5e:93:a4:05:08:28:52:54: 7d:e5:8b:72:72:9d:0c:9f:4e:d7:a1:74:21:69:98: 77:20:59:46:36:b9:c9:e4:31:1f:34:9b:e7:75:86: 40:96:52:ea:20:aa:d4:eb:7f:7a:05:8f:23:c7:50: ac:b0:54:18:bd:da:67:c1:a9:ed:1a:ec:6d:42:e1: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:FF:42:54:D2:3D:DC:1C:00:11:6C:33:0A:06:ED:29:86:CC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a46b4c43-2389-3fa8-85dd-dba983edd9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f1:7e:99:af:08:51:10:b8:05:69:41:39:59:4d:07:63:80: 56:58:e4:dd:86:6b:18:6d:00:19:4b:a0:cb:26:cd:77:bb:a1: 10:0f:93:0f:70:b1:05:68:92:c4:14:47:d0:56:b5:8b:ed:6e: 88:93:9d:f9:2b:05:3f:9c:73:30:13:8d:88:ff:1e:2b:bf:72: 25:5f:7c:42:ee:0d:78:17:af:bf:a1:96:82:ee:b1:97:59:6c: 42:e3:e5:32:ad:10:64:ca:1a:fd:32:a3:e7:0e:c1:e5:39:2f: 42:d4:24:72:8a:77:3e:46:52:1c:65:cb:bb:17:97:37:16:8e: 01:e3:80:a6:13:66:4f:c3:1e:46:59:cd:a6:dd:3f:f6:1d:69: 7d:29:5e:5d:84:fc:cf:04:52:05:02:95:61:61:f0:29:d6:f4: 91:59:ec:1c:19:e7:16:d4:92:65:9d:39:bc:a1:84:26:b1:d0: 7e:48:7b:78:5d:43:30:88:be:5e:82:69:88:97:5a:84:36:a4: ed:ce:25:ed:8e:a3:63:1b:3d:a8:6e:80:70:bf:75:51:95:fe: 4c:68:0b:2d:4b:ce:d2:11:43:9b:1e:40:70:e2:43:fc:09:a3: 6a:d1:a8:da:ed:c5:0f:8a:04:45:a9:eb:b5:81:75:ae:67:cd: 92:cb:cd:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68il7wZxPtE9tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OWU3ODJmMDQtOGE3My00MDA2LTlkMTktYjljOTg1OGI3MjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik9zB4ar3/S+LLOlfANb8OfjbTYMBQB8BM6x J8MALLfTUCVkyQRGhJ3YoFk+NseI3MgJ135qhpCUfy8Lk4W4TdNytCdNdyq9sxun TZO1mAINXlEYYLkl3paSbr2TaiVmSX/gr2chfVTfhyM0p5bA2B7AT7xeGOh0iOMt 8bgXMVCHAry6jYZmRmi1CZYeKLhPSP8e59FeykK42TSJP5cDpKS5Z+meT0aW8RVE OQLgNFGuymcuMEtR5P+7XpOkBQgoUlR95Ytycp0Mn07XoXQhaZh3IFlGNrnJ5DEf NJvndYZAllLqIKrU6396BY8jx1CssFQYvdpnwantGuxtQuGUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmJ/0JU0j3cHAARbDMKBu0phswQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQ2YjRjNDMtMjM4OS0z ZmE4LTg1ZGQtZGJhOTgzZWRkOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvxfpmvCFEQuAVpQTlZTQdjgFZY5N2GaxhtABlLoMsmzXe7oRAPkw9w sQVoksQUR9BWtYvtboiTnfkrBT+cczATjYj/Hiu/ciVffELuDXgXr7+hloLusZdZ bELj5TKtEGTKGv0yo+cOweU5L0LUJHKKdz5GUhxly7sXlzcWjgHjgKYTZk/DHkZZ zabdP/YdaX0pXl2E/M8EUgUClWFh8CnW9JFZ7BwZ5xbUkmWdObyhhCax0H5Ie3hd QzCIvl6CaYiXWoQ2pO3OJe2Oo2MbPahugHC/dVGV/kxoCy1LztIRQ5seQHDiQ/wJ o2rRqNrtxQ+KBEWp67WBda5nzZLLzcI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:06 2025 by rpki-client