$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a633a52b-4722-3a17-b72e-53642c0cf1dd.roa File: a633a52b-4722-3a17-b72e-53642c0cf1dd.roa (raw, json) Hash identifier: UpplcxPeaT0JlhMzRdNV1wU/CXglo1bGTCMqUgf8NhI= Subject key identifier: 98:42:10:B2:A4:E4:83:D0:D8:50:A6:21:DB:45:A5:7E:A6:0C:B3:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBAC74F8C71A79EA6A1980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a633a52b-4722-3a17-b72e-53642c0cf1dd.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.196.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ac:74:f8:c7:1a:79:ea:6a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=701adcc7-f6e2-4cae-9e9c-ad2c6ffc51e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:3a:ad:d2:7e:24:f1:65:3f:df:89:32:c7: cb:6c:b0:6b:a9:f2:b3:e7:3a:b5:d4:94:41:68:8f: 30:52:26:6f:6e:5d:b9:86:1b:a5:e8:4d:43:f6:d2: fd:af:f0:c0:63:a9:f3:42:b0:3e:5b:b7:20:3b:53: 1e:93:f6:bb:b5:b3:ac:89:61:8f:e7:3e:8b:ed:44: 0f:f9:60:54:06:2e:d3:27:05:29:22:4a:32:0d:98: c4:3c:9e:2f:1e:96:43:26:da:26:31:0e:fe:b1:06: 63:41:68:76:64:67:25:39:f2:16:1c:5c:95:36:fd: 6d:87:46:c3:9d:46:1f:a2:88:5a:e0:36:42:14:38: 27:16:a7:11:1e:fa:dd:51:a8:3c:ea:d4:66:86:7b: 75:35:fe:57:00:8c:2a:64:ad:66:19:c7:41:0a:d3: e2:7c:f5:6b:be:5a:ee:0a:9d:e4:46:af:ef:d2:f1: 73:b8:cb:47:1f:68:4d:52:74:08:3b:93:80:7c:ec: fd:27:f6:11:a6:dc:1e:89:c1:27:52:2d:f2:0b:65: 2a:ee:22:74:80:d5:f3:2e:6d:9a:46:d7:91:da:05: bd:05:db:b7:79:84:10:bc:dc:86:a7:64:2a:0b:ba: 94:0a:5f:86:d8:5f:3d:21:b0:d5:4a:8f:28:40:32: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:10:B2:A4:E4:83:D0:D8:50:A6:21:DB:45:A5:7E:A6:0C:B3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a633a52b-4722-3a17-b72e-53642c0cf1dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:12:73:e9:14:ac:2e:15:88:29:0c:d2:11:47:03:bf:84:8a: 77:31:ed:c6:f0:34:88:6e:9d:fb:32:8c:fd:3c:54:77:b4:fa: 55:72:d2:a6:52:0c:ab:68:65:d6:29:b5:83:73:f5:9c:8c:7e: 16:9d:4d:5d:10:41:d2:77:1c:f5:b7:bd:9b:17:c0:12:6e:d0: 98:a0:1a:6d:d1:6d:62:65:0c:de:7f:78:3c:2c:12:cd:23:87: 07:03:4d:72:c5:59:31:7a:6f:e1:e8:02:9c:dd:29:2b:85:e9: 69:0d:4c:00:dc:60:79:da:1c:46:96:9b:b9:3a:64:c5:cd:b2: 09:58:10:72:47:64:5e:c2:5d:51:79:2f:31:dd:b8:92:d3:ca: d6:51:02:6f:be:77:0b:bc:b8:11:75:81:2a:ec:2a:3d:37:1d: 12:6a:1e:b0:8b:d9:90:f8:3a:46:f0:46:54:21:8e:ea:47:30: 9d:23:6e:87:32:92:5b:04:68:e4:2d:47:4d:99:bc:87:ef:c1: 5b:7a:7e:76:fa:f5:d9:80:9d:af:49:c9:9e:07:47:ce:da:fc: b3:8f:bb:8c:5d:b2:28:0b:c0:56:cf:58:39:a8:b9:e2:1d:e3: df:8d:7a:8b:92:b9:d0:88:fc:60:16:12:3a:ae:9b:43:43:85: 07:f6:60:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66x0+McaeepqGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NzAxYWRjYzctZjZlMi00Y2FlLTllOWMtYWQyYzZmZmM1MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRc6rdJ+JPFlP9+JMsfLbLBrqfKz5zq11JRB aI8wUiZvbl25hhul6E1D9tL9r/DAY6nzQrA+W7cgO1Mek/a7tbOsiWGP5z6L7UQP +WBUBi7TJwUpIkoyDZjEPJ4vHpZDJtomMQ7+sQZjQWh2ZGclOfIWHFyVNv1th0bD nUYfooha4DZCFDgnFqcRHvrdUag86tRmhnt1Nf5XAIwqZK1mGcdBCtPifPVrvlru Cp3kRq/v0vFzuMtHH2hNUnQIO5OAfOz9J/YRptweicEnUi3yC2Uq7iJ0gNXzLm2a RteR2gW9Bdu3eYQQvNyGp2QqC7qUCl+G2F89IbDVSo8oQDKGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhCELKk5IPQ2FCmIdtFpX6mDLOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTYzM2E1MmItNDcyMi0z YTE3LWI3MmUtNTM2NDJjMGNmMWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgSc+kUrC4ViCkM0hFHA7+Eincx7cbwNIhunfsyjP08VHe0+lVy0qZS DKtoZdYptYNz9ZyMfhadTV0QQdJ3HPW3vZsXwBJu0JigGm3RbWJlDN5/eDwsEs0j hwcDTXLFWTF6b+HoApzdKSuF6WkNTADcYHnaHEaWm7k6ZMXNsglYEHJHZF7CXVF5 LzHduJLTytZRAm++dwu8uBF1gSrsKj03HRJqHrCL2ZD4OkbwRlQhjupHMJ0jbocy klsEaOQtR02ZvIfvwVt6fnb69dmAna9JyZ4HR87a/LOPu4xdsigLwFbPWDmoueId 49+NeouSudCI/GAWEjqum0NDhQf2YPU= -----END CERTIFICATE-----Generated at Fri Apr 4 21:48:06 2025 by rpki-client