$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a860dee9-7943-330d-8ab5-895d793d80b7.roa File: a860dee9-7943-330d-8ab5-895d793d80b7.roa (raw, json) Hash identifier: 22h7Nh4q5XCI4RkFj60bpusE7cQ1I7MBcAg+0+xVvYo= Subject key identifier: 70:6F:07:D9:E0:FA:40:55:70:CF:3B:FC:94:75:2B:F6:0C:00:38:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBCD93F4D275A165980800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a860dee9-7943-330d-8ab5-895d793d80b7.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.199.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cd:93:f4:d2:75:a1:65:98:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=42afd51e-424e-4849-894c-920e3c6eba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:84:67:2b:46:a0:87:6f:17:29:b6:44:df: 8e:8c:fa:41:3e:b5:03:2f:02:dc:8a:3e:84:a3:aa: 72:73:8d:6c:4a:4f:54:30:24:b4:b9:a4:06:d2:7a: 79:b3:32:1c:8a:f9:37:72:22:0e:2b:07:11:a8:16: a0:7d:b5:5e:8b:c9:7b:0d:98:97:e4:67:78:75:46: 8d:85:e6:75:d8:69:3e:34:52:62:80:a7:fe:bc:f1: 05:9b:3d:02:08:fc:67:f9:9b:2c:97:fd:95:8d:77: e0:88:2f:5d:7f:29:4d:35:89:38:2b:09:64:d6:af: e8:3b:97:bc:08:b3:40:bc:2d:50:cb:ea:e0:79:ae: ba:af:38:9e:67:b3:e4:e2:38:76:86:f5:06:0f:57: 98:55:6f:0e:c2:58:cc:ec:28:ea:22:be:af:fb:a6: 2c:61:43:75:a6:33:65:75:76:d3:7a:f9:c6:48:5c: f7:04:a1:0e:39:f1:f0:0e:a9:31:14:ad:0e:19:db: d7:80:01:b1:1f:61:8f:40:72:19:a0:a6:74:13:7a: 34:59:76:0b:b4:f4:16:5f:26:5f:e2:30:ba:bc:95: 6b:d5:f8:30:7a:9f:fa:ab:f7:20:4a:c2:fa:fb:20: 45:8a:d4:cb:01:60:45:ec:04:27:d4:12:a5:10:46: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:07:D9:E0:FA:40:55:70:CF:3B:FC:94:75:2B:F6:0C:00:38:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a860dee9-7943-330d-8ab5-895d793d80b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:50:39:b4:cd:fe:2a:04:14:2f:9b:ad:db:4d:9a:db:ca:a5: eb:e8:56:56:ac:fc:f4:7a:93:4f:d6:41:98:ed:bd:93:c2:7a: a1:ab:ad:27:5a:2b:7d:16:03:41:b6:17:e0:92:9d:da:b9:32: 2d:4a:dc:47:bc:42:65:76:40:a8:5e:50:cf:d8:ce:7e:a0:db: 28:90:ae:d5:b0:88:29:3a:7a:58:75:ba:8b:9c:d0:db:e2:23: 0a:c7:19:aa:74:af:2f:77:83:a7:fa:a1:1b:67:db:0a:f5:44: ed:4e:ce:f7:f9:e8:03:d8:bc:1a:05:51:1a:80:8b:96:26:0a: b9:f0:84:c9:d5:94:1f:c2:3c:68:86:e1:d3:a6:e6:cb:91:ab: 36:9a:76:a0:6d:0a:55:b3:35:f2:ec:f9:c0:73:49:38:c3:4a: f2:4a:89:1d:6d:d8:ab:20:8b:da:0b:88:57:c7:63:3a:9d:06: c4:50:2b:0b:f1:4b:0d:c9:f9:25:1b:a5:05:a0:d3:42:db:cb: 7c:34:3d:1b:a8:2d:07:0c:ae:d1:2a:bb:c7:58:0a:01:bd:ea: 31:23:ad:1c:de:7d:04:05:19:6a:bc:38:c7:03:71:13:7c:cb: d5:a9:14:35:cc:bc:ee:cb:9a:82:48:6b:98:93:59:79:12:fd: 01:38:6a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/682T9NJ1oWWYCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NDJhZmQ1MWUtNDI0ZS00ODQ5LTg5NGMtOTIwZTNjNmViYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8mEZytGoIdvFym2RN+OjPpBPrUDLwLcij6E o6pyc41sSk9UMCS0uaQG0np5szIcivk3ciIOKwcRqBagfbVei8l7DZiX5Gd4dUaN heZ12Gk+NFJigKf+vPEFmz0CCPxn+Zssl/2VjXfgiC9dfylNNYk4Kwlk1q/oO5e8 CLNAvC1Qy+rgea66rzieZ7Pk4jh2hvUGD1eYVW8OwljM7CjqIr6v+6YsYUN1pjNl dXbTevnGSFz3BKEOOfHwDqkxFK0OGdvXgAGxH2GPQHIZoKZ0E3o0WXYLtPQWXyZf 4jC6vJVr1fgwep/6q/cgSsL6+yBFitTLAWBF7AQn1BKlEEaeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBvB9ng+kBVcM87/JR1K/YMADgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTg2MGRlZTktNzk0My0z MzBkLThhYjUtODk1ZDc5M2Q4MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5QObTN/ioEFC+brdtNmtvKpevoVlas/PR6k0/WQZjtvZPCeqGrrSda K30WA0G2F+CSndq5Mi1K3Ee8QmV2QKheUM/Yzn6g2yiQrtWwiCk6elh1uouc0Nvi IwrHGap0ry93g6f6oRtn2wr1RO1Ozvf56APYvBoFURqAi5YmCrnwhMnVlB/CPGiG 4dOm5suRqzaadqBtClWzNfLs+cBzSTjDSvJKiR1t2Ksgi9oLiFfHYzqdBsRQKwvx Sw3J+SUbpQWg00Lby3w0PRuoLQcMrtEqu8dYCgG96jEjrRzefQQFGWq8OMcDcRN8 y9WpFDXMvO7LmoJIa5iTWXkS/QE4al0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:48:09 2025 by rpki-client