$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa File: afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa (raw, json) Hash identifier: QlcSHTjcVKbq1rdAY3LSjSI4PZRn3rw211y98nnc8Kw= Subject key identifier: 17:1D:EF:A7:E8:09:D3:D8:9D:02:04:00:D7:47:53:00:06:93:BD:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB1B338DDB1F92F1AFF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b1:b3:38:dd:b1:f9:2f:1a:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=1d9132bc-2cd9-442b-8460-561fe44e8677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:b1:dc:19:a8:88:df:0c:88:8c:ea:27:95: e2:eb:ab:6a:b6:0c:3b:98:f9:4c:17:a1:57:43:91: b7:14:a4:81:72:84:34:00:a9:14:4f:42:90:6c:f0: ae:13:0c:87:9c:7d:f9:62:a3:bb:ea:c9:85:f3:33: 43:c9:5d:fa:84:93:8b:6a:a5:de:c4:0c:80:76:e2: 19:a4:89:7b:b8:32:46:9a:96:2f:5d:36:90:fd:52: 11:1e:57:0f:04:63:41:4f:c7:b8:26:b8:e9:aa:ed: ce:50:79:3f:de:54:2c:19:87:58:fa:9d:a9:a1:72: 41:30:2f:dc:d1:99:00:a7:fc:04:9b:78:77:3c:54: 25:8a:7a:0d:e7:d2:e2:56:7e:6c:84:3a:7f:b5:eb: b9:3b:58:a8:f5:0c:c0:6a:bc:74:ff:02:b3:07:d9: f3:51:c8:52:52:ae:e6:6c:15:21:2a:72:d1:94:42: f1:69:cf:ea:7c:33:00:27:22:86:fb:ad:43:21:1d: 5f:34:3e:ac:54:ff:dd:ec:38:96:48:f3:f9:2f:0f: a4:16:67:b4:a1:ef:97:3b:28:b2:0b:02:f2:74:ab: 83:b3:2f:74:16:f7:63:1b:ff:08:ff:9d:4a:0c:f0: cc:81:51:94:a9:c2:1a:34:8b:c7:19:ca:7f:37:6e: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:EF:A7:E8:09:D3:D8:9D:02:04:00:D7:47:53:00:06:93:BD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1f:c9:6b:8d:ad:ad:24:ed:5f:0b:1e:0a:24:e6:f1:be:2f: e4:11:88:18:0c:93:8c:52:a7:97:ff:9b:58:98:fa:5b:19:92: 71:3d:78:2c:c6:fe:5f:54:08:a2:61:1f:0a:b2:55:f9:5e:0c: fa:30:12:8b:32:96:13:35:74:a7:16:6e:5b:1f:84:55:95:b1: be:60:85:03:de:3d:18:5a:88:2e:c5:77:58:71:a8:71:e6:73: 6b:da:c4:b8:ee:35:08:8e:94:65:4b:59:a0:9b:3a:8c:eb:d2: a0:4c:dd:33:53:36:1f:e7:68:ce:f7:57:cc:21:69:ca:da:82: eb:14:81:0e:38:3c:6a:1b:67:06:cc:46:a6:aa:56:4f:62:27: 2e:fe:24:3b:bc:ba:71:b9:a9:8f:d3:85:05:c3:a8:b4:c0:d7: cb:55:59:c3:77:70:0a:ae:ae:1d:a0:a5:67:05:8d:ec:24:ac: b3:9b:90:70:08:9e:01:69:99:bb:90:04:b8:ae:33:1b:83:35: b0:55:c0:04:b9:ff:8c:5f:c3:53:5c:a6:c7:04:7d:01:96:aa: 28:79:ff:14:0f:98:c2:df:59:ee:58:a0:ed:1e:cd:b3:08:21: da:b6:cf:5e:a6:9d:e7:52:b7:50:bf:e4:f0:be:2c:00:00:55: ef:97:d4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67GzON2x+S8a/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MWQ5MTMyYmMtMmNkOS00NDJiLTg0NjAtNTYxZmU0NGU4Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp6x3BmoiN8MiIzqJ5Xi66tqtgw7mPlMF6FX Q5G3FKSBcoQ0AKkUT0KQbPCuEwyHnH35YqO76smF8zNDyV36hJOLaqXexAyAduIZ pIl7uDJGmpYvXTaQ/VIRHlcPBGNBT8e4Jrjpqu3OUHk/3lQsGYdY+p2poXJBMC/c 0ZkAp/wEm3h3PFQlinoN59LiVn5shDp/teu5O1io9QzAarx0/wKzB9nzUchSUq7m bBUhKnLRlELxac/qfDMAJyKG+61DIR1fND6sVP/d7DiWSPP5Lw+kFme0oe+XOyiy CwLydKuDsy90FvdjG/8I/51KDPDMgVGUqcIaNIvHGcp/N24gSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcd76foCdPYnQIEANdHUwAGk71YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZkYTJiNTMtYjFlZS0z ZjA3LWJlNGQtNTNmM2Y4N2Y2YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQfyWuNra0k7V8LHgok5vG+L+QRiBgMk4xSp5f/m1iY+lsZknE9eCzG /l9UCKJhHwqyVfleDPowEosylhM1dKcWblsfhFWVsb5ghQPePRhaiC7Fd1hxqHHm c2vaxLjuNQiOlGVLWaCbOozr0qBM3TNTNh/naM73V8whacragusUgQ44PGobZwbM RqaqVk9iJy7+JDu8unG5qY/ThQXDqLTA18tVWcN3cAqurh2gpWcFjewkrLObkHAI ngFpmbuQBLiuMxuDNbBVwAS5/4xfw1NcpscEfQGWqih5/xQPmMLfWe5YoO0ezbMI Idq2z16mnedSt1C/5PC+LAAAVe+X1OI= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:00 2025 by rpki-client