$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb5389c3-d78b-3f54-9f7b-24382d12798e.roa File: bb5389c3-d78b-3f54-9f7b-24382d12798e.roa (raw, json) Hash identifier: Zbmsy3a6sATg9xK4qNnjq2Hbb5M76TmNVijkB6ySFq8= Subject key identifier: 4D:21:6A:B1:A5:2C:EB:12:B5:72:E8:03:20:7D:2A:0D:C0:FA:34:0C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBBB471F4CF39DF1FD3F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb5389c3-d78b-3f54-9f7b-24382d12798e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.196.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bb:47:1f:4c:f3:9d:f1:fd:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=8e6ef88a-3ff5-4114-a5af-e44e0ca028cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:8d:b4:f9:e0:e2:bd:b1:ea:cf:a0:3e:3c: e6:93:32:84:94:80:b9:4f:1a:3c:6e:0f:86:4e:a0: 49:77:cd:bd:5a:96:b3:e5:26:4d:75:47:f8:81:7c: 78:4c:34:62:24:95:4b:a3:64:00:cd:55:34:52:fe: e4:d6:01:fe:39:4c:20:b5:02:4e:54:1d:17:57:ca: 19:63:4a:dd:cd:e5:b0:d2:11:7d:b2:59:84:4a:61: 4d:93:25:88:c6:cb:0a:d8:6c:fc:f2:52:f7:83:b4: d1:be:59:12:36:83:55:8f:dd:85:10:b7:80:e2:a5: 6a:5a:ad:75:8d:89:0f:62:7c:b9:3d:3a:5b:30:71: f3:d8:4b:26:97:17:d5:f5:e6:a0:16:7d:8a:b1:cb: f3:b2:1d:fc:84:a1:0c:57:4f:75:34:15:83:27:04: f9:8c:a6:3a:d5:30:5c:d1:cc:93:c6:52:ab:fa:29: 93:57:1d:06:d0:11:00:24:f7:bf:aa:be:d1:22:b5: be:ba:c9:43:b8:a0:a2:fe:af:c2:d8:4c:2d:8d:20: bd:ec:b9:6e:dc:9c:f4:24:9a:00:94:be:6e:26:72: 9a:b4:44:e9:c0:a1:ea:03:a6:53:1d:78:33:72:d8: 09:84:e5:56:02:55:ad:f6:10:ea:5a:67:e0:30:f5: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:21:6A:B1:A5:2C:EB:12:B5:72:E8:03:20:7D:2A:0D:C0:FA:34:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb5389c3-d78b-3f54-9f7b-24382d12798e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:2c:89:c5:80:2d:b4:90:8d:12:e9:47:96:8b:3f:12:c5:87: 9c:12:f3:83:9b:0b:d1:72:38:14:b8:cb:14:be:9a:9a:c3:d6: 60:7c:55:0d:de:8c:14:db:19:78:fa:fd:68:72:90:19:fc:64: b8:b6:36:e4:04:65:3e:66:bc:b4:1b:24:90:91:99:d4:c3:f7: 50:75:e4:fa:fa:ba:c4:2d:90:a7:64:0f:db:4c:25:ff:0a:88: 20:05:2d:f8:67:1d:a5:ed:f0:4a:93:b3:f6:38:3f:de:cd:f7: 1e:ea:49:00:fd:2f:0a:6e:4b:c5:67:de:92:f9:2a:bb:1b:96: 8d:fd:a6:44:46:e1:f7:8c:42:5f:c0:23:d9:f0:50:88:fa:16: cc:d8:06:8b:ef:5a:14:fa:52:69:e2:c2:d4:46:37:18:70:43: d9:20:c2:4f:07:0e:4e:b2:98:75:90:43:53:d4:f5:57:6e:4b: a9:01:c7:c0:64:c4:b1:f8:dd:3c:cf:db:f8:46:86:ab:4e:0e: b2:9b:9c:53:45:c0:7b:12:35:13:3b:24:c4:4c:d4:6a:12:18: 9b:a4:b5:64:34:9f:08:83:39:ae:ac:96:d6:65:ca:3a:ab:fb: df:94:2b:b6:b5:23:f1:55:0e:e8:00:0a:51:65:95:59:26:67: ec:12:e8:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67tHH0zznfH9PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OGU2ZWY4OGEtM2ZmNS00MTE0LWE1YWYtZTQ0ZTBjYTAyOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6WNtPng4r2x6s+gPjzmkzKElIC5Txo8bg+G TqBJd829Wpaz5SZNdUf4gXx4TDRiJJVLo2QAzVU0Uv7k1gH+OUwgtQJOVB0XV8oZ Y0rdzeWw0hF9slmESmFNkyWIxssK2Gz88lL3g7TRvlkSNoNVj92FELeA4qVqWq11 jYkPYny5PTpbMHHz2EsmlxfV9eagFn2Kscvzsh38hKEMV091NBWDJwT5jKY61TBc 0cyTxlKr+imTVx0G0BEAJPe/qr7RIrW+uslDuKCi/q/C2EwtjSC97Llu3Jz0JJoA lL5uJnKatETpwKHqA6ZTHXgzctgJhOVWAlWt9hDqWmfgMPWvjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0harGlLOsStXLoAyB9Kg3A+jQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmI1Mzg5YzMtZDc4Yi0z ZjU0LTlmN2ItMjQzODJkMTI3OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUsicWALbSQjRLpR5aLPxLFh5wS84ObC9FyOBS4yxS+mprD1mB8VQ3e jBTbGXj6/WhykBn8ZLi2NuQEZT5mvLQbJJCRmdTD91B15Pr6usQtkKdkD9tMJf8K iCAFLfhnHaXt8EqTs/Y4P97N9x7qSQD9LwpuS8Vn3pL5Krsblo39pkRG4feMQl/A I9nwUIj6FszYBovvWhT6UmniwtRGNxhwQ9kgwk8HDk6ymHWQQ1PU9VduS6kBx8Bk xLH43TzP2/hGhqtODrKbnFNFwHsSNRM7JMRM1GoSGJuktWQ0nwiDOa6sltZlyjqr +9+UK7a1I/FVDugAClFllVkmZ+wS6F4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:01 2025 by rpki-client