$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80b2b36-3fcc-3400-b4ea-259da102607b.roa File: c80b2b36-3fcc-3400-b4ea-259da102607b.roa (raw, json) Hash identifier: qnj34aDqyy9pJhr1yjHXX4/spwf+t1WlZCgvOs0Hg2Q= Subject key identifier: 15:D8:A1:28:8D:26:C4:24:35:CC:8C:EA:49:7D:C3:A8:35:DB:73:C0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD35E9CD1270A894DD700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80b2b36-3fcc-3400-b4ea-259da102607b.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d3:5e:9c:d1:27:0a:89:4d:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=3af9038a-7cf3-4c6f-9ac5-81c981a8c742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:58:32:ff:3d:a8:f4:db:92:76:ca:09:fb: 3e:75:c2:5a:ce:1b:8e:94:06:c0:b4:54:43:35:76: 78:e6:cd:18:2d:b0:8e:91:5f:b9:f1:41:13:47:3c: 52:66:b6:ed:00:3d:e3:4d:02:e8:e5:20:05:b4:9a: 78:da:b4:a1:52:3e:2c:f1:e0:94:63:14:4a:6e:b6: a8:53:53:d1:f0:29:31:28:f3:19:95:3a:29:ec:46: 8f:50:0e:db:98:2b:6a:d9:c0:67:62:c1:8d:a0:30: c2:ef:ba:b4:14:cc:92:98:76:e1:38:71:82:bc:46: cb:35:00:87:01:06:fa:92:d7:e4:12:d0:d4:48:66: d2:a2:d6:59:32:72:b2:99:ae:b0:dd:78:e4:28:57: ae:75:4e:c3:d5:93:eb:3e:7d:3d:72:6d:80:7d:6f: 2c:b5:a0:fa:f7:85:bf:84:32:f2:87:4c:55:11:7b: 71:36:a6:14:14:c6:5a:0d:35:e0:d5:d8:fe:e4:18: 41:24:95:30:0a:f6:f9:25:da:0a:cc:ce:14:f1:a1: 71:84:4a:8e:ea:bd:ef:fa:af:95:f1:4d:90:bf:02: 32:43:2f:45:11:f8:6f:08:c9:77:b7:79:6e:26:7c: ad:35:85:c0:ab:03:9d:2d:66:cd:3a:a6:cd:df:e3: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D8:A1:28:8D:26:C4:24:35:CC:8C:EA:49:7D:C3:A8:35:DB:73:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c80b2b36-3fcc-3400-b4ea-259da102607b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:20:05:66:5c:75:3d:e0:03:7a:23:8c:89:e4:36:6a:4a:f3: 44:be:2d:56:e6:47:43:56:d3:33:ae:e7:6e:d6:71:d7:72:6f: 72:ae:5b:85:96:79:58:36:a6:46:b9:c9:f7:aa:82:11:69:f5: 25:87:30:98:55:88:11:99:b6:30:0d:2b:47:c9:f6:b0:15:6c: 1a:c5:69:dc:a7:61:41:89:24:3b:6f:b9:e3:0d:07:69:41:72: 12:1b:e4:39:b6:0b:91:80:6b:57:52:b4:46:2f:ee:f5:1d:17: 43:ea:d1:3c:e9:c2:b1:12:81:89:57:43:f7:a4:97:f0:f1:3f: ff:a4:45:32:c3:7f:f1:5d:6c:7a:bc:ff:46:3a:b8:4a:98:ad: da:6d:ab:4a:f8:e7:f6:f9:71:eb:5a:ae:ed:83:9f:b2:20:e9: 2c:36:7b:bd:b7:46:4e:e5:ca:5f:f2:6e:cd:57:b6:79:0f:12: f8:01:6e:7f:70:9d:92:a5:fb:3a:8a:40:5a:b3:9c:84:b9:ff: 5b:4b:64:b4:4f:41:0d:17:8a:f6:51:ce:0d:94:47:73:ec:50: 8b:b3:8d:8e:33:5d:95:29:d4:c0:64:d8:90:83:a3:55:4d:0f: 8f:ef:1f:e1:b5:9a:d1:9a:57:5d:17:7a:86:5d:c8:23:66:2b: 28:c3:e1:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69NenNEnColN1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk M2FmOTAzOGEtN2NmMy00YzZmLTlhYzUtODFjOTgxYThjNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwJYMv89qPTbknbKCfs+dcJazhuOlAbAtFRD NXZ45s0YLbCOkV+58UETRzxSZrbtAD3jTQLo5SAFtJp42rShUj4s8eCUYxRKbrao U1PR8CkxKPMZlTop7EaPUA7bmCtq2cBnYsGNoDDC77q0FMySmHbhOHGCvEbLNQCH AQb6ktfkEtDUSGbSotZZMnKyma6w3XjkKFeudU7D1ZPrPn09cm2AfW8staD694W/ hDLyh0xVEXtxNqYUFMZaDTXg1dj+5BhBJJUwCvb5JdoKzM4U8aFxhEqO6r3v+q+V 8U2QvwIyQy9FEfhvCMl3t3luJnytNYXAqwOdLWbNOqbN3+OYbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXYoSiNJsQkNcyM6kl9w6g123PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgwYjJiMzYtM2ZjYy0z NDAwLWI0ZWEtMjU5ZGExMDI2MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEgBWZcdT3gA3ojjInkNmpK80S+LVbmR0NW0zOu527Wcddyb3KuW4WW eVg2pka5yfeqghFp9SWHMJhViBGZtjANK0fJ9rAVbBrFadynYUGJJDtvueMNB2lB chIb5Dm2C5GAa1dStEYv7vUdF0Pq0TzpwrESgYlXQ/ekl/DxP/+kRTLDf/FdbHq8 /0Y6uEqYrdptq0r45/b5cetaru2Dn7Ig6Sw2e723Rk7lyl/ybs1XtnkPEvgBbn9w nZKl+zqKQFqznIS5/1tLZLRPQQ0XivZRzg2UR3PsUIuzjY4zXZUp1MBk2JCDo1VN D4/vH+G1mtGaV10XeoZdyCNmKyjD4ck= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:13 2025 by rpki-client