$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d428fadb-5676-3713-baae-41f3b294a701.roa File: d428fadb-5676-3713-baae-41f3b294a701.roa (raw, json) Hash identifier: XXUnLVtOAY/oJfglHQp3SDpg/sBY3R5q4gQJ9YGsPo0= Subject key identifier: AD:25:62:81:98:63:06:47:77:02:09:30:11:AB:FF:47:E2:92:EA:C5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD0FCBBC6E8DDE3001800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d428fadb-5676-3713-baae-41f3b294a701.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d0:fc:bb:c6:e8:dd:e3:00:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=e53f326c-d622-42cf-831e-f4b060d8bac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:91:62:e9:f0:d1:7c:bc:3a:6e:20:de:90: 7a:97:68:ab:fd:29:80:d7:02:c1:44:0e:0d:72:9a: 46:5a:9d:01:c0:94:94:1e:86:5b:b9:9a:ce:bc:03: 87:b7:74:30:d3:47:f7:ac:f5:9a:8b:d1:6f:a2:ea: e5:d6:e2:1a:b1:79:71:25:af:e8:4d:24:0e:2b:e5: c4:90:51:c0:c7:5e:d4:7a:30:f1:4a:aa:2e:9e:a5: 01:2a:68:38:31:8c:c5:67:f3:cf:b9:9f:6c:46:fa: 53:47:ac:6a:d0:76:d9:e0:e5:b6:34:db:1f:7d:20: e8:ce:e4:4f:3d:50:37:eb:8e:c4:b4:31:2e:72:4e: 7b:ca:39:1a:5d:53:46:ea:bf:71:89:3b:cf:b2:85: 57:d6:bf:ca:c6:1e:a7:86:b4:0b:1a:f2:fa:3a:71: 71:e8:9e:b2:7c:7e:2c:a8:b3:32:1d:6c:88:d3:89: dd:21:90:95:c0:03:3d:d0:a7:78:8a:2d:2b:56:a0: b2:9a:8f:b7:ac:f2:21:a7:20:2d:ac:b7:88:48:ab: 24:a5:79:05:0c:64:2b:fe:a1:ea:92:1c:37:35:09: f5:2b:45:53:0d:60:98:a3:e4:41:ed:f5:27:0a:b4: 2f:17:6e:d8:20:a0:07:d1:2d:33:ee:47:09:1e:35: 4d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:25:62:81:98:63:06:47:77:02:09:30:11:AB:FF:47:E2:92:EA:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d428fadb-5676-3713-baae-41f3b294a701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3b:e6:87:fa:cb:ae:67:80:92:f9:aa:ff:bd:fb:67:f9:35: cb:ff:e4:f0:53:20:c5:20:9d:aa:b4:79:b9:f6:88:11:83:1d: 0e:97:2c:ff:2d:30:ce:04:45:60:f0:b1:d9:17:99:91:c6:3d: 10:34:16:59:ad:3b:3b:1b:6e:f7:4f:4b:73:2d:cb:9c:77:1c: 75:33:8f:ec:08:ec:0e:97:c9:83:39:a6:b3:05:fe:3c:5e:e1: 07:05:24:3c:8d:c9:19:9b:f0:d3:51:e0:4a:de:41:9c:d2:20: 48:47:28:3f:2e:fe:0d:d5:9e:90:49:65:d6:f4:65:7d:75:eb: bf:a2:2d:de:50:90:85:a1:59:26:ed:1a:ce:cc:d4:01:0b:8a: 98:98:da:41:71:bf:a7:77:5b:6a:47:d1:ed:42:6f:9b:47:29: 6c:a3:2c:27:ac:91:ef:ff:99:d9:41:c8:e2:6a:44:03:53:2b: a7:64:bf:73:90:66:04:7c:94:91:54:62:e6:0e:d9:2b:37:65: d2:83:80:c7:05:b4:d3:85:75:3b:be:0a:72:02:15:45:ec:6d: 47:81:00:e4:ed:01:dd:38:b2:db:09:85:73:ef:4e:0a:f8:0c: 74:4f:f7:6c:6e:30:54:6b:67:e3:98:31:cc:1b:7e:f6:8d:4a: a0:1b:7c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69D8u8bo3eMAGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTUzZjMyNmMtZDYyMi00MmNmLTgzMWUtZjRiMDYwZDhiYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCCRYunw0Xy8Om4g3pB6l2ir/SmA1wLBRA4N cppGWp0BwJSUHoZbuZrOvAOHt3Qw00f3rPWai9Fvourl1uIasXlxJa/oTSQOK+XE kFHAx17UejDxSqounqUBKmg4MYzFZ/PPuZ9sRvpTR6xq0HbZ4OW2NNsffSDozuRP PVA3647EtDEuck57yjkaXVNG6r9xiTvPsoVX1r/Kxh6nhrQLGvL6OnFx6J6yfH4s qLMyHWyI04ndIZCVwAM90Kd4ii0rVqCymo+3rPIhpyAtrLeISKskpXkFDGQr/qHq khw3NQn1K0VTDWCYo+RB7fUnCrQvF27YIKAH0S0z7kcJHjVNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0lYoGYYwZHdwIJMBGr/0fikurFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQyOGZhZGItNTY3Ni0z NzEzLWJhYWUtNDFmM2IyOTRhNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE75of6y65ngJL5qv+9+2f5Ncv/5PBTIMUgnaq0ebn2iBGDHQ6XLP8t MM4ERWDwsdkXmZHGPRA0FlmtOzsbbvdPS3Mty5x3HHUzj+wI7A6XyYM5prMF/jxe 4QcFJDyNyRmb8NNR4EreQZzSIEhHKD8u/g3VnpBJZdb0ZX1167+iLd5QkIWhWSbt Gs7M1AELipiY2kFxv6d3W2pH0e1Cb5tHKWyjLCeske//mdlByOJqRANTK6dkv3OQ ZgR8lJFUYuYO2Ss3ZdKDgMcFtNOFdTu+CnICFUXsbUeBAOTtAd04stsJhXPvTgr4 DHRP92xuMFRrZ+OYMcwbfvaNSqAbfLU= -----END CERTIFICATE-----Generated at Fri Apr 4 18:09:53 2025 by rpki-client