$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa File: d88b5200-310f-3d92-806a-4a865f0bb691.roa (raw, json) Hash identifier: kYz0WiYcAHTISbjRQcnmjcdue1gp20+fYkJk1zoD4fA= Subject key identifier: 3A:B8:0E:C8:0B:48:B1:89:17:04:90:2E:1F:49:17:4E:78:5F:35:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBCA6E648C222399682B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.199.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ca:6e:64:8c:22:23:99:68:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=bc306791-9891-4fd7-826e-ae3fc920e3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:42:27:94:17:17:16:5c:26:41:8c:5b:c4: 4f:a4:00:de:24:77:f3:9c:1f:b1:f3:74:f9:d1:97: 89:b8:3a:19:5d:b6:00:f1:39:9e:a8:2d:93:43:60: ac:ad:e5:13:48:6d:98:96:14:2a:df:98:8e:c6:39: 3e:84:e7:c2:65:ad:af:40:3e:f8:7b:37:7c:4f:cb: b5:12:78:f1:6d:c2:fe:2c:b8:54:24:91:98:97:6d: 3f:2e:80:1c:8b:b2:b0:d1:5d:49:46:45:e1:69:4a: 5c:62:a7:95:59:17:5a:ea:b7:14:cd:81:d4:d5:e6: fb:bb:d9:f6:6d:fc:1a:4e:06:28:c3:d2:b7:c5:3e: 47:2c:16:27:ce:2c:2d:10:55:74:cd:5d:c1:b3:26: 3d:69:39:19:ce:d2:41:cf:b0:52:2a:01:88:93:87: 44:70:44:77:8e:fc:1c:09:da:fb:77:e8:9e:9c:98: 8c:c1:1f:6a:75:9e:d4:03:c9:e4:e7:f4:67:dd:68: 98:32:65:b6:65:2d:e8:19:ec:40:a5:2d:71:6d:4b: ae:99:d3:a6:90:f0:97:42:1f:7b:fc:55:e1:5d:79: 42:47:95:70:90:db:b7:2e:90:80:93:05:c6:ea:0e: 17:61:d0:fe:7f:2e:07:02:e0:08:78:7a:9c:8b:89: 5e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:0E:C8:0B:48:B1:89:17:04:90:2E:1F:49:17:4E:78:5F:35:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d88b5200-310f-3d92-806a-4a865f0bb691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:90:55:a1:1c:06:ed:46:a4:6d:9d:4b:e8:c2:b3:6e:a5:5f: 35:e8:2a:ea:0f:5d:39:6b:41:84:5f:64:d7:f0:5e:04:fc:ec: 0b:34:ff:17:40:25:76:16:4d:d9:46:c1:d0:2b:df:19:37:33: b0:75:f9:66:c8:3a:3f:74:44:e5:01:c8:4a:c0:17:f4:fe:2d: 0a:4a:82:5a:0c:5b:45:11:ce:e8:cb:05:7a:df:49:cd:5a:7b: db:69:cd:47:19:1c:c4:ab:87:9a:d6:56:cf:0b:67:fe:39:c3: 48:ca:f2:10:eb:1a:72:c2:1f:82:a8:ac:42:4d:9d:1c:f4:2e: 27:ed:6c:17:01:dd:76:9a:b0:a2:24:db:3f:80:e8:4b:5d:5a: ac:23:d9:6a:d5:b9:8b:f3:fb:1f:b1:2a:e7:3c:fc:1f:8a:f8: 51:41:3c:d6:88:e3:e3:34:b5:4a:ec:02:3b:dd:39:3f:d5:51: 4a:77:4a:b7:26:00:e5:4d:e4:08:25:b7:40:e2:43:4f:2a:0d: 44:e7:01:3a:a1:fd:59:eb:bf:45:c9:c7:7e:bf:83:37:1b:c8: df:95:01:60:e0:bf:79:02:a1:81:8f:2e:6b:12:d3:67:c3:b8: 0b:7f:74:b4:88:20:66:4c:af:c5:3f:6d:62:5b:dc:56:7f:a3: 1a:73:05:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68puZIwiI5loK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YmMzMDY3OTEtOTg5MS00ZmQ3LTgyNmUtYWUzZmM5MjBlM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDhCJ5QXFxZcJkGMW8RPpADeJHfznB+x83T5 0ZeJuDoZXbYA8TmeqC2TQ2CsreUTSG2YlhQq35iOxjk+hOfCZa2vQD74ezd8T8u1 EnjxbcL+LLhUJJGYl20/LoAci7Kw0V1JRkXhaUpcYqeVWRda6rcUzYHU1eb7u9n2 bfwaTgYow9K3xT5HLBYnziwtEFV0zV3BsyY9aTkZztJBz7BSKgGIk4dEcER3jvwc Cdr7d+ienJiMwR9qdZ7UA8nk5/Rn3WiYMmW2ZS3oGexApS1xbUuumdOmkPCXQh97 /FXhXXlCR5VwkNu3LpCAkwXG6g4XYdD+fy4HAuAIeHqci4lerwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq4DsgLSLGJFwSQLh9JF054XzWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDg4YjUyMDAtMzEwZi0z ZDkyLTgwNmEtNGE4NjVmMGJiNjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGQVaEcBu1GpG2dS+jCs26lXzXoKuoPXTlrQYRfZNfwXgT87As0/xdA JXYWTdlGwdAr3xk3M7B1+WbIOj90ROUByErAF/T+LQpKgloMW0URzujLBXrfSc1a e9tpzUcZHMSrh5rWVs8LZ/45w0jK8hDrGnLCH4KorEJNnRz0LiftbBcB3XaasKIk 2z+A6EtdWqwj2WrVuYvz+x+xKuc8/B+K+FFBPNaI4+M0tUrsAjvdOT/VUUp3Srcm AOVN5Aglt0DiQ08qDUTnATqh/Vnrv0XJx36/gzcbyN+VAWDgv3kCoYGPLmsS02fD uAt/dLSIIGZMr8U/bWJb3FZ/oxpzBS4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:30 2025 by rpki-client