$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa File: db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa (raw, json) Hash identifier: ZkbCg+zV+MvAzl0V59qAXHtfFbVwQ8wVybnsFIsvf3w= Subject key identifier: 47:C1:BE:04:26:96:36:64:9D:74:D3:C8:52:9B:B4:EC:BE:B4:AC:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBBA214E8C5ADC243B3300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.197.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ba:21:4e:8c:5a:dc:24:3b:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=383996fc-9f22-43e2-8e1a-fb1f0d487c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:4e:ab:3c:29:9e:35:bd:14:34:22:85:b4: 42:d9:3d:4c:22:61:7a:77:5e:79:4d:af:51:28:80: 21:51:4e:15:fe:3a:c5:88:07:7a:44:5c:05:79:23: f9:9e:68:62:b7:62:79:4d:c0:03:81:8e:ff:b6:c0: 83:95:85:25:d5:df:b5:05:bd:6f:f1:98:b6:9a:19: 19:a1:c2:51:bc:e2:d8:b1:59:76:f1:9e:da:ab:03: 55:1e:2b:81:2e:b0:a3:c1:57:06:34:29:70:ec:36: 7a:0e:c6:cf:dc:f9:bf:e6:f0:da:3f:55:97:fe:a5: 39:c7:49:9d:74:35:8f:24:a6:e7:21:06:d6:31:4b: 27:d3:40:fd:c9:b5:55:de:2c:01:b8:d6:4f:2f:36: ec:78:92:db:d6:ff:0d:d9:2d:02:d3:55:bc:5b:18: bb:47:6b:5c:bf:af:bc:5a:59:91:2f:91:1c:91:9f: f2:3d:bf:e2:ed:1b:f5:17:66:11:88:ae:bd:b5:6c: a1:b1:f1:d3:cd:80:4a:90:8c:20:f2:d0:5f:65:9f: 19:19:9a:91:9d:7e:32:f7:4e:2c:40:32:32:a7:b1: 79:96:91:61:b1:ea:9f:eb:ac:3a:72:91:60:60:83: fa:e9:f9:09:af:ca:c4:43:b1:58:24:85:60:ed:17: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C1:BE:04:26:96:36:64:9D:74:D3:C8:52:9B:B4:EC:BE:B4:AC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db28a8bf-78af-35aa-af7a-8d4cbc3189d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:44:b5:b0:45:43:ee:4f:22:a1:66:0e:4b:b1:52:fc:84:30: 45:34:a3:64:e8:fb:65:c3:c2:f7:dd:09:6b:cd:d5:01:0f:33: f8:20:ba:bf:ea:83:2d:84:7b:c1:d0:15:62:f9:72:26:d1:26: c0:26:4d:36:ca:a8:37:48:ec:84:e5:2f:e3:37:ac:ea:25:0c: f4:ec:74:0f:c7:01:ee:98:be:ae:81:0d:43:cd:aa:f6:6c:c7: 12:2f:49:6c:f0:74:12:6d:29:cf:48:49:6a:a6:3e:f2:81:34: 54:9d:3a:55:37:55:db:38:15:f4:b7:10:48:d8:a5:17:72:94: ac:0e:14:5a:cd:80:e9:1b:70:e9:5f:9f:e4:27:cc:27:b8:f2: 94:83:08:ac:f9:24:ff:48:e6:b8:82:86:ed:01:54:d3:a9:6b: d6:0b:26:b5:33:5c:17:f0:a4:d2:ee:98:d6:f8:ab:92:45:b5: 3e:a4:f5:07:97:41:f9:06:ce:7c:5c:2e:0f:b4:d0:76:0c:25: fa:79:31:4f:ff:af:80:59:7d:a9:e8:68:c4:a4:59:09:2f:d9: 0c:b6:52:c7:95:68:c0:72:3e:93:89:fb:48:15:cc:58:47:c1: ae:aa:dc:da:b9:bd:39:93:77:6f:59:5a:e5:20:5a:95:c5:ec: b6:54:61:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67ohToxa3CQ7MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MzgzOTk2ZmMtOWYyMi00M2UyLThlMWEtZmIxZjBkNDg3YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW9OqzwpnjW9FDQihbRC2T1MImF6d155Ta9R KIAhUU4V/jrFiAd6RFwFeSP5nmhit2J5TcADgY7/tsCDlYUl1d+1Bb1v8Zi2mhkZ ocJRvOLYsVl28Z7aqwNVHiuBLrCjwVcGNClw7DZ6DsbP3Pm/5vDaP1WX/qU5x0md dDWPJKbnIQbWMUsn00D9ybVV3iwBuNZPLzbseJLb1v8N2S0C01W8Wxi7R2tcv6+8 WlmRL5EckZ/yPb/i7Rv1F2YRiK69tWyhsfHTzYBKkIwg8tBfZZ8ZGZqRnX4y904s QDIyp7F5lpFhseqf66w6cpFgYIP66fkJr8rEQ7FYJIVg7ReV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfBvgQmljZknXTTyFKbtOy+tKyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyOGE4YmYtNzhhZi0z NWFhLWFmN2EtOGQ0Y2JjMzE4OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlEtbBFQ+5PIqFmDkuxUvyEMEU0o2To+2XDwvfdCWvN1QEPM/ggur/q gy2Ee8HQFWL5cibRJsAmTTbKqDdI7ITlL+M3rOolDPTsdA/HAe6Yvq6BDUPNqvZs xxIvSWzwdBJtKc9ISWqmPvKBNFSdOlU3Vds4FfS3EEjYpRdylKwOFFrNgOkbcOlf n+QnzCe48pSDCKz5JP9I5riChu0BVNOpa9YLJrUzXBfwpNLumNb4q5JFtT6k9QeX QfkGznxcLg+00HYMJfp5MU//r4BZfanoaMSkWQkv2Qy2UseVaMByPpOJ+0gVzFhH wa6q3Nq5vTmTd29ZWuUgWpXF7LZUYWM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:03 2025 by rpki-client