$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa File: f21189fb-e23d-3eb9-89ca-2076fda69f76.roa (raw, json) Hash identifier: zSlOOaFEYaynPhv4ge3B3OC9dRVF2s1Pgoh0klmnvnk= Subject key identifier: 08:48:F1:47:41:40:7A:4D:5A:F8:AA:87:F6:23:02:D7:FF:D7:F6:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBBC27027BDAE182F29EC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.154.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bc:27:02:7b:da:e1:82:f2:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=00a6738d-3efc-49d4-b9fd-9f10f8e6c74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:22:1c:4b:38:35:23:5f:83:f1:27:41:77: 1a:fc:fc:13:17:99:9f:f2:a8:17:86:d2:5a:c9:8a: 82:2a:45:c9:04:83:fb:b2:4d:1e:53:e9:6c:5e:5b: 6d:c1:dd:50:7f:dc:e9:c9:9d:05:6c:4f:be:02:43: 4e:a8:19:2d:f7:72:c4:20:e2:73:a0:55:c0:3d:b9: 85:16:f5:f9:db:12:6e:2a:4a:8a:a7:15:37:4b:2c: e3:99:01:79:d3:bb:9a:82:7a:0f:53:21:af:e7:06: 3c:5a:fc:89:e0:28:c0:21:f1:da:b1:57:f3:8e:02: b6:53:41:e2:f0:ec:dc:73:64:36:1d:1b:74:51:79: a0:e2:38:4a:8f:b7:08:8b:b8:19:c8:c6:78:91:c1: eb:6d:d2:c8:60:65:00:09:dc:2a:21:5f:39:7e:9c: 6a:99:c6:3b:3d:90:d6:5c:c8:ad:b1:12:b1:a6:3f: c9:c6:2a:e8:a5:ac:8c:d4:f2:43:33:c1:65:27:6d: b9:6a:65:66:a7:11:c7:2a:e2:71:92:89:84:1e:57: e9:3c:2b:a7:66:db:24:4f:f7:a4:a8:1d:33:d9:b2: 4e:d6:23:cf:e2:85:2a:4b:c7:96:11:ba:8a:60:70: 4d:ae:8a:3a:ba:47:43:28:d3:a8:31:20:c6:0b:2f: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:48:F1:47:41:40:7A:4D:5A:F8:AA:87:F6:23:02:D7:FF:D7:F6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:59:41:eb:57:17:2b:3d:1b:9a:06:ce:6a:27:cf:d0:23:9f: ac:0d:82:80:c8:c4:d7:55:56:60:f5:9d:81:70:1a:79:aa:d0: c0:5c:82:a7:33:ef:3b:b2:cb:f9:7f:f2:5d:78:c1:61:7b:bb: 1a:7e:30:92:80:ce:4d:ba:f1:48:93:b2:af:8a:10:86:7d:6d: d1:39:7b:5d:65:d4:7c:e8:ce:86:f9:6a:d2:0b:f0:f3:99:5f: 5c:ff:9f:43:e5:88:37:c3:57:f1:40:e8:ed:72:a7:de:f9:a1: 52:a5:20:60:c7:a2:58:db:d7:23:67:3f:d3:3f:0d:81:0a:c0: 53:61:e2:24:13:31:24:87:6e:f9:99:f3:34:d2:bc:93:ab:a3: 00:cb:d4:43:46:64:f2:fc:26:8a:89:28:a2:62:c5:06:63:96: 99:32:e2:5a:b3:9d:30:18:93:14:e1:79:0b:d4:e7:90:36:d0: fd:94:8c:16:a5:49:17:35:11:bf:06:75:96:70:f4:bc:50:eb: d7:f8:4e:a5:93:ac:e0:6d:a6:70:ed:31:b2:e8:9a:ef:a2:56: 60:4a:90:5b:80:5d:06:30:71:ad:9c:a4:f6:31:51:9b:a2:2e: 59:7b:f4:64:6f:18:24:6b:a0:ef:33:af:16:18:ac:d7:a9:d8: e1:dd:e1:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67wnAnva4YLynsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MDBhNjczOGQtM2VmYy00OWQ0LWI5ZmQtOWYxMGY4ZTZjNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IciHEs4NSNfg/EnQXca/PwTF5mf8qgXhtJa yYqCKkXJBIP7sk0eU+lsXlttwd1Qf9zpyZ0FbE++AkNOqBkt93LEIOJzoFXAPbmF FvX52xJuKkqKpxU3SyzjmQF507uagnoPUyGv5wY8WvyJ4CjAIfHasVfzjgK2U0Hi 8Ozcc2Q2HRt0UXmg4jhKj7cIi7gZyMZ4kcHrbdLIYGUACdwqIV85fpxqmcY7PZDW XMitsRKxpj/JxiropayM1PJDM8FlJ225amVmpxHHKuJxkomEHlfpPCunZtskT/ek qB0z2bJO1iPP4oUqS8eWEbqKYHBNroo6ukdDKNOoMSDGCy+xRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhI8UdBQHpNWviqh/YjAtf/1/b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjIxMTg5ZmItZTIzZC0z ZWI5LTg5Y2EtMjA3NmZkYTY5Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVZQetXFys9G5oGzmonz9Ajn6wNgoDIxNdVVmD1nYFwGnmq0MBcgqcz 7zuyy/l/8l14wWF7uxp+MJKAzk268UiTsq+KEIZ9bdE5e11l1Hzozob5atIL8POZ X1z/n0PliDfDV/FA6O1yp975oVKlIGDHoljb1yNnP9M/DYEKwFNh4iQTMSSHbvmZ 8zTSvJOrowDL1ENGZPL8JoqJKKJixQZjlpky4lqznTAYkxTheQvU55A20P2UjBal SRc1Eb8GdZZw9LxQ69f4TqWTrOBtpnDtMbLomu+iVmBKkFuAXQYwca2cpPYxUZui Lll79GRvGCRroO8zrxYYrNep2OHd4Z4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:33 2025 by rpki-client