$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c04458-0056-379f-acff-b36d20b40e5b.roa File: f2c04458-0056-379f-acff-b36d20b40e5b.roa (raw, json) Hash identifier: ItwSgG19eNZKL54vMzh/4E8UpXSmDG00TVEUcyZWpsk= Subject key identifier: DF:DC:F6:A7:F4:77:D7:2E:C4:CD:D8:6B:0F:C6:B7:CB:C3:B4:28:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBCE523DE59A68B029DC40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c04458-0056-379f-acff-b36d20b40e5b.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.197.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ce:52:3d:e5:9a:68:b0:29:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=31a6f197-0d43-4b59-8b7b-b761d40f0a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:3b:d9:16:5d:2b:20:48:f5:82:ac:c9:22: 40:25:cb:e1:79:b3:ed:5a:10:bd:3d:14:57:61:a3: 36:53:1e:4b:2b:b4:d7:09:6b:6b:e6:be:03:df:26: 5a:ac:6d:1c:7a:32:b0:cc:44:af:c8:b2:29:bc:07: 40:49:85:57:5d:9f:48:2b:3b:26:e3:3e:3f:12:b9: 70:5c:d7:22:eb:64:f3:d1:56:17:c3:ae:a7:29:12: 2d:e8:f2:c1:2e:d6:39:48:6d:f8:17:f7:82:53:27: 55:4e:df:a7:ee:74:e0:d3:7b:32:26:09:f9:0f:3e: be:0c:c5:7e:50:6a:4f:b6:e4:64:72:69:e4:6f:5a: 4e:6c:31:e9:18:33:dd:22:f3:13:90:e1:62:66:d3: 49:2f:78:a0:23:20:9c:77:ca:20:3e:43:00:58:36: 46:29:54:9e:51:07:be:1c:3a:1c:33:d2:5e:34:e3: a6:8d:14:12:29:7a:2f:54:71:7e:85:8a:50:b7:2e: 7e:e0:ab:69:c3:36:50:6f:cb:21:fd:2d:f3:68:cd: 30:16:15:45:c9:03:30:04:90:e9:f9:cf:55:4f:17: 52:ec:23:99:38:7f:57:31:f7:f2:87:ce:4c:4d:e5: 87:76:ee:2b:85:71:6c:1a:9d:ae:77:18:1c:1a:c7: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:F6:A7:F4:77:D7:2E:C4:CD:D8:6B:0F:C6:B7:CB:C3:B4:28:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c04458-0056-379f-acff-b36d20b40e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b5:e8:cc:3a:40:ae:99:be:a2:3e:d3:bd:37:a0:a8:12:ac: e9:b0:ff:40:8b:d3:86:05:e1:12:06:d2:6a:a2:b3:eb:7c:9e: 7d:c3:37:6d:c9:91:e6:77:b5:17:36:bc:51:a6:47:42:43:2a: 4a:30:c7:1c:a0:b4:1e:3e:52:83:57:55:8a:c8:ef:15:31:96: a3:ce:e7:16:09:0c:a9:b0:75:a9:8f:cd:e8:4b:b5:39:51:4f: ae:2e:bb:e2:6f:7a:41:b0:f9:c1:4d:80:da:1e:a8:52:d5:25: a4:e9:da:a9:f8:81:e1:c3:08:1e:6d:b3:b3:cd:6e:12:5a:0d: 76:d6:75:36:a2:9f:c1:0d:ec:f6:0b:c3:6a:2e:3f:8b:19:ef: fc:c1:26:ac:f7:39:d6:e5:a1:12:2a:bc:7e:bf:c6:f1:0c:64: dc:40:16:13:41:7e:ca:b3:af:9e:4d:9d:41:88:a2:cb:b6:7a: 64:54:48:d7:d8:24:a0:3e:fc:c6:40:5a:94:3e:14:42:39:15: ce:39:58:75:c9:43:f9:54:81:da:98:46:c5:fb:a8:7b:d0:54: 55:10:e2:49:34:48:0a:04:c0:b0:f9:76:20:f9:23:c7:fb:86: 28:99:18:da:46:9e:bd:51:9f:55:62:01:b4:1a:0e:12:9b:fd: 00:de:69:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/685SPeWaaLAp3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MzFhNmYxOTctMGQ0My00YjU5LThiN2ItYjc2MWQ0MGYwYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSA72RZdKyBI9YKsySJAJcvhebPtWhC9PRRX YaM2Ux5LK7TXCWtr5r4D3yZarG0cejKwzESvyLIpvAdASYVXXZ9IKzsm4z4/Erlw XNci62Tz0VYXw66nKRIt6PLBLtY5SG34F/eCUydVTt+n7nTg03syJgn5Dz6+DMV+ UGpPtuRkcmnkb1pObDHpGDPdIvMTkOFiZtNJL3igIyCcd8ogPkMAWDZGKVSeUQe+ HDocM9JeNOOmjRQSKXovVHF+hYpQty5+4KtpwzZQb8sh/S3zaM0wFhVFyQMwBJDp +c9VTxdS7COZOH9XMffyh85MTeWHdu4rhXFsGp2udxgcGscY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/c9qf0d9cuxM3Yaw/Gt8vDtCikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjJjMDQ0NTgtMDA1Ni0z NzlmLWFjZmYtYjM2ZDIwYjQwZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK16Mw6QK6ZvqI+0703oKgSrOmw/0CL04YF4RIG0mqis+t8nn3DN23J keZ3tRc2vFGmR0JDKkowxxygtB4+UoNXVYrI7xUxlqPO5xYJDKmwdamPzehLtTlR T64uu+JvekGw+cFNgNoeqFLVJaTp2qn4geHDCB5ts7PNbhJaDXbWdTain8EN7PYL w2ouP4sZ7/zBJqz3OdbloRIqvH6/xvEMZNxAFhNBfsqzr55NnUGIosu2emRUSNfY JKA+/MZAWpQ+FEI5Fc45WHXJQ/lUgdqYRsX7qHvQVFUQ4kk0SAoEwLD5diD5I8f7 hiiZGNpGnr1Rn1ViAbQaDhKb/QDeafE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:09:06 2025 by rpki-client