$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fa28fb-6178-36bf-9816-3aec9d64e913.roa File: f5fa28fb-6178-36bf-9816-3aec9d64e913.roa (raw, json) Hash identifier: 0d0vwfo1J9OjkmOKtdKln82mOwRALktfxjMKHxuk89s= Subject key identifier: 82:66:2A:9F:EA:14:E7:3A:AF:05:61:2D:CE:93:3B:84:0B:16:F2:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBB1368271F9E277503A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fa28fb-6178-36bf-9816-3aec9d64e913.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 104.196.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:b1:36:82:71:f9:e2:77:50:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=fdc855cb-0541-46b2-ba5a-a889ab250f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a1:45:b1:15:ca:8f:44:9a:e2:b6:32:24:9b: 8f:84:81:f5:b2:38:77:bb:b5:01:ba:54:86:f3:a2: 06:e3:15:bc:9a:53:36:79:13:6b:fa:89:e1:53:6f: ba:b8:2d:31:f2:eb:40:66:a3:20:84:f4:59:d4:2d: 1f:12:04:88:32:dd:2f:f8:e9:4b:7c:5c:f0:e1:27: fc:a6:2e:aa:e0:ad:4b:bd:44:6c:8e:d6:26:bb:20: 0e:a5:99:ec:e6:d5:9a:e2:87:10:b2:d6:0d:6b:02: 8c:aa:3c:06:43:c5:78:ea:90:63:e9:b3:78:82:90: ba:83:72:da:d4:55:ac:e4:6d:cb:d6:cb:5d:41:4f: ef:09:49:04:09:02:d0:e6:7b:8e:13:69:37:ec:ee: df:97:45:1e:15:85:43:2e:13:10:47:27:e4:62:83: 72:23:43:8c:01:2f:a0:9f:26:ad:10:97:57:a3:f9: fa:f1:22:78:22:56:0d:5c:09:78:fd:ad:66:1c:80: 44:0e:72:b2:41:95:6c:fa:c8:68:de:1b:30:91:3b: 30:67:b3:41:0b:38:72:70:ac:a2:45:f2:9a:bf:79: 32:85:0f:7a:72:71:b1:bd:c2:1c:13:c5:e5:d5:ea: c3:da:b3:26:b1:32:22:4f:3e:72:de:4b:4f:84:55: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:66:2A:9F:EA:14:E7:3A:AF:05:61:2D:CE:93:3B:84:0B:16:F2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fa28fb-6178-36bf-9816-3aec9d64e913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:98:be:ad:70:bf:40:93:1e:3a:33:98:b5:ae:a8:a6:71:36: 69:39:8a:03:aa:bc:79:4b:2e:25:27:20:2e:d4:08:17:08:b7: 67:37:39:16:ce:be:90:98:ff:73:6b:d3:5e:7c:fa:05:84:35: d3:2b:69:23:f5:70:d9:40:ce:81:f9:e4:7d:c9:5e:cf:69:a6: 68:9d:a8:2f:12:f3:4a:f5:d9:76:1c:5b:9f:88:27:09:14:8d: 5e:cd:74:33:a7:36:09:f4:bc:c5:56:b2:84:2b:73:33:5d:12: 97:52:50:45:73:ad:ca:c8:3e:37:10:28:05:48:89:13:30:98: 26:43:46:e9:9c:ca:b0:8c:6d:07:03:b3:8a:be:b5:95:77:16: 9c:0a:82:37:47:06:0b:0c:fa:77:fb:4d:79:a0:15:c6:57:5a: 19:a7:a8:28:cd:96:04:08:09:64:fd:d6:d8:ec:22:fe:a7:f8: f3:ec:c0:57:41:41:d8:7f:45:44:05:eb:a5:51:89:1e:3a:35: 28:d8:2e:ef:8e:e8:fe:d4:59:f9:7e:0d:ff:15:d3:c2:d7:92: 9f:e4:84:51:66:bd:0e:df:fb:8c:6c:54:b5:74:a0:c3:b7:54: df:f7:50:7b:9e:c2:84:3d:19:57:f9:e3:de:32:a0:d9:34:05: 64:4f:f2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67E2gnH54ndQOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZmRjODU1Y2ItMDU0MS00NmIyLWJhNWEtYTg4OWFiMjUwZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6FFsRXKj0Sa4rYyJJuPhIH1sjh3u7UBulSG 86IG4xW8mlM2eRNr+onhU2+6uC0x8utAZqMghPRZ1C0fEgSIMt0v+OlLfFzw4Sf8 pi6q4K1LvURsjtYmuyAOpZns5tWa4ocQstYNawKMqjwGQ8V46pBj6bN4gpC6g3La 1FWs5G3L1stdQU/vCUkECQLQ5nuOE2k37O7fl0UeFYVDLhMQRyfkYoNyI0OMAS+g nyatEJdXo/n68SJ4IlYNXAl4/a1mHIBEDnKyQZVs+sho3hswkTswZ7NBCzhycKyi RfKav3kyhQ96cnGxvcIcE8Xl1erD2rMmsTIiTz5y3ktPhFWymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJmKp/qFOc6rwVhLc6TO4QLFvLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjVmYTI4ZmItNjE3OC0z NmJmLTk4MTYtM2FlYzlkNjRlOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACYvq1wv0CTHjozmLWuqKZxNmk5igOqvHlLLiUnIC7UCBcIt2c3ORbO vpCY/3Nr0158+gWENdMraSP1cNlAzoH55H3JXs9ppmidqC8S80r12XYcW5+IJwkU jV7NdDOnNgn0vMVWsoQrczNdEpdSUEVzrcrIPjcQKAVIiRMwmCZDRumcyrCMbQcD s4q+tZV3FpwKgjdHBgsM+nf7TXmgFcZXWhmnqCjNlgQICWT91tjsIv6n+PPswFdB Qdh/RUQF66VRiR46NSjYLu+O6P7UWfl+Df8V08LXkp/khFFmvQ7f+4xsVLV0oMO3 VN/3UHuewoQ9GVf5494yoNk0BWRP8g0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:29 2025 by rpki-client