$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d079339-2960-35e9-ba09-e00d59c2ddda.roa File: 3d079339-2960-35e9-ba09-e00d59c2ddda.roa (raw, json) Hash identifier: qFk+/FzL7NK242Bb5I9TLQuTfD+k0zEaaRJbLCmbHpg= Subject key identifier: BE:3D:8B:00:09:C7:09:2C:98:75:D7:DC:1B:45:F6:C4:9D:4D:BF:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17A122368DE60D1AE667B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d079339-2960-35e9-ba09-e00d59c2ddda.roa Signing time: Wed 30 Apr 2025 02:37:52 +0000 ROA not before: Wed 30 Apr 2025 02:37:52 +0000 ROA not after: Tue 29 Jul 2025 02:37:52 +0000 asID: 396982 IP address blocks: 104.154.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7a:12:23:68:de:60:d1:ae:66:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:37:52 2025 GMT Not After : Jul 29 02:37:52 2025 GMT Subject: CN=22a8c1c9-137f-4065-8e17-678bfe963b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b1:11:70:44:4f:d8:98:2b:35:2e:94:55:75: 11:60:54:b6:11:b5:e5:5a:ee:c0:e7:3c:90:96:6d: 15:fe:09:e4:6c:ed:60:2f:43:04:96:38:28:a1:a5: c1:66:5f:b6:e1:1c:c1:03:99:af:3f:47:6f:f1:df: d6:5a:30:94:3a:5a:a7:10:92:96:85:58:cf:ca:cb: 1e:2b:54:d8:c0:95:17:87:29:88:6d:82:3d:a7:04: 19:93:32:a2:56:6b:f5:20:4a:6e:a1:c8:82:7b:4a: 3a:5c:23:6f:8b:f6:30:90:b0:91:e8:a4:f4:95:7b: 72:67:94:5a:56:7a:4c:d9:dc:5a:32:d2:9b:df:71: a7:05:aa:7f:65:11:22:36:a9:9a:ee:7d:bc:fa:c3: a8:eb:24:41:37:bd:8d:bb:5e:03:4f:17:67:2d:bd: ca:09:d2:54:b1:83:a4:99:ae:51:ed:d2:56:7b:d6: 47:3d:5f:cd:45:99:d1:09:ef:08:0a:28:31:88:a4: cc:80:a7:50:93:7b:2b:25:72:b4:8a:98:19:b0:b5: 10:30:81:d7:ec:18:db:f8:ef:ff:aa:8f:d7:84:7d: 25:b9:85:42:1a:2b:b4:78:05:e4:3b:d6:a5:49:95: c9:7c:c0:5a:5e:c8:39:e2:94:6a:e2:b3:1a:65:9c: a3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3D:8B:00:09:C7:09:2C:98:75:D7:DC:1B:45:F6:C4:9D:4D:BF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d079339-2960-35e9-ba09-e00d59c2ddda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:80:12:eb:ee:b3:0e:db:38:65:58:e8:7b:73:d7:56:ff:1f: d1:f8:12:a5:d1:ee:0c:7b:7f:16:4a:91:80:9a:70:d4:f0:6b: 7c:cf:2c:46:96:09:bd:85:0e:5a:90:b1:80:df:86:54:f2:5d: 60:3f:61:a4:a6:29:05:b3:9f:23:51:d0:73:af:04:61:0d:45: 75:2b:10:fa:cf:6a:97:77:20:b8:55:01:72:59:d4:f5:27:ed: d1:52:70:0c:02:19:b4:3b:99:ee:88:85:c0:03:ec:03:23:51: 82:ef:06:7c:46:b9:40:e6:8b:7b:89:99:0e:b0:1d:39:72:2e: 8c:5f:b3:51:3e:84:8f:03:6b:a9:dd:5e:58:9f:53:dd:42:7c: f5:17:27:96:e4:c0:42:95:a2:24:cb:5b:53:ea:78:19:cd:e1: 95:e3:74:77:50:8e:5b:b9:50:2b:54:25:12:e3:b5:c7:29:f1: 18:75:74:b6:2d:10:cc:d1:55:7c:85:80:b3:46:a0:ff:64:2d: 7c:4e:13:b0:fa:ff:8d:34:73:36:56:0e:2a:99:60:9b:80:de: 86:c8:f2:c2:b5:98:7e:0e:46:1e:bb:6b:4e:9c:2c:88:79:cf: f9:0a:02:34:c9:b7:a8:8a:d1:c1:56:44:31:87:f8:f0:e0:b7: aa:6a:1a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxehIjaN5g0a5mewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzc1MloXDTI1MDcyOTAyMzc1MlowLzEtMCsGA1UEAxMk MjJhOGMxYzktMTM3Zi00MDY1LThlMTctNjc4YmZlOTYzYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47ERcERP2JgrNS6UVXURYFS2EbXlWu7A5zyQ lm0V/gnkbO1gL0MEljgooaXBZl+24RzBA5mvP0dv8d/WWjCUOlqnEJKWhVjPysse K1TYwJUXhymIbYI9pwQZkzKiVmv1IEpuociCe0o6XCNvi/YwkLCR6KT0lXtyZ5Ra VnpM2dxaMtKb33GnBap/ZREiNqma7n28+sOo6yRBN72Nu14DTxdnLb3KCdJUsYOk ma5R7dJWe9ZHPV/NRZnRCe8ICigxiKTMgKdQk3srJXK0ipgZsLUQMIHX7Bjb+O// qo/XhH0luYVCGiu0eAXkO9alSZXJfMBaXsg54pRq4rMaZZyjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL49iwAJxwksmHXX3BtF9sSdTb8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2QwNzkzMzktMjk2MC0z NWU5LWJhMDktZTAwZDU5YzJkZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeAEuvusw7bOGVY6Htz11b/H9H4EqXR7gx7fxZKkYCacNTwa3zPLEaW Cb2FDlqQsYDfhlTyXWA/YaSmKQWznyNR0HOvBGENRXUrEPrPapd3ILhVAXJZ1PUn 7dFScAwCGbQ7me6IhcAD7AMjUYLvBnxGuUDmi3uJmQ6wHTlyLoxfs1E+hI8Da6nd XlifU91CfPUXJ5bkwEKVoiTLW1PqeBnN4ZXjdHdQjlu5UCtUJRLjtccp8Rh1dLYt EMzRVXyFgLNGoP9kLXxOE7D6/400czZWDiqZYJuA3obI8sK1mH4ORh67a06cLIh5 z/kKAjTJt6iK0cFWRDGH+PDgt6pqGt8= -----END CERTIFICATE-----Generated at Sun May 4 19:49:25 2025 by rpki-client