$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/549683ce-268e-3493-81ac-55768a574e04.roa File: 549683ce-268e-3493-81ac-55768a574e04.roa (raw, json) Hash identifier: VXmeM0pmYQrYJz2Ik4XlEjH9BFXdxzITkhK3oZmDriU= Subject key identifier: 39:14:24:63:30:1D:D0:52:A4:31:2B:1D:CE:5B:5A:0F:45:7A:BD:79 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B179FBEF76A76723DAFCF4C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/549683ce-268e-3493-81ac-55768a574e04.roa Signing time: Wed 30 Apr 2025 02:37:41 +0000 ROA not before: Wed 30 Apr 2025 02:37:41 +0000 ROA not after: Tue 29 Jul 2025 02:37:41 +0000 asID: 396982 IP address blocks: 104.154.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:79:fb:ef:76:a7:67:23:da:fc:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:37:41 2025 GMT Not After : Jul 29 02:37:41 2025 GMT Subject: CN=b5b14109-3f32-4816-8c3e-ec0361219282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:3f:4f:7e:7b:4e:24:ae:1f:2b:f5:d3:44: 55:c0:0f:57:c7:fe:f9:2d:ba:fc:44:a1:e0:f6:76: f7:05:34:28:ac:83:92:2a:3a:3a:db:5d:b1:7b:00: 90:55:d2:cf:fc:d1:13:e8:5a:dd:6f:6e:79:20:04: 86:40:55:59:c9:c6:ad:67:f5:00:ea:b7:d9:7b:d5: 59:c1:c2:b2:e6:f7:ce:07:eb:7d:5d:62:7c:60:7d: 2b:30:ce:aa:e2:5b:60:98:8b:f6:2c:0f:dd:f5:1c: 36:e5:f3:c0:a0:0c:41:92:ad:84:45:42:38:79:fe: 98:c3:9f:8a:8c:77:5a:bb:f6:fb:74:24:bb:72:da: 30:81:f8:01:da:79:28:3e:37:79:8e:94:b1:47:f9: 89:2e:cb:e7:9c:29:c3:f8:1e:05:2c:33:07:62:6d: 41:d5:b2:12:fc:a2:9b:81:36:27:d0:1f:8e:b9:60: 8e:5e:f3:db:ef:5e:f0:bf:d4:c1:55:46:76:a4:1e: cd:da:ae:dd:9a:f8:c9:9c:05:21:3c:72:7c:4c:f6: f3:b9:f0:b1:1d:80:41:fd:6e:0a:4c:2c:34:b4:cc: ec:c6:23:eb:59:32:56:b9:32:62:c1:04:3e:21:4b: c9:72:fa:68:9a:42:b7:b8:b7:54:40:80:30:e5:9c: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:14:24:63:30:1D:D0:52:A4:31:2B:1D:CE:5B:5A:0F:45:7A:BD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/549683ce-268e-3493-81ac-55768a574e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:68:07:5d:43:86:93:c6:94:bf:16:6e:74:af:b1:36:fd:ce: 21:1c:f8:b7:9d:cc:8a:bd:62:31:0b:c8:49:a4:6a:48:f7:69: 35:ff:17:8b:3c:7e:90:e8:a5:5d:43:5d:fc:5f:ea:25:f8:51: 85:2f:cf:0d:30:66:30:b4:21:03:cd:dc:02:bd:54:d1:d1:81: ed:f2:2b:84:44:1a:a5:1c:a6:f9:5f:8e:9b:5b:ed:59:4a:06: 98:95:26:df:58:b6:67:73:48:fe:6e:9c:c3:e7:9a:18:83:b1: d3:58:15:79:63:40:a0:45:01:7d:a0:17:66:0e:64:3d:02:23: 91:1c:48:a1:3f:2d:0e:19:36:19:42:c5:eb:6a:fd:0e:bf:f8: 08:60:ec:38:4e:2d:d0:ad:93:c1:9a:63:b3:87:9b:a2:68:e1: 34:8a:44:a9:6b:ab:d8:1d:20:f9:90:43:bb:6a:e2:c2:17:b2: 3e:8b:bc:94:c1:d5:12:7e:b5:ba:b4:96:ff:c9:b6:34:f5:5d: a0:11:10:b2:3d:61:5e:ef:ad:d6:67:c2:5d:38:f3:a6:37:0d: 16:c1:a7:fd:53:b3:9b:c0:e7:65:cc:32:f9:85:b1:00:c3:1b: 52:fc:37:5e:d0:bf:5d:ad:39:70:48:39:da:ce:c4:67:e0:04: d5:2a:4b:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxefvvdqdnI9r89MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzc0MVoXDTI1MDcyOTAyMzc0MVowLzEtMCsGA1UEAxMk YjViMTQxMDktM2YzMi00ODE2LThjM2UtZWMwMzYxMjE5MjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoo/T357TiSuHyv100RVwA9Xx/75Lbr8RKHg 9nb3BTQorIOSKjo6212xewCQVdLP/NET6Frdb255IASGQFVZycatZ/UA6rfZe9VZ wcKy5vfOB+t9XWJ8YH0rMM6q4ltgmIv2LA/d9Rw25fPAoAxBkq2ERUI4ef6Yw5+K jHdau/b7dCS7ctowgfgB2nkoPjd5jpSxR/mJLsvnnCnD+B4FLDMHYm1B1bIS/KKb gTYn0B+OuWCOXvPb717wv9TBVUZ2pB7N2q7dmvjJnAUhPHJ8TPbzufCxHYBB/W4K TCw0tMzsxiPrWTJWuTJiwQQ+IUvJcvpomkK3uLdUQIAw5ZxUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkUJGMwHdBSpDErHc5bWg9Fer15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTQ5NjgzY2UtMjY4ZS0z NDkzLTgxYWMtNTU3NjhhNTc0ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9oB11DhpPGlL8WbnSvsTb9ziEc+LedzIq9YjELyEmkakj3aTX/F4s8 fpDopV1DXfxf6iX4UYUvzw0wZjC0IQPN3AK9VNHRge3yK4REGqUcpvlfjptb7VlK BpiVJt9YtmdzSP5unMPnmhiDsdNYFXljQKBFAX2gF2YOZD0CI5EcSKE/LQ4ZNhlC xetq/Q6/+Ahg7DhOLdCtk8GaY7OHm6Jo4TSKRKlrq9gdIPmQQ7tq4sIXsj6LvJTB 1RJ+tbq0lv/JtjT1XaARELI9YV7vrdZnwl0486Y3DRbBp/1Ts5vA52XMMvmFsQDD G1L8N17Qv12tOXBIOdrOxGfgBNUqS10= -----END CERTIFICATE-----Generated at Sun May 11 13:42:37 2025 by rpki-client