$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc314128-1f24-318c-814b-6b8135679d79.roa File: bc314128-1f24-318c-814b-6b8135679d79.roa (raw, json) Hash identifier: pf9ORV8bmGzzeqs/8Nykp4Y79M9RIXhmZ2fKwLvr4/s= Subject key identifier: DB:91:2B:DA:57:83:4D:7B:17:DE:4B:4B:4C:F5:6A:79:E4:81:A7:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B179C357D2C96520873F0500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc314128-1f24-318c-814b-6b8135679d79.roa Signing time: Wed 30 Apr 2025 02:37:14 +0000 ROA not before: Wed 30 Apr 2025 02:37:14 +0000 ROA not after: Tue 29 Jul 2025 02:37:14 +0000 asID: 396982 IP address blocks: 104.154.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:79:c3:57:d2:c9:65:20:87:3f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:37:14 2025 GMT Not After : Jul 29 02:37:14 2025 GMT Subject: CN=b8bbaf18-e171-4e4b-b468-0e9726447f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:00:1c:30:ba:41:6d:a6:3c:cd:f9:92:87: a9:ae:01:c8:2a:11:ad:94:58:7b:96:d8:8e:94:a8: be:f4:c7:f4:2a:70:7e:1e:a4:ca:82:0f:7f:ac:24: d8:49:c3:2e:5a:a2:d7:49:1d:54:eb:69:d5:2b:8c: 1d:a6:ec:35:2d:60:db:ec:e6:e2:db:70:d5:df:4d: 83:4c:ef:bc:3d:5c:0f:c8:3d:97:a7:7b:d3:36:77: 27:a0:ee:91:51:b2:61:1c:70:57:54:5f:fa:06:cb: dd:c6:06:1c:0c:34:d4:2f:ce:43:47:0b:b5:53:cf: f4:55:f3:a7:37:2d:24:3f:90:ba:ab:69:28:71:fe: 64:69:53:81:87:25:ef:d1:49:48:e3:61:2e:ba:3e: 0b:25:a1:78:8f:11:7c:59:f9:ea:0f:0e:3e:d2:ec: 6c:61:72:85:c5:c5:49:85:02:79:92:5a:79:da:c3: 6b:74:84:3a:0a:89:16:c9:83:00:3a:a0:69:9e:84: eb:71:c5:cd:a6:b7:ef:09:2b:2c:1d:07:65:2c:10: fd:db:26:cd:2b:e5:06:c9:d6:77:87:ae:01:c9:cf: 7d:f1:24:24:95:ec:10:dc:39:2d:0d:dc:32:96:ba: c6:4c:bc:f4:12:aa:ab:2b:41:0d:81:4c:b5:63:95: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:91:2B:DA:57:83:4D:7B:17:DE:4B:4B:4C:F5:6A:79:E4:81:A7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc314128-1f24-318c-814b-6b8135679d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:09:ec:b3:74:05:3c:d2:6c:8a:79:95:a9:87:c4:9d:0b:d1: a6:7e:fd:43:6c:d2:73:15:6f:27:64:0b:5d:15:f4:20:1c:bd: f6:96:d3:f4:79:78:64:b9:35:6d:e2:3c:77:43:a5:a4:9c:23: a9:ad:97:a8:6f:1c:a2:60:e5:25:02:c4:8c:4f:b0:54:96:06: f7:4c:df:a9:3c:ad:a6:7b:66:5b:ae:95:b2:ba:13:a6:d2:9f: 01:e6:e0:a9:42:b0:a9:4b:32:64:f4:60:52:19:20:69:97:4f: a4:79:bd:a5:d1:82:e1:f1:0e:9e:36:3a:c8:a7:f8:e9:fb:b9: f5:d3:18:fe:98:fc:b5:71:8e:46:b5:90:3c:ea:a3:e6:64:3b: 14:fc:59:d1:45:ce:a6:76:3b:98:75:29:fd:ed:4e:e2:39:e2: 4d:51:06:00:f8:cd:6c:07:79:d0:a1:5d:87:d0:2c:33:d0:5f: 3f:02:ef:11:dc:7d:84:fa:b5:ea:de:18:24:9d:71:c6:67:b2: d1:51:72:e6:7c:d4:78:d2:d8:48:bc:e5:91:71:a5:01:53:68: b0:ce:3e:aa:41:55:84:5d:7f:31:d3:35:2a:0d:f2:6b:cc:1c: 6c:7b:41:00:ef:b7:52:22:ff:21:83:d5:af:f4:ff:a8:8a:ed: 12:54:f4:e8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxecNX0sllIIc/BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzcxNFoXDTI1MDcyOTAyMzcxNFowLzEtMCsGA1UEAxMk YjhiYmFmMTgtZTE3MS00ZTRiLWI0NjgtMGU5NzI2NDQ3ZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqcAHDC6QW2mPM35koeprgHIKhGtlFh7ltiO lKi+9Mf0KnB+HqTKgg9/rCTYScMuWqLXSR1U62nVK4wdpuw1LWDb7Obi23DV302D TO+8PVwPyD2Xp3vTNncnoO6RUbJhHHBXVF/6BsvdxgYcDDTUL85DRwu1U8/0VfOn Ny0kP5C6q2kocf5kaVOBhyXv0UlI42Euuj4LJaF4jxF8WfnqDw4+0uxsYXKFxcVJ hQJ5klp52sNrdIQ6CokWyYMAOqBpnoTrccXNprfvCSssHQdlLBD92ybNK+UGydZ3 h64Byc998SQklewQ3DktDdwylrrGTLz0EqqrK0ENgUy1Y5XsUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNuRK9pXg017F95LS0z1annkgafpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMzMTQxMjgtMWYyNC0z MThjLTgxNGItNmI4MTM1Njc5ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBaJowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOAnss3QFPNJsinmVqYfEnQvRpn79Q2zScxVvJ2QLXRX0IBy99pbT9Hl4 ZLk1beI8d0OlpJwjqa2XqG8comDlJQLEjE+wVJYG90zfqTytpntmW66VsroTptKf AebgqUKwqUsyZPRgUhkgaZdPpHm9pdGC4fEOnjY6yKf46fu59dMY/pj8tXGORrWQ POqj5mQ7FPxZ0UXOpnY7mHUp/e1O4jniTVEGAPjNbAd50KFdh9AsM9BfPwLvEdx9 hPq16t4YJJ1xxmey0VFy5nzUeNLYSLzlkXGlAVNosM4+qkFVhF1/MdM1Kg3ya8wc bHtBAO+3UiL/IYPVr/T/qIrtElT06A== -----END CERTIFICATE-----Generated at Sun May 4 19:49:50 2025 by rpki-client