$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7e501c6-df01-3ebc-b44e-3a1a576c8336.roa File: f7e501c6-df01-3ebc-b44e-3a1a576c8336.roa (raw, json) Hash identifier: mPEvAft2XAmwDbiUHnqQV6NuGbEwAoUiR6rmHD0MF70= Subject key identifier: BB:B8:78:3D:E1:0B:98:B9:DE:D0:E3:F4:91:88:38:74:DA:93:C1:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B1797143680C8650B8BBA190 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7e501c6-df01-3ebc-b44e-3a1a576c8336.roa Signing time: Wed 30 Apr 2025 02:36:36 +0000 ROA not before: Wed 30 Apr 2025 02:36:36 +0000 ROA not after: Tue 29 Jul 2025 02:36:36 +0000 asID: 396982 IP address blocks: 104.198.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:79:71:43:68:0c:86:50:b8:bb:a1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:36:36 2025 GMT Not After : Jul 29 02:36:36 2025 GMT Subject: CN=18d9bafa-0639-42f0-bfc9-0ae3391d6280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:7d:df:44:e1:46:1e:5f:5d:93:e6:be:f5: a5:7c:90:fb:1b:b5:e6:97:c0:a1:75:32:48:61:25: ed:f9:e1:2e:80:61:17:e6:90:b7:b9:19:05:e2:ec: 2c:41:4d:34:cc:ff:37:75:3b:ff:6d:d0:09:00:ea: ba:3a:2c:47:a3:e6:01:50:e4:67:3c:e4:37:09:96: a9:de:fe:ae:3b:d0:6f:58:74:52:18:2f:cb:36:50: e0:6b:de:44:02:d3:5f:aa:df:93:1d:2a:39:6e:ae: 2c:01:5d:98:6c:ee:09:96:91:44:6b:1f:a7:0c:22: f6:8c:5d:59:91:60:6d:16:55:2a:91:58:0a:5a:66: ec:6a:46:3c:16:33:7f:34:4a:aa:0e:5f:85:7b:b2: 45:66:d2:b3:12:8c:46:48:5b:6f:57:6d:16:e3:40: 52:aa:db:3c:85:45:06:28:fe:a7:10:23:bf:46:da: 8a:bc:68:b4:ed:d1:03:ae:70:fa:91:cc:f1:af:e2: 92:f0:5f:7f:cd:00:51:cc:40:d8:d9:55:6c:7e:5b: e8:4e:32:97:93:79:d4:fa:26:17:00:e6:12:eb:bc: 15:77:f1:70:10:84:01:ed:ca:23:9a:08:14:b3:2c: 6f:a2:bd:92:a0:f0:ba:b2:92:78:d6:b8:60:fb:a0: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:78:3D:E1:0B:98:B9:DE:D0:E3:F4:91:88:38:74:DA:93:C1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7e501c6-df01-3ebc-b44e-3a1a576c8336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:09:d9:41:c1:d5:f0:8d:d2:17:f8:5d:a7:27:47:f2:28:62: 3b:96:04:45:90:49:4c:84:91:5e:f1:06:84:24:07:68:97:7c: 22:78:18:de:27:12:7e:73:8f:03:e3:77:1d:c4:90:6a:69:b4: 18:dd:27:c9:48:8c:01:03:30:87:b4:c7:14:19:29:8e:c4:22: 71:ba:d8:55:49:d2:92:be:17:30:ac:99:99:f3:65:0c:5b:77: 6f:a1:b8:47:21:0b:aa:80:29:58:7f:51:ff:39:6b:7d:24:a4: 71:c3:86:1d:a2:13:57:9f:5e:82:c6:0e:16:38:88:4c:6c:61: a1:41:60:e4:42:b3:90:e5:7b:a7:fb:bd:50:69:37:bb:74:b5: f5:de:ac:a7:3c:12:dc:02:bc:d8:f8:b9:1b:32:fe:db:53:4b: a3:df:e1:b6:35:9a:64:cb:1d:d3:bf:01:55:31:e6:8f:cd:93: da:ff:02:aa:51:71:4a:17:1a:51:07:7a:9c:3e:f3:7a:25:9a: f9:65:3b:09:78:8a:8b:8d:34:03:c4:c3:39:66:24:e7:58:49: a4:8e:8d:1a:49:da:d8:5f:66:ac:47:2a:67:61:91:96:c8:ac: 98:22:db:df:01:49:8a:19:e7:66:f9:09:04:d5:4d:a9:8f:a5: e1:53:76:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxeXFDaAyGULi7oZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzYzNloXDTI1MDcyOTAyMzYzNlowLzEtMCsGA1UEAxMk MThkOWJhZmEtMDYzOS00MmYwLWJmYzktMGFlMzM5MWQ2MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowx930ThRh5fXZPmvvWlfJD7G7Xml8ChdTJI YSXt+eEugGEX5pC3uRkF4uwsQU00zP83dTv/bdAJAOq6OixHo+YBUORnPOQ3CZap 3v6uO9BvWHRSGC/LNlDga95EAtNfqt+THSo5bq4sAV2YbO4JlpFEax+nDCL2jF1Z kWBtFlUqkVgKWmbsakY8FjN/NEqqDl+Fe7JFZtKzEoxGSFtvV20W40BSqts8hUUG KP6nECO/RtqKvGi07dEDrnD6kczxr+KS8F9/zQBRzEDY2VVsflvoTjKXk3nU+iYX AOYS67wVd/FwEIQB7cojmggUsyxvor2SoPC6spJ41rhg+6BIZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu4eD3hC5i53tDj9JGIOHTak8GzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjdlNTAxYzYtZGYwMS0z ZWJjLWI0NGUtM2ExYTU3NmM4MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoJ2UHB1fCN0hf4XacnR/IoYjuWBEWQSUyEkV7xBoQkB2iXfCJ4GN4n En5zjwPjdx3EkGpptBjdJ8lIjAEDMIe0xxQZKY7EInG62FVJ0pK+FzCsmZnzZQxb d2+huEchC6qAKVh/Uf85a30kpHHDhh2iE1efXoLGDhY4iExsYaFBYORCs5Dle6f7 vVBpN7t0tfXerKc8EtwCvNj4uRsy/ttTS6Pf4bY1mmTLHdO/AVUx5o/Nk9r/AqpR cUoXGlEHepw+83olmvllOwl4iouNNAPEwzlmJOdYSaSOjRpJ2thfZqxHKmdhkZbI rJgi298BSYoZ52b5CQTVTamPpeFTdp8= -----END CERTIFICATE-----Generated at Sun May 4 18:23:36 2025 by rpki-client