$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8cf8c45-6944-389e-a7ee-2f3d10ff0be7.roa File: f8cf8c45-6944-389e-a7ee-2f3d10ff0be7.roa (raw, json) Hash identifier: KYLIX3JMS4Zd6Fw05RKZhRulRwF9VjIcAa5uM3IudWc= Subject key identifier: DD:85:92:1E:77:33:57:FF:60:7D:63:F5:F4:65:15:BB:25:B4:A2:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17A5C36A613D5D6E7118700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8cf8c45-6944-389e-a7ee-2f3d10ff0be7.roa Signing time: Wed 30 Apr 2025 02:38:27 +0000 ROA not before: Wed 30 Apr 2025 02:38:27 +0000 ROA not after: Tue 29 Jul 2025 02:38:27 +0000 asID: 396982 IP address blocks: 104.196.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7a:5c:36:a6:13:d5:d6:e7:11:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:38:27 2025 GMT Not After : Jul 29 02:38:27 2025 GMT Subject: CN=6f3bb7d9-9101-493a-9adb-b5de13835687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:75:f2:dc:16:0a:f7:5d:13:6e:7d:90:eb: a5:59:95:47:3a:21:94:ec:28:1f:a3:18:ec:76:d1: 49:8e:fb:c9:c0:24:fa:90:50:94:2c:7c:a3:89:df: 57:c5:95:f7:3c:2a:9e:5b:19:36:31:9c:5d:b6:dd: 44:ef:f7:65:32:9a:27:95:25:3c:6b:b8:3f:db:a9: c3:7b:79:31:33:24:9f:c4:9b:82:92:eb:72:d0:e1: cd:25:d9:a5:f3:14:68:34:a5:36:73:96:1d:ff:f0: ac:02:b7:c4:02:91:bc:af:eb:3b:bf:3c:3c:b9:7f: a9:42:b4:87:86:8c:93:ae:3c:c4:20:25:3d:fe:25: ef:3d:c1:16:c8:9e:50:5a:ea:70:a4:6c:64:f2:dc: 85:0a:a7:0c:d8:62:ba:b6:16:1c:fe:bb:96:df:d8: 88:00:49:5c:d7:e5:55:4f:b4:4c:db:a6:0e:e9:83: a6:aa:90:40:a2:69:56:0a:a8:94:69:1f:5d:93:2b: bb:88:a2:c0:65:4b:e4:54:d6:9b:76:88:f1:28:2d: 60:6b:15:a7:eb:c2:e7:0c:10:b6:5e:7e:cb:69:11: 41:7e:49:4d:01:4e:de:90:71:30:f6:25:a2:e6:31: bf:99:ef:b6:13:7a:24:a5:21:9d:3b:2f:9c:01:ce: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:85:92:1E:77:33:57:FF:60:7D:63:F5:F4:65:15:BB:25:B4:A2:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8cf8c45-6944-389e-a7ee-2f3d10ff0be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0b:3b:a0:e8:0f:6e:7e:49:f1:53:b0:9b:ae:08:c7:98:ec: 36:e1:59:ea:98:e9:dd:35:34:8f:67:13:05:39:93:46:14:94: dd:71:13:08:6e:22:a6:84:71:a8:80:93:8f:8e:0c:a3:8c:e2: 78:1b:55:90:93:0f:13:e2:73:38:b8:b0:e7:e7:63:a0:95:e2: e1:c3:9c:fa:bc:39:1b:0e:29:69:74:05:89:f8:0c:94:bf:9e: 92:b1:16:6d:51:09:df:a7:4a:bb:dd:16:cb:38:04:cb:fe:3c: fe:93:9e:5a:bd:18:5c:4c:04:a7:9c:68:5d:90:17:c2:a4:17: 4c:10:c2:d9:02:4e:de:d8:1a:ef:54:c4:36:01:99:d4:59:08: 2a:cd:df:dd:1a:fe:c6:0e:fc:7d:45:25:be:d8:ff:7f:b5:6e: 0c:16:28:69:60:52:67:87:b9:cb:7e:b9:8c:b1:e7:d9:80:e9: 80:e2:63:10:b6:34:77:45:0e:ca:56:7b:aa:e3:05:c4:58:49: 41:06:7d:0c:e9:93:6c:16:7c:80:e6:fc:bf:2a:5e:34:09:62: 84:14:83:b6:c6:dc:22:99:43:37:84:5d:0a:6f:b7:01:3a:97: b1:6b:9c:61:5e:4a:c7:ec:25:32:33:1f:76:8a:eb:c3:bb:13: 41:db:b4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxelw2phPV1ucRhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzgyN1oXDTI1MDcyOTAyMzgyN1owLzEtMCsGA1UEAxMk NmYzYmI3ZDktOTEwMS00OTNhLTlhZGItYjVkZTEzODM1Njg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCJ18twWCvddE259kOulWZVHOiGU7Cgfoxjs dtFJjvvJwCT6kFCULHyjid9XxZX3PCqeWxk2MZxdtt1E7/dlMponlSU8a7g/26nD e3kxMySfxJuCkuty0OHNJdml8xRoNKU2c5Yd//CsArfEApG8r+s7vzw8uX+pQrSH hoyTrjzEICU9/iXvPcEWyJ5QWupwpGxk8tyFCqcM2GK6thYc/ruW39iIAElc1+VV T7RM26YO6YOmqpBAomlWCqiUaR9dkyu7iKLAZUvkVNabdojxKC1gaxWn68LnDBC2 Xn7LaRFBfklNAU7ekHEw9iWi5jG/me+2E3okpSGdOy+cAc7fOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Fkh53M1f/YH1j9fRlFbsltKL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhjZjhjNDUtNjk0NC0z ODllLWE3ZWUtMmYzZDEwZmYwYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABILO6DoD25+SfFTsJuuCMeY7DbhWeqY6d01NI9nEwU5k0YUlN1xEwhu IqaEcaiAk4+ODKOM4ngbVZCTDxPiczi4sOfnY6CV4uHDnPq8ORsOKWl0BYn4DJS/ npKxFm1RCd+nSrvdFss4BMv+PP6Tnlq9GFxMBKecaF2QF8KkF0wQwtkCTt7YGu9U xDYBmdRZCCrN390a/sYO/H1FJb7Y/3+1bgwWKGlgUmeHuct+uYyx59mA6YDiYxC2 NHdFDspWe6rjBcRYSUEGfQzpk2wWfIDm/L8qXjQJYoQUg7bG3CKZQzeEXQpvtwE6 l7FrnGFeSsfsJTIzH3aK68O7E0HbtAk= -----END CERTIFICATE-----Generated at Sun May 4 19:24:55 2025 by rpki-client