$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc94967f-5d38-3912-9a53-55d2d5519be4.roa File: fc94967f-5d38-3912-9a53-55d2d5519be4.roa (raw, json) Hash identifier: 2y+Bwp0eewfaCFBYNYgPfOesk8N+fJfqGNMpKaw9I+U= Subject key identifier: D5:BF:F8:DF:51:9C:DC:A0:42:1C:95:A8:56:5C:EC:7B:0B:D4:B3:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17B56D925B745B76F9554D8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc94967f-5d38-3912-9a53-55d2d5519be4.roa Signing time: Wed 30 Apr 2025 02:40:25 +0000 ROA not before: Wed 30 Apr 2025 02:40:25 +0000 ROA not after: Tue 29 Jul 2025 02:40:25 +0000 asID: 396982 IP address blocks: 104.197.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7b:56:d9:25:b7:45:b7:6f:95:54:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:40:25 2025 GMT Not After : Jul 29 02:40:25 2025 GMT Subject: CN=49ae5015-eee4-47f2-a60c-55e106b06664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:33:72:6c:71:8b:b0:fb:8a:d9:eb:60:9e: 64:34:7b:cc:8f:75:69:cf:48:8c:6b:f1:ba:e4:bb: fa:94:9e:c3:18:c6:92:ed:f5:c3:5a:54:30:e8:81: 06:de:9c:c2:13:3a:29:f4:6d:8c:5b:a5:16:3b:2a: 1e:41:05:8e:4c:fa:8e:2f:00:78:a8:e0:8c:04:1b: 0a:28:db:07:65:63:f6:1c:bb:0e:71:f1:f9:32:85: 0d:2b:5f:41:a2:45:77:ff:d1:f0:88:f2:6a:36:96: e2:35:4a:52:73:5f:8d:aa:58:43:a1:54:68:2c:e7: d7:a1:13:b0:59:f2:70:2e:58:92:29:95:38:f1:07: 12:7b:44:9a:29:53:e1:f7:82:25:67:23:7c:72:fc: 6e:a1:7e:89:c6:a1:de:b7:21:46:b1:85:fc:e5:d2: 8a:6c:1c:11:f6:f8:19:46:82:ea:21:29:55:e2:55: 6c:1e:82:96:07:98:e0:a1:29:3d:03:d5:b7:d4:f6: 14:9c:2d:36:5e:79:93:62:f8:2a:b7:93:8d:bb:97: f2:d5:05:5e:75:7f:df:3d:cd:26:37:09:d3:7f:de: b0:f2:a4:3f:8d:bb:c5:c2:3a:20:65:f1:7c:ca:3c: 6f:e4:07:57:6e:6c:5c:bb:cd:e7:70:b5:08:c7:64: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BF:F8:DF:51:9C:DC:A0:42:1C:95:A8:56:5C:EC:7B:0B:D4:B3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc94967f-5d38-3912-9a53-55d2d5519be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.197.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2f:4a:d2:4f:8a:cf:5d:09:0f:db:f3:88:65:43:4b:b2:22: d2:1e:6a:63:1d:af:c2:6b:aa:28:d4:d6:23:87:89:42:0c:3d: 93:46:4d:d6:cd:2d:a6:51:5b:01:a2:e9:36:6a:c7:8f:6a:9e: 0c:68:12:12:b4:c4:c7:75:a5:5b:5e:82:09:8f:72:f0:bf:70: 89:d4:ca:be:e6:64:9c:0a:36:d0:69:a7:48:14:95:c2:1b:16: 7e:19:47:d3:87:21:68:98:3f:23:ac:b8:1b:6f:de:6a:45:62: ec:b4:30:63:e5:d4:d3:6d:64:82:70:9b:a1:e7:88:cc:c3:24: ae:25:a9:3e:92:91:ea:f5:ee:b4:e7:ab:31:9e:a9:65:8a:19: 35:e6:38:f7:a2:c4:83:53:6d:60:43:19:0a:e1:57:72:6d:45: 2e:f9:4c:67:8c:3c:06:09:8e:f3:d4:18:8b:7c:5a:ed:24:ad: 1f:1b:2b:68:43:87:41:34:f7:54:38:d6:0d:ed:e8:f7:00:f2: 87:83:28:f6:5b:5b:ba:63:69:f1:0f:95:58:03:e0:60:36:ab: 92:10:1e:7d:bd:1e:ad:fc:9a:b5:f4:7d:56:ff:9e:4f:e7:21: da:3d:71:f4:e3:22:06:bf:78:b6:ab:0a:3b:34:a0:ab:74:99: e1:a9:29:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxe1bZJbdFt2+VVNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyNDAyNVoXDTI1MDcyOTAyNDAyNVowLzEtMCsGA1UEAxMk NDlhZTUwMTUtZWVlNC00N2YyLWE2MGMtNTVlMTA2YjA2NjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfwzcmxxi7D7itnrYJ5kNHvMj3Vpz0iMa/G6 5Lv6lJ7DGMaS7fXDWlQw6IEG3pzCEzop9G2MW6UWOyoeQQWOTPqOLwB4qOCMBBsK KNsHZWP2HLsOcfH5MoUNK19BokV3/9HwiPJqNpbiNUpSc1+NqlhDoVRoLOfXoROw WfJwLliSKZU48QcSe0SaKVPh94IlZyN8cvxuoX6JxqHetyFGsYX85dKKbBwR9vgZ RoLqISlV4lVsHoKWB5jgoSk9A9W31PYUnC02XnmTYvgqt5ONu5fy1QVedX/fPc0m NwnTf96w8qQ/jbvFwjogZfF8yjxv5AdXbmxcu83ncLUIx2SEyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW/+N9RnNygQhyVqFZc7HsL1LNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmM5NDk2N2YtNWQzOC0z OTEyLTlhNTMtNTVkMmQ1NTE5YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYvStJPis9dCQ/b84hlQ0uyItIeamMdr8JrqijU1iOHiUIMPZNGTdbN LaZRWwGi6TZqx49qngxoEhK0xMd1pVteggmPcvC/cInUyr7mZJwKNtBpp0gUlcIb Fn4ZR9OHIWiYPyOsuBtv3mpFYuy0MGPl1NNtZIJwm6HniMzDJK4lqT6Sker17rTn qzGeqWWKGTXmOPeixINTbWBDGQrhV3JtRS75TGeMPAYJjvPUGIt8Wu0krR8bK2hD h0E091Q41g3t6PcA8oeDKPZbW7pjafEPlVgD4GA2q5IQHn29Hq38mrX0fVb/nk/n Ido9cfTjIga/eLarCjs0oKt0meGpKfo= -----END CERTIFICATE-----Generated at Sun May 4 20:04:55 2025 by rpki-client