$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff04c659-ca43-38ac-a7b8-115fb9507b1b.roa File: ff04c659-ca43-38ac-a7b8-115fb9507b1b.roa (raw, json) Hash identifier: H1OsQcAsy90Ok2Xo2NtKCNTn0EwuoK+vajzr3ezKtAI= Subject key identifier: 44:40:BB:CC:5E:B1:22:70:ED:05:11:E9:18:C9:FE:3F:30:53:E4:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24AB70A9292246BB1BD500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff04c659-ca43-38ac-a7b8-115fb9507b1b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.199.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ab:70:a9:29:22:46:bb:1b:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=ecca179a-742a-46f2-87a3-a3e3b34d9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6e:ab:b6:08:35:af:5e:82:e3:0f:c8:22:7c: 7c:88:f9:85:b8:cd:88:8c:25:3e:12:ed:28:c1:52: da:a1:39:d3:28:c7:3d:ca:82:9d:10:e1:61:e4:94: a0:61:3f:3e:a3:b8:72:64:a1:01:a4:c3:de:70:81: 8d:b4:c3:e4:a6:c7:01:b2:fa:5f:18:af:06:c0:2a: d2:de:26:30:e6:1d:15:64:2f:ec:eb:e4:87:12:75: ed:dd:61:d6:b9:d2:b0:c5:c0:40:db:15:49:f1:06: ea:eb:28:fa:ba:5b:32:da:cb:2c:4c:d3:43:d4:b7: 7a:b6:cc:b5:b6:d8:3a:00:d6:b8:7a:0f:ee:a2:1d: c6:74:4d:af:c8:6c:7a:c4:58:e3:b1:f4:f0:2d:f6: 8d:b7:56:ae:c0:ab:8c:51:60:3f:eb:0b:a0:cf:70: 3a:b0:5d:3c:d1:b1:70:79:f3:3f:5f:2a:54:3e:bc: 11:8f:4c:db:20:6b:0e:17:ec:f3:61:74:6b:45:72: 3b:a8:6d:bc:b2:c0:72:a1:21:ed:00:1f:63:c6:6d: 64:91:f6:73:db:37:63:72:71:a0:e8:db:57:ca:95: b9:a3:06:3d:72:33:9b:3a:40:7f:92:5d:3e:18:4d: b3:e0:a6:a0:c4:7b:83:17:bb:41:bc:29:30:20:00: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:40:BB:CC:5E:B1:22:70:ED:05:11:E9:18:C9:FE:3F:30:53:E4:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff04c659-ca43-38ac-a7b8-115fb9507b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b2:8c:bf:09:d0:c7:dd:41:67:87:3c:e3:af:54:af:f1:67: 94:34:34:c5:a5:40:6a:78:2d:01:86:1b:da:53:4f:5c:a9:98: e2:3a:b6:89:0b:62:6b:7e:bf:eb:f6:a1:8f:21:5c:24:58:ae: e4:d5:68:34:5f:e8:95:b9:c0:d0:82:c5:46:21:b0:c7:a0:0e: e2:ce:e1:47:21:a2:b5:84:65:63:c9:37:50:6b:38:a5:1d:31: 65:9d:14:22:87:ec:71:2b:dc:3f:23:f5:37:1a:02:8c:9a:ad: b8:40:27:c5:2c:ec:3b:dc:23:f8:ff:01:13:26:85:b9:6a:1f: 4e:6f:a9:bf:47:1f:dd:d7:98:7f:8a:03:00:7b:20:58:d4:8c: ac:94:a1:83:0e:24:c9:d7:6d:e5:11:de:39:fa:e8:fe:7a:4f: 16:c2:e1:5a:26:7a:97:b2:c6:cf:8e:87:b4:f0:35:38:af:99: bc:fa:5e:e1:4a:1a:bc:10:27:3d:7a:1f:94:76:43:e3:61:be: 17:a0:4b:37:45:6b:07:22:48:74:ef:59:56:8b:9a:86:10:fc: 74:63:aa:d5:be:01:d7:45:d3:f3:69:b7:4a:64:7a:c3:6f:c5: e4:61:55:78:86:60:58:8a:da:38:b9:96:8c:10:31:1d:21:84: 3d:f6:f4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKtwqSkiRrsb1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWNjYTE3OWEtNzQyYS00NmYyLTg3YTMtYTNlM2IzNGQ5YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh26rtgg1r16C4w/IInx8iPmFuM2IjCU+Eu0o wVLaoTnTKMc9yoKdEOFh5JSgYT8+o7hyZKEBpMPecIGNtMPkpscBsvpfGK8GwCrS 3iYw5h0VZC/s6+SHEnXt3WHWudKwxcBA2xVJ8Qbq6yj6ulsy2sssTNND1Ld6tsy1 ttg6ANa4eg/uoh3GdE2vyGx6xFjjsfTwLfaNt1auwKuMUWA/6wugz3A6sF080bFw efM/XypUPrwRj0zbIGsOF+zzYXRrRXI7qG28ssByoSHtAB9jxm1kkfZz2zdjcnGg 6NtXypW5owY9cjObOkB/kl0+GE2z4KagxHuDF7tBvCkwIADqVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERAu8xesSJw7QUR6RjJ/j8wU+TmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYwNGM2NTktY2E0My0z OGFjLWE3YjgtMTE1ZmI5NTA3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAayjL8J0MfdQWeHPOOvVK/xZ5Q0NMWlQGp4LQGGG9pTT1ypmOI6tokL Ymt+v+v2oY8hXCRYruTVaDRf6JW5wNCCxUYhsMegDuLO4UchorWEZWPJN1BrOKUd MWWdFCKH7HEr3D8j9TcaAoyarbhAJ8Us7DvcI/j/ARMmhblqH05vqb9HH93XmH+K AwB7IFjUjKyUoYMOJMnXbeUR3jn66P56TxbC4Vomepeyxs+Oh7TwNTivmbz6XuFK GrwQJz16H5R2Q+NhvhegSzdFawciSHTvWVaLmoYQ/HRjqtW+AddF0/Npt0pkesNv xeRhVXiGYFiK2ji5lowQMR0hhD329FQ= -----END CERTIFICATE-----Generated at Sun May 4 12:00:34 2025 by rpki-client