$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01dfebe4-8bbc-3d3d-af0c-5d369c99e55e.roa File: 01dfebe4-8bbc-3d3d-af0c-5d369c99e55e.roa (raw, json) Hash identifier: Epf77RSWlHV9l0sxs2wcVddp24NaO1XNLKiXtaYdZ7I= Subject key identifier: A0:2F:04:D2:39:80:AB:89:B3:7F:0C:F9:A8:57:45:30:10:A7:A2:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E2070F8A4A47107ED400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01dfebe4-8bbc-3d3d-af0c-5d369c99e55e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.81.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e2:07:0f:8a:4a:47:10:7e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=43fa5c8c-1bc5-4be4-972e-fcebf93d5fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:a3:87:d5:90:7d:d4:0c:7a:90:8b:db:14: 9e:7d:1d:ee:fe:af:1d:8d:0b:5d:de:92:c1:2d:35: d8:d3:d4:37:85:9f:7e:d1:72:e1:f3:f8:73:9f:d9: 75:f4:53:99:f9:bb:6d:bf:b7:2a:9c:c8:59:4e:a7: ec:79:63:e0:a4:f3:ee:f3:40:79:aa:3d:24:f4:2f: 85:47:e6:36:15:f4:6c:17:fa:c4:b4:c5:6f:0c:48: 6e:2a:c9:cf:2c:29:28:12:67:a2:93:15:e6:f7:cb: 2f:7b:70:24:7e:73:6a:5a:75:e0:87:ca:c2:46:30: f6:e5:ba:f0:d4:8a:d8:b3:bf:b2:04:85:cc:69:6f: d9:30:b8:5b:52:31:63:5c:9e:0c:33:1e:5a:43:33: fc:80:2e:60:ff:e0:44:42:46:e3:6c:51:5e:06:73: 06:49:3c:75:29:c8:fb:8c:9f:e3:ed:6e:8e:f4:db: 93:e4:f9:c9:f8:80:f0:b5:64:fb:59:fe:b6:28:78: 1f:6b:b5:f3:8f:dd:07:be:d5:73:ba:1a:fa:f2:80: 12:d1:38:b9:76:c8:9d:b6:12:98:74:15:e9:ed:78: 01:78:32:6b:f2:a2:4e:71:e5:76:86:f5:bf:63:85: 9c:4a:6f:91:6b:da:c2:f6:56:7d:c9:fa:39:69:f6: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2F:04:D2:39:80:AB:89:B3:7F:0C:F9:A8:57:45:30:10:A7:A2:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01dfebe4-8bbc-3d3d-af0c-5d369c99e55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.81.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b2:bf:5c:c1:2d:b8:10:b3:5b:71:44:e8:5d:2e:19:a1:1d: 6a:d1:8c:f9:9d:9c:b7:a1:02:9e:e6:a2:fb:98:54:c7:57:1c: f4:17:e9:7f:78:3d:47:35:3a:39:4f:a1:d0:fc:48:cc:b1:2d: e7:8e:89:9f:82:a6:80:e5:00:30:32:69:cf:42:98:3a:2d:8c: 1a:8d:5c:b8:36:96:82:29:78:30:8b:9e:86:40:a5:0e:a3:ae: e8:f9:16:80:dd:0a:f0:7b:02:8c:ce:c4:5b:7d:94:c8:76:a8: 09:1d:f4:8d:6d:c0:2f:ee:ec:14:dd:ba:7d:88:37:03:02:e1: ef:48:bb:98:55:25:64:36:5f:b5:d5:a5:cb:d2:a0:ce:26:50: ef:66:21:fe:53:f2:bf:da:07:cd:47:e0:ff:5b:2f:2c:f6:fb: 64:17:2d:d8:60:2a:bf:97:ad:67:5a:d6:70:39:63:37:86:01: 16:11:55:4d:4b:43:51:b3:24:7d:3f:ae:8a:e2:8e:6f:94:5b: ca:58:d1:2d:cd:bd:93:7c:3f:6c:5a:b0:2e:1e:8f:b7:7f:06: 41:1f:5d:5a:b3:40:d2:6e:ec:c0:98:94:44:7a:a0:92:a7:a6: 8f:ba:12:08:80:5b:bc:0e:6c:d5:cf:93:ea:29:5e:62:b1:44: 1c:da:54:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOIHD4pKRxB+1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDNmYTVjOGMtMWJjNS00YmU0LTk3MmUtZmNlYmY5M2Q1ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6ajh9WQfdQMepCL2xSefR3u/q8djQtd3pLB LTXY09Q3hZ9+0XLh8/hzn9l19FOZ+bttv7cqnMhZTqfseWPgpPPu80B5qj0k9C+F R+Y2FfRsF/rEtMVvDEhuKsnPLCkoEmeikxXm98sve3AkfnNqWnXgh8rCRjD25brw 1IrYs7+yBIXMaW/ZMLhbUjFjXJ4MMx5aQzP8gC5g/+BEQkbjbFFeBnMGSTx1Kcj7 jJ/j7W6O9NuT5PnJ+IDwtWT7Wf62KHgfa7Xzj90HvtVzuhr68oAS0Ti5dsidthKY dBXp7XgBeDJr8qJOceV2hvW/Y4WcSm+Ra9rC9lZ9yfo5afZQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAvBNI5gKuJs38M+ahXRTAQp6LYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDFkZmViZTQtOGJiYy0z ZDNkLWFmMGMtNWQzNjljOTllNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuyv1zBLbgQs1txROhdLhmhHWrRjPmdnLehAp7movuYVMdXHPQX6X94 PUc1OjlPodD8SMyxLeeOiZ+CpoDlADAyac9CmDotjBqNXLg2loIpeDCLnoZApQ6j ruj5FoDdCvB7AozOxFt9lMh2qAkd9I1twC/u7BTdun2INwMC4e9Iu5hVJWQ2X7XV pcvSoM4mUO9mIf5T8r/aB81H4P9bLyz2+2QXLdhgKr+XrWda1nA5YzeGARYRVU1L Q1GzJH0/rorijm+UW8pY0S3NvZN8P2xasC4ej7d/BkEfXVqzQNJu7MCYlER6oJKn po+6EgiAW7wObNXPk+opXmKxRBzaVEw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:36 2025 by rpki-client