$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1203c86c-05fc-38eb-bdbd-f63512bc2d21.roa File: 1203c86c-05fc-38eb-bdbd-f63512bc2d21.roa (raw, json) Hash identifier: xDDNB4jkIF1kLyTpQqhU9lCHfPum5ZbOLb9r0xUw7dE= Subject key identifier: FF:96:FD:CF:11:00:81:20:2A:DA:7B:2C:7B:50:36:B9:64:4B:EA:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB67575375580ED62A44E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1203c86c-05fc-38eb-bdbd-f63512bc2d21.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.119.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:67:57:53:75:58:0e:d6:2a:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cf2e3ad8-a38c-4cf8-afa7-af5c24f4ecad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:a0:02:8b:6e:dc:ce:85:7a:d5:63:cd:a9: f8:48:0d:da:2b:44:ad:53:9e:33:a2:32:31:c5:4c: 1a:5b:b3:13:77:77:39:4e:ee:18:63:39:74:c1:87: ca:bc:68:09:30:29:8e:26:a9:1e:a9:0f:d2:ec:f8: 41:ff:ed:7e:d0:44:7d:62:f3:e3:0b:6d:95:ef:f3: 65:c4:53:33:f3:27:9e:ee:d1:3b:de:4d:f7:c9:7a: a5:57:62:db:5f:b5:62:b1:df:90:1d:6a:b7:51:fd: 2a:58:d8:9c:18:a3:75:46:a5:9f:84:d6:8a:c2:36: cd:db:48:01:a5:a7:0f:70:23:21:93:22:0c:2b:29: 57:ab:80:c0:1a:c1:86:79:11:2c:5f:92:89:37:cd: de:fa:fa:16:88:d2:84:4c:c7:4b:4f:83:66:a8:a9: 1b:45:2c:c9:12:b2:84:6f:b2:7c:34:06:80:48:6b: 4e:98:58:d8:ad:cc:19:29:60:5e:f5:12:fe:f6:6b: a9:e0:af:d2:8b:83:0d:b2:aa:a0:ce:3b:64:97:c3: 52:d1:dc:f9:dc:ab:5d:36:ea:44:b1:a9:3e:49:e7: 34:60:eb:17:0e:ca:f9:ca:4d:98:55:6a:24:f1:0a: 80:88:86:1d:c4:14:20:ad:c7:79:40:d1:b9:45:9e: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:96:FD:CF:11:00:81:20:2A:DA:7B:2C:7B:50:36:B9:64:4B:EA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1203c86c-05fc-38eb-bdbd-f63512bc2d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:86:be:04:5b:02:ef:fd:dc:8a:0e:10:ef:f2:65:c3:f7:7b: 7c:45:24:53:df:6d:c1:70:3f:a8:fc:2c:55:45:cc:d8:06:0c: eb:ec:a2:8e:10:5f:68:1e:b6:75:b4:33:38:df:8c:b5:6d:ea: ca:ca:39:40:95:4a:ef:0f:ac:56:66:58:ee:9e:c3:e7:6d:9c: b5:ae:bf:c5:39:41:5a:94:1c:d6:da:81:b2:61:6d:f6:7d:ec: 60:d0:c2:9f:5f:07:ce:6c:a4:84:48:75:4a:27:0b:94:b5:61: ee:11:11:23:a2:63:3a:86:0e:2b:ba:bf:2a:a0:b9:24:0a:8a: 18:68:20:cf:f5:3c:5f:2b:af:12:29:e5:85:72:9e:fb:2f:4b: 70:27:5e:ba:5a:46:7a:e9:40:21:b7:e9:3b:8f:8b:70:d6:4b: c4:f2:4b:4c:44:b4:b3:dd:c6:38:94:7c:9a:ba:1e:0f:cb:bf: 8c:54:ab:46:13:fc:1e:76:1b:04:70:af:8b:66:9a:a3:56:ea: 3d:f3:3b:39:4c:0d:c4:bd:50:fb:4d:a4:38:99:3c:af:d8:fe: af:77:93:33:96:50:85:b1:65:c8:37:c6:fe:6a:6d:eb:bb:b8: 53:48:d8:28:3c:45:4b:ed:36:82:a6:80:45:4a:48:06:bc:f6: fa:35:86:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2dXU3VYDtYqROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2YyZTNhZDgtYTM4Yy00Y2Y4LWFmYTctYWY1YzI0ZjRlY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoygAotu3M6FetVjzan4SA3aK0StU54zojIx xUwaW7MTd3c5Tu4YYzl0wYfKvGgJMCmOJqkeqQ/S7PhB/+1+0ER9YvPjC22V7/Nl xFMz8yee7tE73k33yXqlV2LbX7Visd+QHWq3Uf0qWNicGKN1RqWfhNaKwjbN20gB pacPcCMhkyIMKylXq4DAGsGGeREsX5KJN83e+voWiNKETMdLT4NmqKkbRSzJErKE b7J8NAaASGtOmFjYrcwZKWBe9RL+9mup4K/Si4MNsqqgzjtkl8NS0dz53KtdNupE sak+Sec0YOsXDsr5yk2YVWok8QqAiIYdxBQgrcd5QNG5RZ4MrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+W/c8RAIEgKtp7LHtQNrlkS+pLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTIwM2M4NmMtMDVmYy0z OGViLWJkYmQtZjYzNTEyYmMyZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIncgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKGvgRbAu/93IoOEO/yZcP3e3xFJFPfbcFwP6j8LFVFzNgGDOvsoo4Q X2getnW0MzjfjLVt6srKOUCVSu8PrFZmWO6ew+dtnLWuv8U5QVqUHNbagbJhbfZ9 7GDQwp9fB85spIRIdUonC5S1Ye4RESOiYzqGDiu6vyqguSQKihhoIM/1PF8rrxIp 5YVynvsvS3AnXrpaRnrpQCG36TuPi3DWS8TyS0xEtLPdxjiUfJq6Hg/Lv4xUq0YT /B52GwRwr4tmmqNW6j3zOzlMDcS9UPtNpDiZPK/Y/q93kzOWUIWxZcg3xv5qbeu7 uFNI2Cg8RUvtNoKmgEVKSAa89vo1hi0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:14 2025 by rpki-client