$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/129f7563-b073-381a-8236-32b93510ee1b.roa File: 129f7563-b073-381a-8236-32b93510ee1b.roa (raw, json) Hash identifier: ngBIJAFJ4jPeGyuMbDTjhYqZNYWffjNDH3JMeJJ69c0= Subject key identifier: BB:B9:2E:D6:3F:78:3C:C4:33:21:E9:89:9F:F0:48:B7:21:A3:35:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E4E4002F5329DDDC6B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/129f7563-b073-381a-8236-32b93510ee1b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.132.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:e4:00:2f:53:29:dd:dc:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b3f4609b-62bd-49b6-9fdb-4a21bb118a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:e9:28:b1:ce:39:78:cd:4a:75:79:11:88: ad:c9:18:3b:33:14:66:45:62:63:31:5e:52:88:ef: 31:a3:95:64:ac:d2:64:39:bf:28:8d:8b:82:54:f3: 70:69:6d:9c:0a:6b:78:f7:23:c5:c4:e2:af:e4:d6: 9e:cb:36:4d:01:0d:06:ac:bf:e4:e7:a4:aa:57:ac: 07:c0:49:b8:38:20:e9:bb:6c:00:d4:09:a5:9e:a3: 09:2c:18:4f:13:d2:62:43:d7:71:51:1a:07:47:f3: 2d:9d:1c:15:42:0d:a1:be:01:f1:e7:82:c8:a3:7f: 7f:a0:3f:82:ec:4d:ae:71:5f:25:06:7a:41:56:c4: f6:27:79:9f:26:d8:1e:95:d9:19:c5:ea:7a:a6:e3: b1:75:1a:e1:61:20:d4:f3:20:72:73:92:d4:03:ae: 03:3a:44:dc:96:5c:44:2d:bb:0f:9a:a4:0a:69:6c: d5:27:71:6c:3e:1e:af:45:c6:58:3d:0f:52:d6:8a: f5:10:68:5d:71:63:c7:33:45:60:5e:a8:d8:c1:43: 9d:38:6f:5f:fd:29:4b:cb:b5:4e:45:9b:63:bf:d6: 66:bb:ba:7b:5b:b2:5c:37:1d:66:2e:74:1e:ec:4b: b5:e2:74:27:3d:03:a4:fd:88:32:45:6f:c9:3c:be: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:2E:D6:3F:78:3C:C4:33:21:E9:89:9F:F0:48:B7:21:A3:35:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/129f7563-b073-381a-8236-32b93510ee1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:05:9a:3a:3f:c9:6d:c0:5f:a6:1f:dd:b4:d3:57:cd:cc:b3: 39:44:ac:cf:a7:44:d1:fb:a0:e2:5e:09:79:e4:0d:50:28:96: 49:8d:07:9e:e5:d5:2e:ce:77:de:48:be:5d:55:fc:43:bd:cc: 90:b7:3d:db:1e:e2:b2:ea:4f:11:cb:7a:fe:d8:0a:34:47:03: 9d:ff:44:76:3f:db:1f:76:f7:06:74:c8:b1:21:9b:1e:d2:bc: a0:39:38:af:bb:c6:58:d0:6f:38:80:33:a3:c3:2a:a2:ce:44: 16:c9:28:52:5e:18:17:7c:11:61:1b:7b:d6:61:7e:45:b8:06: b7:62:01:e6:7a:9a:0b:21:25:e1:18:2b:a3:86:91:42:82:05: 99:d9:59:01:41:01:f6:61:63:79:7c:90:48:09:db:98:74:5c: e5:5e:b1:bc:9f:53:0d:97:a4:95:e5:c1:53:b2:fe:2a:25:89: ae:ff:19:fa:81:73:b0:21:f3:b9:46:49:1c:9d:5a:43:65:f1: c3:a7:62:d7:f2:42:98:21:e8:bb:af:12:3a:7f:af:02:3b:66: 9d:43:1c:34:65:25:2b:ad:a4:78:e1:2f:e2:a9:a8:e5:be:c4: 0f:bd:42:d6:62:93:a3:d0:d1:8c:c5:21:66:cf:65:70:38:3d: f4:34:8e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOTkAC9TKd3ca4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjNmNDYwOWItNjJiZC00OWI2LTlmZGItNGEyMWJiMTE4YTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuLpKLHOOXjNSnV5EYityRg7MxRmRWJjMV5S iO8xo5VkrNJkOb8ojYuCVPNwaW2cCmt49yPFxOKv5NaeyzZNAQ0GrL/k56SqV6wH wEm4OCDpu2wA1AmlnqMJLBhPE9JiQ9dxURoHR/MtnRwVQg2hvgHx54LIo39/oD+C 7E2ucV8lBnpBVsT2J3mfJtgeldkZxep6puOxdRrhYSDU8yByc5LUA64DOkTcllxE LbsPmqQKaWzVJ3FsPh6vRcZYPQ9S1or1EGhdcWPHM0VgXqjYwUOdOG9f/SlLy7VO RZtjv9Zmu7p7W7JcNx1mLnQe7Eu14nQnPQOk/YgyRW/JPL79swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu5LtY/eDzEMyHpiZ/wSLchozU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTI5Zjc1NjMtYjA3My0z ODFhLTgyMzYtMzJiOTM1MTBlZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYFmjo/yW3AX6Yf3bTTV83MszlErM+nRNH7oOJeCXnkDVAolkmNB57l 1S7Od95Ivl1V/EO9zJC3Pdse4rLqTxHLev7YCjRHA53/RHY/2x929wZ0yLEhmx7S vKA5OK+7xljQbziAM6PDKqLORBbJKFJeGBd8EWEbe9ZhfkW4BrdiAeZ6mgshJeEY K6OGkUKCBZnZWQFBAfZhY3l8kEgJ25h0XOVesbyfUw2XpJXlwVOy/iolia7/GfqB c7Ah87lGSRydWkNl8cOnYtfyQpgh6LuvEjp/rwI7Zp1DHDRlJSutpHjhL+KpqOW+ xA+9QtZik6PQ0YzFIWbPZXA4PfQ0juc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:29 2025 by rpki-client