$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/132bcbcb-ad79-38a9-830e-123d550bd01a.roa File: 132bcbcb-ad79-38a9-830e-123d550bd01a.roa (raw, json) Hash identifier: uTAej8CZOAvRbOqmb7nQRwCRLHmKKvjzwmY/sV+h26w= Subject key identifier: D0:B0:7E:B4:67:38:C9:8E:88:C0:EF:6B:8C:7B:7E:73:DF:B5:1F:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785055E36B0A634653EF080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/132bcbcb-ad79-38a9-830e-123d550bd01a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.79.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:05:5e:36:b0:a6:34:65:3e:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4d557a19-6040-45d0-9056-0250f45a6bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:6d:1b:37:ce:f8:e3:d3:e7:ad:52:47:b1: 42:78:97:12:43:ed:8e:86:a3:e1:b4:11:46:0f:ce: 6a:1c:f0:14:24:00:7c:08:cf:9d:0e:c4:8f:52:72: 29:75:79:2f:46:d1:96:0a:77:3d:46:87:6a:fd:78: 66:c7:54:6c:91:71:00:d7:33:20:3c:08:c8:6f:ab: 5e:66:d4:12:ae:20:6e:78:83:d4:04:d1:8c:14:f4: e6:e3:56:c7:d8:28:75:08:36:1e:1f:95:cf:b1:0b: 2b:3a:54:c5:73:fa:0a:99:43:a5:39:e7:62:9f:1b: fe:84:a1:65:9c:1b:8d:70:e8:02:13:55:de:61:cf: 04:84:e5:44:50:77:43:85:68:0a:14:15:a7:fc:b5: 0f:07:c7:31:53:f7:63:35:17:bb:ab:bc:4f:49:8c: bf:5c:ca:95:e3:57:b8:65:46:eb:1c:a8:23:e5:e8: df:c3:c0:42:d3:fa:0c:13:5c:bf:1a:d0:81:df:11: 66:f0:ff:1a:b9:d5:08:96:28:71:e4:e1:50:f9:d2: 0b:3f:39:d8:d9:3c:bb:dc:1e:ea:da:9c:6e:4b:83: cd:17:79:44:6c:a4:11:9f:39:df:df:19:fb:2c:f8: 87:0d:0c:86:b2:a4:18:9a:ee:4c:6e:af:43:e3:3a: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B0:7E:B4:67:38:C9:8E:88:C0:EF:6B:8C:7B:7E:73:DF:B5:1F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/132bcbcb-ad79-38a9-830e-123d550bd01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.79.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:78:94:79:2b:b4:e7:42:17:53:2b:6a:1a:f8:1b:ec:aa:5a: 3e:80:1d:e4:13:ed:2f:f0:1b:7f:56:cb:7b:c0:ce:fa:ff:d3: a0:1b:cd:a6:95:d7:38:ca:3d:f0:c4:42:79:68:b8:22:02:34: 57:f6:bd:db:c9:32:3a:92:d5:c5:85:4d:34:8a:da:fb:23:78: 09:e7:f5:14:e9:d3:c3:aa:84:09:ae:38:a2:d6:f3:32:29:60: 08:ad:08:ad:a6:34:7e:80:fe:90:7d:3a:2a:52:ad:cc:8a:5e: c0:d1:aa:5f:96:49:25:97:55:32:47:2a:78:75:37:09:e3:fe: c9:dc:1a:7f:2e:b9:c6:20:8f:20:78:e4:12:d8:81:ce:10:42: fe:fd:43:ae:a5:de:c7:b9:90:e7:a5:fd:d3:cf:b3:0f:e8:b5: c7:de:fc:b8:85:79:e5:fd:a1:47:8d:ad:28:95:b0:a0:90:d1: 9c:d4:c4:cb:38:ab:27:6d:66:56:8e:73:73:94:6e:99:43:07: bc:64:46:5d:52:78:db:2e:b2:d7:49:39:6e:62:b3:81:99:fc: 93:d7:5d:ce:b1:2c:38:e4:46:b7:7a:22:09:98:00:56:d8:a5: 53:d0:a6:cf:3c:06:45:c1:02:42:fc:86:9a:83:38:9f:b5:50: 32:47:b9:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQVeNrCmNGU+8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGQ1NTdhMTktNjA0MC00NWQwLTkwNTYtMDI1MGY0NWE2YmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy5tGzfO+OPT561SR7FCeJcSQ+2OhqPhtBFG D85qHPAUJAB8CM+dDsSPUnIpdXkvRtGWCnc9Rodq/Xhmx1RskXEA1zMgPAjIb6te ZtQSriBueIPUBNGMFPTm41bH2Ch1CDYeH5XPsQsrOlTFc/oKmUOlOedinxv+hKFl nBuNcOgCE1XeYc8EhOVEUHdDhWgKFBWn/LUPB8cxU/djNRe7q7xPSYy/XMqV41e4 ZUbrHKgj5ejfw8BC0/oME1y/GtCB3xFm8P8audUIlihx5OFQ+dILPznY2Ty73B7q 2pxuS4PNF3lEbKQRnznf3xn7LPiHDQyGsqQYmu5Mbq9D4zp2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCwfrRnOMmOiMDva4x7fnPftR/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTMyYmNiY2ItYWQ3OS0z OGE5LTgzMGUtMTIzZDU1MGJkMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN4lHkrtOdCF1Mrahr4G+yqWj6AHeQT7S/wG39Wy3vAzvr/06AbzaaV 1zjKPfDEQnlouCICNFf2vdvJMjqS1cWFTTSK2vsjeAnn9RTp08OqhAmuOKLW8zIp YAitCK2mNH6A/pB9OipSrcyKXsDRql+WSSWXVTJHKnh1Nwnj/sncGn8uucYgjyB4 5BLYgc4QQv79Q66l3se5kOel/dPPsw/otcfe/LiFeeX9oUeNrSiVsKCQ0ZzUxMs4 qydtZlaOc3OUbplDB7xkRl1SeNsustdJOW5is4GZ/JPXXc6xLDjkRrd6IgmYAFbY pVPQps88BkXBAkL8hpqDOJ+1UDJHuQg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:17:06 2025 by rpki-client