$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a0428a7-3750-39e0-bc1b-454b4b1ad471.roa File: 1a0428a7-3750-39e0-bc1b-454b4b1ad471.roa (raw, json) Hash identifier: kB7Fp+HW+8apU0QDp5h6KOK454UUNJPf94IDH+FZP1M= Subject key identifier: EF:3A:15:D4:23:75:06:69:EE:23:43:D5:60:21:2D:63:6F:15:78:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78516C0D5BB6EF85AABA9A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a0428a7-3750-39e0-bc1b-454b4b1ad471.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.97.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:16:c0:d5:bb:6e:f8:5a:ab:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3e7dcaac-8c2a-4a88-a29d-a934375b3706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:6c:75:a4:e0:8c:ee:f3:47:a2:a6:4e:c0: 6a:49:b7:db:6e:47:78:1c:27:9a:38:34:4a:ab:23: e7:10:6c:b4:8a:41:6e:2a:05:88:38:b7:d5:4a:09: 21:03:3b:69:a3:a8:d0:c4:69:31:e6:38:78:37:7d: d9:9a:b6:12:5c:b4:42:9e:74:5e:04:10:8e:fa:0f: 48:20:3f:2f:2a:82:46:5d:d8:12:99:9d:10:96:4a: 4f:8c:e2:bd:db:28:81:44:2d:e9:b1:71:81:3c:86: 8d:7c:4d:ef:44:8e:5a:ac:3f:99:ff:05:71:2d:f4: d7:90:54:d9:36:24:0a:bb:60:dc:b4:1b:de:86:1b: f9:ac:88:20:3f:62:29:51:2b:bd:f9:5c:a5:d8:ad: c7:7b:55:ac:8e:67:96:00:33:7a:f6:10:bb:aa:f1: b8:20:34:dd:1d:88:53:f3:d5:dd:47:f3:d6:4b:c6: 2d:14:1a:4b:9b:a1:b3:a6:7b:d6:d4:18:01:d0:5d: aa:00:46:74:d9:76:33:a5:1d:7e:71:11:b8:e5:3f: 1c:b4:09:26:ce:b9:cc:bf:b8:ea:da:82:60:38:cd: ba:50:b2:1e:d1:b0:11:32:27:34:52:4c:9e:33:3f: 1e:08:97:79:e1:6f:bd:04:b2:74:22:92:32:c3:a6: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:15:D4:23:75:06:69:EE:23:43:D5:60:21:2D:63:6F:15:78:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a0428a7-3750-39e0-bc1b-454b4b1ad471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:bf:40:4f:cc:41:df:73:7a:73:e2:0c:ee:95:1c:f9:70:40: 29:e7:a1:ae:ef:b5:ec:11:a3:b1:e6:b8:80:17:e8:c7:41:b8: 66:d8:83:c3:aa:38:7d:fa:12:ac:c3:82:c4:3e:23:bf:3f:ed: 92:27:13:f6:fd:52:a7:b1:78:17:1a:77:6a:df:75:49:b9:38: ac:34:0c:e6:ae:4d:45:f8:d6:f7:7d:e7:8c:43:c0:72:69:7c: ee:29:cf:bd:49:a0:ed:be:a5:68:de:a2:08:a3:97:72:6c:49: 51:40:72:37:45:75:8d:10:d2:89:ad:93:7a:0c:f4:8b:fa:76: 2e:e4:a1:e6:22:1b:11:94:ad:78:27:4e:4d:f6:e8:6e:d3:fc: c4:8d:36:a5:47:9d:de:f5:d0:ac:1e:dc:47:5e:21:8b:0f:f0: 81:51:d5:e3:e8:4e:89:e9:d8:eb:7c:35:f2:39:0a:38:97:86: 9f:43:e9:1c:f2:3d:d7:85:9e:3a:94:d3:82:5d:c2:5a:40:de: 9f:21:63:8c:9a:13:c0:0a:45:ef:d6:86:b2:54:d2:4e:05:93: bb:65:6f:63:1f:80:41:bb:5d:99:8e:87:00:d8:86:a5:a3:ba: 19:dd:41:b7:e9:c1:48:77:47:e4:62:81:5a:b6:38:94:3c:e5: 8d:8e:da:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRbA1btu+FqrqaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2U3ZGNhYWMtOGMyYS00YTg4LWEyOWQtYTkzNDM3NWIzNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipdsdaTgjO7zR6KmTsBqSbfbbkd4HCeaODRK qyPnEGy0ikFuKgWIOLfVSgkhAztpo6jQxGkx5jh4N33ZmrYSXLRCnnReBBCO+g9I ID8vKoJGXdgSmZ0QlkpPjOK92yiBRC3psXGBPIaNfE3vRI5arD+Z/wVxLfTXkFTZ NiQKu2DctBvehhv5rIggP2IpUSu9+Vyl2K3He1WsjmeWADN69hC7qvG4IDTdHYhT 89XdR/PWS8YtFBpLm6GzpnvW1BgB0F2qAEZ02XYzpR1+cRG45T8ctAkmzrnMv7jq 2oJgOM26ULIe0bARMic0UkyeMz8eCJd54W+9BLJ0IpIyw6YigwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO86FdQjdQZp7iND1WAhLWNvFXgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWEwNDI4YTctMzc1MC0z OWUwLWJjMWItNDU0YjRiMWFkNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK/QE/MQd9zenPiDO6VHPlwQCnnoa7vtewRo7HmuIAX6MdBuGbYg8Oq OH36EqzDgsQ+I78/7ZInE/b9UqexeBcad2rfdUm5OKw0DOauTUX41vd954xDwHJp fO4pz71JoO2+pWjeogijl3JsSVFAcjdFdY0Q0omtk3oM9Iv6di7koeYiGxGUrXgn Tk326G7T/MSNNqVHnd710Kwe3EdeIYsP8IFR1ePoTonp2Ot8NfI5CjiXhp9D6Rzy PdeFnjqU04JdwlpA3p8hY4yaE8AKRe/WhrJU0k4Fk7tlb2MfgEG7XZmOhwDYhqWj uhndQbfpwUh3R+RigVq2OJQ85Y2O2h4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:40 2025 by rpki-client