$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa File: 1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa (raw, json) Hash identifier: aivi3E7pf8vwa0tWKm4dRRFW8BiuX0AWySMuzQI/Syw= Subject key identifier: 0C:C0:DA:1A:E4:E3:D4:AA:10:B5:CA:A3:FF:BB:7D:32:1A:DB:B2:8F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB5CBD8F2C75933EC4E0D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.121.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5c:bd:8f:2c:75:93:3e:c4:e0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dc57ff7c-a114-4120-b731-ef39a0360613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:f7:25:9b:10:1b:9d:55:16:b7:c5:42:c6: 05:6f:64:6e:e9:3c:75:43:e3:79:1e:86:e6:93:80: 12:a5:b1:c3:34:f1:52:d0:cc:e5:4c:09:8a:d4:7f: 98:15:dc:4f:68:57:43:f1:83:72:ad:b2:10:81:dd: 60:7c:96:16:4e:c7:e9:a1:8b:76:f4:1b:88:c9:58: f9:fb:88:d6:c4:b3:ed:1d:d4:df:ea:ec:92:d6:0e: 85:e7:80:9d:d8:de:4a:c5:5b:b6:5f:f0:3b:ee:96: 8a:df:40:58:a7:61:8b:cd:90:ce:7f:5b:2d:7b:c8: 97:07:60:48:26:92:f5:11:bb:61:92:98:b7:cb:10: 89:ea:d6:ef:bb:f8:d6:5b:76:ad:3b:b8:dd:09:73: df:33:25:3e:64:f2:6b:c9:11:60:a8:b7:51:7e:ef: 3c:b6:ff:8c:72:3c:d0:2f:49:f9:98:8c:b5:8c:32: c6:63:11:09:63:ee:5a:41:56:ef:33:9e:b7:81:a8: 48:ce:47:02:0d:b7:7a:6b:06:f2:eb:6f:7a:27:df: ce:18:7a:f6:41:b3:fe:6a:59:c3:6b:cb:2d:5d:2e: 63:62:9d:82:27:2e:b4:5c:61:c7:d8:8b:45:b1:86: b7:4c:d2:ed:20:e1:6d:f7:02:44:29:57:1d:06:ff: a8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C0:DA:1A:E4:E3:D4:AA:10:B5:CA:A3:FF:BB:7D:32:1A:DB:B2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c2a3e0f-5e54-3f6c-b80a-b94af3e5ecd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:86:92:b2:41:57:7f:4d:7e:5e:70:6f:a5:cb:97:c4:e8:4b: 8f:77:22:50:1a:be:5c:14:e3:46:66:40:ef:a6:77:3d:a0:78: e7:9d:16:2f:65:a2:1d:57:20:4d:5f:29:17:f8:ed:80:42:2c: ec:ea:bd:5f:26:62:e6:41:47:31:18:17:55:82:95:49:7e:f1: 6f:a1:fd:99:4b:d2:f6:6c:fe:c0:dc:5a:1a:97:dc:0e:e6:c1: 5a:dd:a0:3d:a1:e4:14:ff:e6:80:61:b3:08:f4:bc:28:54:e7: 28:cc:9b:da:3d:3b:56:c4:38:a3:1d:d1:e4:ac:dd:1a:c0:72: 87:bd:7a:33:fc:e6:fe:e4:ca:d1:b1:4c:cb:83:08:2d:7e:05: c0:20:b5:96:37:bd:43:d6:66:1b:0a:da:47:31:61:76:8c:13: 5e:8a:88:fa:da:7f:22:5e:07:d3:90:ea:ba:68:f4:a4:b0:c3: 4d:fc:49:55:89:58:00:bf:e4:bf:37:33:30:d5:82:c9:1b:ef: c8:25:ef:6f:f3:dd:88:4d:14:e9:4c:aa:de:9b:61:7e:61:9a: 6c:6f:05:10:4f:ec:28:04:43:73:5d:d9:7a:df:c1:4e:db:ae: a3:41:c3:d2:1c:97:ac:eb:a6:8f:0b:31:17:db:f6:a4:4a:12: 99:1c:90:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1y9jyx1kz7E4NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGM1N2ZmN2MtYTExNC00MTIwLWI3MzEtZWYzOWEwMzYwNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zj3JZsQG51VFrfFQsYFb2Ru6Tx1Q+N5Hobm k4ASpbHDNPFS0MzlTAmK1H+YFdxPaFdD8YNyrbIQgd1gfJYWTsfpoYt29BuIyVj5 +4jWxLPtHdTf6uyS1g6F54Cd2N5KxVu2X/A77paK30BYp2GLzZDOf1ste8iXB2BI JpL1Ebthkpi3yxCJ6tbvu/jWW3atO7jdCXPfMyU+ZPJryRFgqLdRfu88tv+McjzQ L0n5mIy1jDLGYxEJY+5aQVbvM563gahIzkcCDbd6awby6296J9/OGHr2QbP+alnD a8stXS5jYp2CJy60XGHH2ItFsYa3TNLtIOFt9wJEKVcdBv+oXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzA2hrk49SqELXKo/+7fTIa27KPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMyYTNlMGYtNWU1NC0z ZjZjLWI4MGEtYjk0YWYzZTVlY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCGkrJBV39Nfl5wb6XLl8ToS493IlAavlwU40ZmQO+mdz2geOedFi9l oh1XIE1fKRf47YBCLOzqvV8mYuZBRzEYF1WClUl+8W+h/ZlL0vZs/sDcWhqX3A7m wVrdoD2h5BT/5oBhswj0vChU5yjMm9o9O1bEOKMd0eSs3RrAcoe9ejP85v7kytGx TMuDCC1+BcAgtZY3vUPWZhsK2kcxYXaME16KiPrafyJeB9OQ6rpo9KSww038SVWJ WAC/5L83MzDVgskb78gl72/z3YhNFOlMqt6bYX5hmmxvBRBP7CgEQ3Nd2XrfwU7b rqNBw9Icl6zrpo8LMRfb9qRKEpkckJ8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:46 2025 by rpki-client