$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa File: 1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa (raw, json) Hash identifier: jcnWcj0pyp4TOuG6hY4pBRIGlEaqOm+Oisa83HBLBfk= Subject key identifier: 54:5C:3A:D1:4F:2E:92:EB:4D:DC:18:E9:5B:44:7E:27:30:51:DF:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785398CA6AFF685FC85EB40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.88.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:39:8c:a6:af:f6:85:fc:85:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0b569ef2-0caf-4881-b205-fe01f12cc639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5c:f7:9a:15:51:9b:9a:01:da:cd:a8:e5:0b: 3e:d5:8f:42:3f:69:42:d3:33:63:b3:0e:48:a2:a0: 3a:59:c1:f7:56:c0:2f:21:db:93:23:fa:ac:9e:24: 08:ec:ba:7f:f4:fd:87:b4:6a:ad:75:8b:06:1b:a3: 72:0d:3d:1b:86:22:0e:d6:83:64:07:f0:2f:f7:0f: 90:4b:0f:b1:c7:6a:37:e7:69:54:8e:f0:97:9e:a8: 4e:25:d9:3b:99:28:a6:00:ec:e9:b6:2c:45:88:72: 39:c8:69:d8:60:6c:cd:77:47:f8:d7:cd:6f:dd:ff: 79:5a:82:ec:8e:74:fe:61:02:05:1d:bb:c3:74:e6: dd:4c:2c:01:31:eb:71:11:95:93:9b:b3:26:01:19: b3:12:d5:74:ff:ec:a5:da:87:2b:61:e7:f6:08:8b: d0:ba:2d:84:8e:6b:ab:f5:cb:51:b6:69:62:cd:95: 87:dc:38:ba:3a:a5:78:3f:51:26:ca:81:88:dd:86: 4a:35:54:e4:36:1c:85:18:1c:ad:3a:ce:0a:e1:ff: b9:94:01:f9:4d:a7:6f:a3:e1:cf:1f:31:b5:e7:25: 6d:ab:89:9c:fc:7e:6f:74:99:7d:82:e5:dc:51:07: 78:c3:d0:28:d6:a8:59:f8:40:54:38:13:3c:81:de: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:3A:D1:4F:2E:92:EB:4D:DC:18:E9:5B:44:7E:27:30:51:DF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1f6e4782-aff4-35a8-bac4-8972bcd1783f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e1:fb:7a:f7:49:08:02:7e:01:fe:d6:ec:15:e4:05:9f:5d: 99:e9:41:c7:9a:12:bf:42:53:bf:64:70:e1:35:ba:03:05:6a: 78:d8:40:8b:ea:f1:83:8c:96:94:de:4d:2b:99:17:52:44:db: 90:6f:1b:75:9e:5b:db:34:c3:43:b2:a2:a9:c0:30:f9:63:f1: 3a:ac:a9:93:28:36:74:3a:70:03:66:73:4e:ad:cc:59:b1:e2: 1f:fc:7f:75:14:02:38:75:ab:c8:e7:ff:b9:69:06:e0:1c:f0: 18:b9:2a:96:f1:bf:f8:ac:30:dc:a6:aa:50:a1:6f:c8:27:e9: 30:5b:d3:a2:53:76:ff:13:6d:32:b3:29:89:d5:e6:07:f7:f6: 28:96:1e:5b:1c:a8:80:06:7c:bd:ea:7e:f3:4e:5c:00:2d:18: 42:ec:2d:60:c4:f5:aa:cc:4b:53:37:10:6a:ee:23:80:29:73: 33:a9:79:fe:ef:20:e3:41:a2:d9:73:b6:3f:14:a6:26:75:36: 30:ce:ee:c0:8d:78:4e:9d:cb:25:e8:32:70:7e:bb:c1:f1:dd: f4:e6:20:4a:c5:34:17:58:58:f8:04:46:01:f4:a8:8a:9d:85: fa:7a:3e:c5:0f:60:d7:58:31:cb:0d:2f:26:01:00:9e:26:db: f0:fb:08:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTmMpq/2hfyF60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGI1NjllZjItMGNhZi00ODgxLWIyMDUtZmUwMWYxMmNjNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFz3mhVRm5oB2s2o5Qs+1Y9CP2lC0zNjsw5I oqA6WcH3VsAvIduTI/qsniQI7Lp/9P2HtGqtdYsGG6NyDT0bhiIO1oNkB/Av9w+Q Sw+xx2o352lUjvCXnqhOJdk7mSimAOzptixFiHI5yGnYYGzNd0f4181v3f95WoLs jnT+YQIFHbvDdObdTCwBMetxEZWTm7MmARmzEtV0/+yl2ocrYef2CIvQui2Ejmur 9ctRtmlizZWH3Di6OqV4P1EmyoGI3YZKNVTkNhyFGBytOs4K4f+5lAH5Tadvo+HP HzG15yVtq4mc/H5vdJl9guXcUQd4w9Ao1qhZ+EBUOBM8gd7zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRcOtFPLpLrTdwY6VtEficwUd/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWY2ZTQ3ODItYWZmNC0z NWE4LWJhYzQtODk3MmJjZDE3ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbh+3r3SQgCfgH+1uwV5AWfXZnpQceaEr9CU79kcOE1ugMFanjYQIvq 8YOMlpTeTSuZF1JE25BvG3WeW9s0w0OyoqnAMPlj8TqsqZMoNnQ6cANmc06tzFmx 4h/8f3UUAjh1q8jn/7lpBuAc8Bi5Kpbxv/isMNymqlChb8gn6TBb06JTdv8TbTKz KYnV5gf39iiWHlscqIAGfL3qfvNOXAAtGELsLWDE9arMS1M3EGruI4ApczOpef7v IONBotlztj8UpiZ1NjDO7sCNeE6dyyXoMnB+u8Hx3fTmIErFNBdYWPgERgH0qIqd hfp6PsUPYNdYMcsNLyYBAJ4m2/D7CLA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:41:40 2025 by rpki-client