$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa File: 28cafba3-d523-3fda-92a2-893bf9b3ee11.roa (raw, json) Hash identifier: qukAwMCndMC9oZqvJEzB9hl2Bu1oXjMUnOQLnsDuy/g= Subject key identifier: 40:2D:D9:83:9C:C7:7F:2F:66:AA:D6:97:B0:15:CF:30:08:27:D2:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BABAF0B5B5F37D0FB04D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.100.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ba:f0:b5:b5:f3:7d:0f:b0:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=46702632-32f3-4c84-87d7-7bb3fcde4fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:1e:18:09:9e:6b:15:5b:de:35:16:85:56: b9:15:ec:f7:13:1f:16:39:00:9b:59:4f:74:9a:e0: 3c:16:54:04:a8:0a:11:42:2e:94:de:46:9f:41:da: c7:6c:25:d7:df:08:57:8b:87:a6:fb:34:9a:f1:02: e5:b7:a3:6a:19:52:f4:2b:be:0f:23:4d:f2:d1:30: d2:47:50:f4:4c:bd:81:79:82:99:c0:43:f1:cf:d9: 3e:c4:13:0e:48:b6:1d:2e:25:b7:c6:67:0c:2b:67: 7b:9b:21:15:f8:87:91:8c:a1:c8:82:12:8c:74:61: a8:c3:80:75:b0:a5:34:2a:77:55:49:25:9b:90:26: d8:e0:dd:6e:72:44:65:f9:00:41:c2:dd:38:56:86: 80:aa:88:e4:5d:fb:51:b6:71:26:57:12:60:b3:aa: 38:a5:f7:da:92:6b:e7:f9:16:ee:a5:aa:52:b9:71: 13:35:d0:f5:ce:04:12:68:ad:0d:79:f9:16:35:10: 32:f6:3f:e7:3c:e4:4e:ac:2b:70:e7:cf:14:00:d6: b0:50:f3:ce:56:fa:36:67:ae:43:dc:6e:87:44:b9: 81:cf:93:e8:95:7b:f1:1f:8f:5a:6f:ab:f7:0b:4a: d0:ab:ad:bd:81:78:ed:19:a5:65:87:e3:ff:eb:d8: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2D:D9:83:9C:C7:7F:2F:66:AA:D6:97:B0:15:CF:30:08:27:D2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28cafba3-d523-3fda-92a2-893bf9b3ee11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cf:b8:6b:d2:46:bb:47:83:56:e3:ce:d3:9a:d6:74:1e:fc: 73:18:a2:29:35:29:a9:6a:c4:fc:1b:54:d2:59:c8:56:32:66: 1c:16:37:fb:4d:f4:cd:4a:cf:a1:b8:41:e3:21:a5:53:60:32: f5:1b:82:c6:ae:bc:43:89:b5:4f:2e:8a:3c:4c:d2:46:d6:b7: ce:00:b2:7a:9a:35:ed:6d:df:03:7b:cc:36:0e:c5:da:2e:43: 01:88:57:b0:3e:6b:5f:d8:f9:cc:bb:34:6b:a8:57:cf:15:9e: 1d:73:ed:86:59:20:b5:e1:c2:bc:83:da:08:24:75:7a:e0:b5: f6:fb:05:c3:67:1c:c1:ce:2c:43:c2:26:26:ea:e1:db:03:ba: 7d:9e:b1:cc:a9:16:f4:e1:93:d8:08:0f:21:fc:38:98:aa:d7: 91:9d:de:ae:61:e9:78:d0:16:b3:c5:4c:f6:c6:99:44:25:0f: e2:4b:71:a9:23:6e:b7:a8:e3:4b:d7:8a:51:60:b4:55:15:ff: e2:fc:13:9f:c7:3e:d3:90:ae:e7:7e:6d:27:8d:49:f9:03:c5: e8:64:54:87:db:59:a2:b2:fa:ac:4b:4c:60:63:35:7b:fe:00: c2:85:7b:64:8a:40:76:99:01:02:b2:bb:2d:1b:1b:9c:2a:cb: d2:24:af:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurrwtbXzfQ+wTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDY3MDI2MzItMzJmMy00Yzg0LTg3ZDctN2JiM2ZjZGU0ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8eGAmeaxVb3jUWhVa5Fez3Ex8WOQCbWU90 muA8FlQEqAoRQi6U3kafQdrHbCXX3whXi4em+zSa8QLlt6NqGVL0K74PI03y0TDS R1D0TL2BeYKZwEPxz9k+xBMOSLYdLiW3xmcMK2d7myEV+IeRjKHIghKMdGGow4B1 sKU0KndVSSWbkCbY4N1uckRl+QBBwt04VoaAqojkXftRtnEmVxJgs6o4pffakmvn +RbupapSuXETNdD1zgQSaK0NefkWNRAy9j/nPOROrCtw588UANawUPPOVvo2Z65D 3G6HRLmBz5PolXvxH49ab6v3C0rQq629gXjtGaVlh+P/69iAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAt2YOcx38vZqrWl7AVzzAIJ9JSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhjYWZiYTMtZDUyMy0z ZmRhLTkyYTItODkzYmY5YjNlZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3PuGvSRrtHg1bjztOa1nQe/HMYoik1KalqxPwbVNJZyFYyZhwWN/tN 9M1Kz6G4QeMhpVNgMvUbgsauvEOJtU8uijxM0kbWt84AsnqaNe1t3wN7zDYOxdou QwGIV7A+a1/Y+cy7NGuoV88Vnh1z7YZZILXhwryD2ggkdXrgtfb7BcNnHMHOLEPC Jibq4dsDun2escypFvThk9gIDyH8OJiq15Gd3q5h6XjQFrPFTPbGmUQlD+JLcakj breo40vXilFgtFUV/+L8E5/HPtOQrud+bSeNSfkDxehkVIfbWaKy+qxLTGBjNXv+ AMKFe2SKQHaZAQKyuy0bG5wqy9Ikr64= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:41 2025 by rpki-client