$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa File: 3f975dce-d326-3c97-af36-d6b6f386d43d.roa (raw, json) Hash identifier: 8x8opE8EuVQuksU2MtJrKdfJhgj2CpVy9GD/DI7tw8I= Subject key identifier: 0E:4B:75:76:CD:72:79:35:47:4E:FC:BC:F3:61:6E:EF:BE:5F:C2:5A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78503ABFA9BDBAF5F65D2C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.129.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:03:ab:fa:9b:db:af:5f:65:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=16463b29-b93f-4237-b302-551d5d584089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:74:ed:1f:08:e5:4c:23:70:2e:ef:50:23:0c: d3:c2:c7:15:45:90:63:b8:bd:83:29:9c:71:32:58: e7:7e:ed:f9:c2:c5:80:6d:f3:93:6a:14:35:e8:54: 6d:ab:cd:8f:87:42:a1:ed:4d:59:06:be:8e:71:d2: 9e:54:1b:44:11:82:44:2d:ed:fb:a1:a0:40:6b:f8: 12:32:7d:70:2d:6d:7f:50:5c:43:e4:c3:37:f0:14: e0:e8:74:ea:f7:41:93:e9:c6:3b:4f:8b:28:c9:54: 71:23:4f:3c:f1:42:33:b2:03:5d:36:bd:64:dc:e3: 23:77:df:ba:eb:1c:7c:19:54:65:15:dd:7e:b7:cb: 81:96:e1:43:96:d4:63:1a:ea:9d:e2:03:b6:8f:1f: 5f:a8:cd:b9:ff:ef:21:c6:f3:69:8a:97:2e:19:84: de:ef:49:ed:e6:21:56:e6:75:7e:04:17:2f:71:65: 3a:da:6c:93:61:70:da:8b:3b:f8:4e:b6:0f:b1:d1: bd:2c:83:1b:cf:97:e3:79:68:a6:13:b7:12:fa:e4: aa:15:95:08:fa:e8:c3:81:f7:d3:2c:e4:1b:3a:bd: 5e:7a:64:32:90:46:b8:5e:98:7d:93:9d:ea:39:fd: 5d:e2:13:03:06:a8:f2:1d:f2:00:03:ef:3b:ec:fb: 32:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4B:75:76:CD:72:79:35:47:4E:FC:BC:F3:61:6E:EF:BE:5F:C2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f975dce-d326-3c97-af36-d6b6f386d43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cb:10:18:f7:58:39:d4:1d:4c:2d:5a:e4:fa:c2:99:0c:79: a1:a2:2c:3e:3f:f5:92:d3:73:e7:f5:ac:a6:6c:16:78:9d:e8: c6:d5:3e:22:4a:6c:93:47:0b:3d:40:fb:75:20:d4:dc:dc:41: 8c:98:40:f9:a8:df:46:2a:8f:ce:fe:7b:14:55:9f:4e:cf:09: 21:3f:5a:a3:e0:90:79:59:7c:6f:29:e7:08:59:ec:bd:96:cf: ee:7d:43:49:04:92:3a:76:1e:c1:1d:d2:52:fe:ac:db:80:15: f1:49:e9:01:da:92:ad:c4:c2:f7:e0:31:77:45:38:28:97:95: 5a:66:2a:3d:6b:02:5e:35:03:f6:71:2d:32:63:5f:74:a1:27: c3:88:3e:07:c2:07:5b:d9:3b:41:6f:a7:27:8b:9d:8e:a8:91: bd:64:fd:6e:8b:00:35:f1:41:ee:fd:18:a3:14:b9:1f:33:4d: 52:ea:9c:07:d8:84:71:57:bc:08:ed:9e:17:d8:a7:09:f2:3d: 2c:07:17:e7:34:6a:4f:e9:b3:aa:b7:9d:c4:5f:7f:7a:33:d7: 9e:27:b4:1f:0f:86:0d:eb:50:fa:d9:09:bb:b5:d1:56:48:b9: a0:04:f3:41:4e:f0:d1:97:0e:d2:5a:22:1c:49:bc:49:e3:ef: 44:f3:98:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQOr+pvbr19l0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTY0NjNiMjktYjkzZi00MjM3LWIzMDItNTUxZDVkNTg0MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXTtHwjlTCNwLu9QIwzTwscVRZBjuL2DKZxx Mljnfu35wsWAbfOTahQ16FRtq82Ph0Kh7U1ZBr6OcdKeVBtEEYJELe37oaBAa/gS Mn1wLW1/UFxD5MM38BTg6HTq90GT6cY7T4soyVRxI0888UIzsgNdNr1k3OMjd9+6 6xx8GVRlFd1+t8uBluFDltRjGuqd4gO2jx9fqM25/+8hxvNpipcuGYTe70nt5iFW 5nV+BBcvcWU62myTYXDaizv4TrYPsdG9LIMbz5fjeWimE7cS+uSqFZUI+ujDgffT LOQbOr1eemQykEa4Xph9k53qOf1d4hMDBqjyHfIAA+877PsynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5LdXbNcnk1R078vPNhbu++X8JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y5NzVkY2UtZDMyNi0z Yzk3LWFmMzYtZDZiNmYzODZkNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7LEBj3WDnUHUwtWuT6wpkMeaGiLD4/9ZLTc+f1rKZsFnid6MbVPiJK bJNHCz1A+3Ug1NzcQYyYQPmo30Yqj87+exRVn07PCSE/WqPgkHlZfG8p5whZ7L2W z+59Q0kEkjp2HsEd0lL+rNuAFfFJ6QHakq3EwvfgMXdFOCiXlVpmKj1rAl41A/Zx LTJjX3ShJ8OIPgfCB1vZO0FvpyeLnY6okb1k/W6LADXxQe79GKMUuR8zTVLqnAfY hHFXvAjtnhfYpwnyPSwHF+c0ak/ps6q3ncRff3oz154ntB8Phg3rUPrZCbu10VZI uaAE80FO8NGXDtJaIhxJvEnj70TzmL4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:41 2025 by rpki-client