$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa File: 40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa (raw, json) Hash identifier: bvUMDOkHJtEDaBz0VARJVb9wUyCm8a4vQWT8z9Nmozw= Subject key identifier: 39:EA:17:3C:B6:8D:C0:56:C5:BE:94:FE:EC:39:01:26:12:FE:FF:B2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785395BE64898E43985A280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.79.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:39:5b:e6:48:98:e4:39:85:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=730de143-5757-466b-ba86-ac5c8db0d104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:86:cc:6c:08:39:3c:ce:cf:41:99:3a:3b: bb:18:f2:b5:aa:9f:39:86:5b:5d:a6:da:10:54:76: 29:cc:8f:47:ca:3c:c4:bb:72:55:2b:8f:0a:01:7e: f8:d3:7a:e6:bc:56:dc:7f:17:a4:fc:da:99:1d:54: e8:69:f8:40:db:bc:31:66:7e:dc:83:b1:c7:bb:91: c2:94:23:83:83:8a:e5:78:d6:34:97:3d:34:4d:15: c7:f6:4f:8e:3f:ca:90:27:09:27:e6:11:e8:eb:02: 33:91:4d:bc:fc:c2:53:43:02:89:c8:87:71:59:45: 1d:b5:f8:8c:9b:8d:69:72:94:99:ae:af:08:2a:2b: 4d:3b:03:e1:ae:a9:7b:90:3a:a7:1b:af:0a:91:75: b8:85:e3:ff:5c:ef:17:14:ce:42:1c:b4:6b:81:92: da:02:7a:e0:bb:a0:61:96:fd:10:bb:37:b0:45:87: b1:dc:7d:63:ad:6b:eb:94:93:ea:bc:a9:8b:c8:18: d8:28:e3:73:53:81:8e:95:0e:8c:53:09:0e:c9:d6: fb:d2:24:5c:1e:cf:75:73:c5:6b:36:1e:e1:e2:36: b9:14:0b:e1:63:96:27:cb:1f:89:2f:fb:2d:ad:f6: 70:12:d8:79:56:ca:ea:68:35:c8:11:a0:a3:c3:a6: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:17:3C:B6:8D:C0:56:C5:BE:94:FE:EC:39:01:26:12:FE:FF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40c4218f-9cfd-3884-b3ec-fe9eccc4f3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.79.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d8:3e:45:85:7c:95:54:fd:2e:8c:7e:2b:f3:8e:93:d6:10: f8:80:cb:cc:aa:1b:d0:b5:3e:ed:ed:88:c4:55:e1:14:32:99: f5:a4:48:ab:1a:02:72:40:15:2f:55:4f:6d:c2:88:3b:4f:5e: fe:04:84:d8:95:87:67:49:24:9f:73:80:74:26:a0:7e:c6:71: 9d:81:24:d6:6a:bc:e3:db:b3:b0:e2:fd:da:30:67:0c:ce:35: c1:3d:ac:16:e4:30:a7:ce:c8:a7:2d:60:90:4f:b2:b4:07:13: 69:11:db:20:79:a7:43:04:7c:bf:bd:a5:1b:8b:be:98:8d:05: 85:07:91:97:bb:a4:22:9d:45:08:c9:be:8b:ce:82:b2:f5:bc: 73:cc:b8:62:d9:d4:29:1d:b6:05:8d:2d:22:6a:b0:20:6d:24: 31:08:1f:14:6a:f7:1c:d6:78:0b:97:ff:87:7f:ad:e0:ed:c1: 9e:2d:ed:39:94:cc:78:2e:1f:11:87:1c:dc:83:c4:c3:15:8b: 38:52:3a:26:c1:e9:bb:48:a9:ee:1d:2f:93:12:e9:ad:03:03: 17:27:f0:39:ec:9f:b7:f8:fa:83:8c:fb:f6:40:b1:a0:23:46: e1:dc:ca:ba:0b:d5:0e:98:fb:8e:56:e7:3b:e4:10:34:31:f4: ab:b3:ca:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTlb5kiY5DmFooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzMwZGUxNDMtNTc1Ny00NjZiLWJhODYtYWM1YzhkYjBkMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGGzGwIOTzOz0GZOju7GPK1qp85hltdptoQ VHYpzI9HyjzEu3JVK48KAX7403rmvFbcfxek/NqZHVToafhA27wxZn7cg7HHu5HC lCODg4rleNY0lz00TRXH9k+OP8qQJwkn5hHo6wIzkU28/MJTQwKJyIdxWUUdtfiM m41pcpSZrq8IKitNOwPhrql7kDqnG68KkXW4heP/XO8XFM5CHLRrgZLaAnrgu6Bh lv0QuzewRYex3H1jrWvrlJPqvKmLyBjYKONzU4GOlQ6MUwkOydb70iRcHs91c8Vr Nh7h4ja5FAvhY5Ynyx+JL/strfZwEth5VsrqaDXIEaCjw6aSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnqFzy2jcBWxb6U/uw5ASYS/v+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBjNDIxOGYtOWNmZC0z ODg0LWIzZWMtZmU5ZWNjYzRmM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrYPkWFfJVU/S6MfivzjpPWEPiAy8yqG9C1Pu3tiMRV4RQymfWkSKsa AnJAFS9VT23CiDtPXv4EhNiVh2dJJJ9zgHQmoH7GcZ2BJNZqvOPbs7Di/dowZwzO NcE9rBbkMKfOyKctYJBPsrQHE2kR2yB5p0MEfL+9pRuLvpiNBYUHkZe7pCKdRQjJ vovOgrL1vHPMuGLZ1CkdtgWNLSJqsCBtJDEIHxRq9xzWeAuX/4d/reDtwZ4t7TmU zHguHxGHHNyDxMMVizhSOibB6btIqe4dL5MS6a0DAxcn8Dnsn7f4+oOM+/ZAsaAj RuHcyroL1Q6Y+45W5zvkEDQx9Kuzyvc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:30 2025 by rpki-client