$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f01b535-1adc-3b5d-8389-8968b8336b7e.roa File: 4f01b535-1adc-3b5d-8389-8968b8336b7e.roa (raw, json) Hash identifier: qnCn5Q9kI8em1d3lAYMUNc/OGqTIIeOah8gOZEYVNkk= Subject key identifier: 2F:F3:B5:85:E7:14:1D:A9:EC:44:89:CC:FD:0F:7F:72:BA:C5:37:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785355C6849084492F25E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f01b535-1adc-3b5d-8389-8968b8336b7e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.79.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:35:5c:68:49:08:44:92:f2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e70919c3-eb30-4940-823e-2cd5536ab880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:fd:3e:1f:49:8c:f4:78:e2:ac:3e:78:21: 9f:e0:34:8b:44:01:3b:43:b8:f6:8b:f9:b2:b9:2d: 8a:7e:1e:f5:2b:26:79:f3:38:2a:1c:00:fa:2e:89: b3:75:44:26:4c:d6:5e:c1:2d:6f:2c:16:dd:77:6e: 66:df:7a:4c:17:69:ef:38:55:a4:a4:6c:6d:7c:e6: 92:1a:ab:20:cf:8e:7e:74:3a:2c:4c:4c:f4:01:75: a8:63:f2:23:6e:d6:6c:31:29:0b:5d:66:8b:4e:dc: 2e:e9:a4:5d:50:67:b5:9d:15:d6:44:1b:52:0a:67: 66:ae:98:84:04:2f:bb:0d:86:6b:c0:76:4c:0e:af: bc:83:13:16:a1:ae:5f:35:1c:c7:a8:6d:0e:ab:7b: c1:34:ae:f1:11:4e:92:1f:5d:6e:1e:78:99:5e:ae: fd:0c:1d:f0:0f:53:23:bd:9d:67:19:fd:b0:2c:c8: c6:a7:57:7a:fc:50:e3:03:02:95:13:a5:ad:ca:5d: 50:f1:4f:4e:bb:d9:58:f5:d0:c5:54:63:60:6d:9e: 66:ca:cb:f5:8c:b4:06:d8:cc:57:df:86:90:33:2a: 06:ed:92:d7:0e:dd:39:16:e4:66:d2:50:e4:3a:4c: 45:47:46:3b:0d:c8:1a:cd:64:4e:70:fc:e0:6b:9d: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:B5:85:E7:14:1D:A9:EC:44:89:CC:FD:0F:7F:72:BA:C5:37:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4f01b535-1adc-3b5d-8389-8968b8336b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.79.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:77:31:db:13:86:05:d3:a4:a9:a0:55:5b:6d:0d:f3:9b:d7: 32:4c:62:3e:6b:31:1f:34:4b:c8:6a:dd:e6:b3:c0:74:8b:bb: c0:b2:bd:2f:d6:e9:a4:67:c4:5b:6d:f0:d1:d4:d1:8a:a9:7b: 7e:60:ce:60:68:d4:dc:e1:71:c8:d0:e1:5c:9c:5c:0f:fa:05: 5b:32:9e:4c:0b:6c:20:4a:30:df:a7:e7:33:aa:00:49:5d:58: 2d:97:99:61:5b:98:23:32:f6:02:cf:97:16:47:7a:4b:97:94: 61:10:b7:68:64:d1:a9:ea:f4:c8:6c:f1:1f:95:cb:b4:da:94: de:95:95:f6:da:df:80:d4:db:53:36:9f:84:b4:51:f4:82:20: 77:0f:ca:e4:bb:89:d2:12:40:ab:f5:97:01:21:2d:31:7d:f9: e9:08:4e:7b:bc:20:2b:d5:b5:22:bb:4f:a1:9f:af:43:4d:26: c7:e4:bd:6f:8a:a6:66:aa:7f:a5:43:1f:b6:65:85:39:8d:06: 27:b9:44:e1:a7:27:a2:e4:64:66:a2:f7:b0:37:45:06:04:15: 3c:8a:cc:58:a5:79:53:e3:77:78:9d:ef:82:55:cc:58:6e:44: c4:b6:fd:33:22:c1:6e:e9:13:60:2d:81:b7:f9:b4:6c:da:2c: ad:d1:fc:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTVcaEkIRJLyXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTcwOTE5YzMtZWIzMC00OTQwLTgyM2UtMmNkNTUzNmFiODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm539Ph9JjPR44qw+eCGf4DSLRAE7Q7j2i/my uS2Kfh71KyZ58zgqHAD6LomzdUQmTNZewS1vLBbdd25m33pMF2nvOFWkpGxtfOaS Gqsgz45+dDosTEz0AXWoY/IjbtZsMSkLXWaLTtwu6aRdUGe1nRXWRBtSCmdmrpiE BC+7DYZrwHZMDq+8gxMWoa5fNRzHqG0Oq3vBNK7xEU6SH11uHniZXq79DB3wD1Mj vZ1nGf2wLMjGp1d6/FDjAwKVE6Wtyl1Q8U9Ou9lY9dDFVGNgbZ5mysv1jLQG2MxX 34aQMyoG7ZLXDt05FuRm0lDkOkxFR0Y7DcgazWROcPzga50UYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/ztYXnFB2p7ESJzP0Pf3K6xTdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGYwMWI1MzUtMWFkYy0z YjVkLTgzODktODk2OGI4MzM2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl3MdsThgXTpKmgVVttDfOb1zJMYj5rMR80S8hq3eazwHSLu8CyvS/W 6aRnxFtt8NHU0Yqpe35gzmBo1NzhccjQ4VycXA/6BVsynkwLbCBKMN+n5zOqAEld WC2XmWFbmCMy9gLPlxZHekuXlGEQt2hk0anq9Mhs8R+Vy7TalN6Vlfba34DU21M2 n4S0UfSCIHcPyuS7idISQKv1lwEhLTF9+ekITnu8ICvVtSK7T6Gfr0NNJsfkvW+K pmaqf6VDH7ZlhTmNBie5ROGnJ6LkZGai97A3RQYEFTyKzFileVPjd3id74JVzFhu RMS2/TMiwW7pE2Atgbf5tGzaLK3R/PA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:35 2025 by rpki-client