$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c749249-ee2b-3147-8676-fc5c4f882474.roa File: 5c749249-ee2b-3147-8676-fc5c4f882474.roa (raw, json) Hash identifier: XwUT/OiJ6aNJVfESStomUrZM9PjcycFqTJS68ERpbIs= Subject key identifier: DB:C2:A4:A7:8E:21:40:67:BE:3D:02:1B:D2:32:2B:B2:8B:8B:6E:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785190A52F796AE1BBFBF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c749249-ee2b-3147-8676-fc5c4f882474.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.130.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:19:0a:52:f7:96:ae:1b:bf:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=216ceffd-52bd-4998-af96-4c0d0bfa1285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:02:69:6e:4a:c4:93:8e:e9:bb:f7:9e:70: b6:47:ca:71:5e:92:58:7f:1b:c9:b5:08:e6:5a:6c: 4f:f7:28:66:d7:d6:c7:ac:0c:5f:33:20:39:38:0f: 56:ed:51:69:2e:ff:b3:c6:0d:3a:a5:ad:9b:c1:49: 3e:e9:a4:eb:4a:52:c9:67:c8:84:e3:69:43:2e:1e: 3f:09:a4:bc:c0:20:b0:4b:9b:d8:5a:58:82:d5:b3: a6:eb:a0:28:76:77:b5:74:b2:1a:dc:89:d2:0d:e0: c4:80:2f:62:c9:ab:49:1e:bb:ea:7b:40:15:4a:8d: 57:3d:69:c6:ab:d4:fd:14:e4:09:e4:ad:27:ee:fc: 73:29:bd:54:d8:a7:fd:1a:09:31:08:25:46:87:53: 01:e4:da:86:59:ca:20:c0:86:23:56:f6:f2:f9:91: 88:05:dd:ec:44:70:ad:ae:bb:96:0b:be:0c:73:e0: d9:f0:28:af:44:2c:1b:f7:42:78:ca:45:e9:0b:f6: 9a:2c:8e:73:b6:cb:7e:d1:1d:b5:b6:48:56:7a:52: 2b:03:f7:9d:41:a7:82:d8:51:04:14:2d:47:6c:d0: 26:1f:9c:78:cf:b6:70:b9:7d:87:fe:a3:ec:68:7b: ce:44:b4:e5:fc:07:bd:f7:fa:c0:01:63:73:53:d8: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C2:A4:A7:8E:21:40:67:BE:3D:02:1B:D2:32:2B:B2:8B:8B:6E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c749249-ee2b-3147-8676-fc5c4f882474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.130.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:12:08:74:28:5d:36:50:29:80:bc:31:78:ca:8e:6d:3f:73: 93:64:20:94:c1:e4:cf:8b:e5:29:49:d5:0c:43:43:bc:d5:b0: 91:05:3a:01:4a:05:31:5f:b1:7d:14:92:0d:e1:3b:7c:fb:03: 09:8b:a4:ac:e0:04:91:b5:47:0f:88:29:59:bd:db:a7:31:91: 7c:02:3f:c9:58:4b:63:1d:5f:7c:50:c6:84:16:d0:c5:5d:85: bd:73:74:fc:d7:76:47:86:70:83:42:ef:2a:72:62:9e:15:4f: d3:49:ae:2c:52:68:1e:51:30:53:f7:8c:57:31:85:ef:8d:ec: f7:53:80:1a:0c:fc:c9:7e:d4:a8:cd:77:d8:08:1f:39:53:2b: 3f:8b:8b:ed:f5:4f:3a:6f:19:9e:17:16:d9:71:c8:01:dd:f0: 3d:29:18:65:23:3a:93:45:eb:2b:c1:e4:b1:1a:80:3f:fe:7d: 38:67:a8:57:96:1f:38:5e:68:c7:05:2b:b3:03:5f:6a:de:89: 7a:4c:67:48:5f:aa:b8:d3:02:3b:4e:a2:e5:33:eb:f4:c1:07: 59:43:83:f8:c4:16:7e:55:b2:95:82:94:06:21:a7:04:7c:2e: 81:92:e8:a5:bd:38:3f:b2:8d:83:70:66:63:82:46:71:01:50: 70:9c:07:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRkKUveWrhu/v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjE2Y2VmZmQtNTJiZC00OTk4LWFmOTYtNGMwZDBiZmExMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsECaW5KxJOO6bv3nnC2R8pxXpJYfxvJtQjm WmxP9yhm19bHrAxfMyA5OA9W7VFpLv+zxg06pa2bwUk+6aTrSlLJZ8iE42lDLh4/ CaS8wCCwS5vYWliC1bOm66Aodne1dLIa3InSDeDEgC9iyatJHrvqe0AVSo1XPWnG q9T9FOQJ5K0n7vxzKb1U2Kf9GgkxCCVGh1MB5NqGWcogwIYjVvby+ZGIBd3sRHCt rruWC74Mc+DZ8CivRCwb90J4ykXpC/aaLI5ztst+0R21tkhWelIrA/edQaeC2FEE FC1HbNAmH5x4z7ZwuX2H/qPsaHvORLTl/Ae99/rAAWNzU9iaCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvCpKeOIUBnvj0CG9IyK7KLi25HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM3NDkyNDktZWUyYi0z MTQ3LTg2NzYtZmM1YzRmODgyNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADISCHQoXTZQKYC8MXjKjm0/c5NkIJTB5M+L5SlJ1QxDQ7zVsJEFOgFK BTFfsX0Ukg3hO3z7AwmLpKzgBJG1Rw+IKVm926cxkXwCP8lYS2MdX3xQxoQW0MVd hb1zdPzXdkeGcINC7ypyYp4VT9NJrixSaB5RMFP3jFcxhe+N7PdTgBoM/Ml+1KjN d9gIHzlTKz+Li+31TzpvGZ4XFtlxyAHd8D0pGGUjOpNF6yvB5LEagD/+fThnqFeW HzheaMcFK7MDX2reiXpMZ0hfqrjTAjtOouUz6/TBB1lDg/jEFn5VspWClAYhpwR8 LoGS6KW9OD+yjYNwZmOCRnEBUHCcB38= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:56 2025 by rpki-client