$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/688c578b-046b-3cf4-b7fb-ce8e7aa3dfde.roa File: 688c578b-046b-3cf4-b7fb-ce8e7aa3dfde.roa (raw, json) Hash identifier: bC77m5FakHqJA8gFm9tH0rRds5lkMI/mF3csNlWvoFs= Subject key identifier: 1F:25:D5:BF:E8:DE:D2:8E:A2:17:8B:BE:C0:F8:2C:B8:70:6A:6A:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852C6043AEC006CF43D380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/688c578b-046b-3cf4-b7fb-ce8e7aa3dfde.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.176.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2c:60:43:ae:c0:06:cf:43:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=97c9b18e-d524-47a8-ba96-b3fc1b7a5d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:39:66:da:3d:bd:af:16:71:96:e2:48:e4: 5b:d4:df:b6:43:d2:bf:55:5c:02:77:18:6b:37:71: 27:6d:24:8a:47:91:46:72:0e:f0:87:da:ae:11:51: f5:65:c7:02:a4:f0:b1:9b:fe:48:9e:88:63:92:d7: 7e:01:51:cc:5e:18:4a:6e:06:e8:f1:90:c9:29:ac: e6:09:43:77:fb:27:53:8c:69:de:47:ab:b4:77:6b: 1a:c8:9e:4e:23:ac:30:0f:9c:22:ed:6c:ac:ac:22: 8d:6b:fc:de:7d:45:1e:93:a7:31:bd:58:5b:06:10: 46:b0:11:96:4e:d5:66:70:29:2e:d1:b4:cd:be:9b: 81:fb:c4:d7:23:2c:3b:d3:a7:5a:21:08:87:e1:c4: a1:de:53:61:fd:91:44:f0:7e:a6:49:c0:74:11:ec: 6b:cb:59:51:a5:f5:c7:ac:8a:f7:06:3e:45:0e:ef: e2:be:db:1b:36:6c:4e:09:f3:8e:e0:3c:cf:26:0d: 03:93:04:51:04:20:5d:7e:13:7c:9a:3a:fe:0a:c2: 9d:08:ce:21:37:ce:99:15:01:e0:a0:b5:bf:97:83: 76:90:59:58:12:f7:81:07:a4:a0:98:a4:a0:ce:e1: 3a:7a:0a:91:69:06:1c:9d:05:99:9c:b3:57:a3:57: 5f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:25:D5:BF:E8:DE:D2:8E:A2:17:8B:BE:C0:F8:2C:B8:70:6A:6A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/688c578b-046b-3cf4-b7fb-ce8e7aa3dfde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:51:ec:32:41:cb:65:1d:f4:0a:dc:bb:6a:2e:85:b9:5d:c1: 98:8d:16:1f:a7:78:07:94:17:4c:d8:59:37:37:a5:ab:07:fd: 0c:83:29:04:a2:c6:47:f6:44:91:f4:a8:73:da:f2:1e:2e:28: 66:09:49:7c:97:bc:f8:bb:ed:13:f2:f9:d5:9d:9b:89:b0:cc: d3:89:6c:ca:2a:af:d4:45:52:67:c3:af:c3:3f:f2:5e:9e:4f: 4f:bd:6b:66:16:51:ac:98:bd:f5:2e:40:e0:22:f6:96:3b:93: b3:d9:2c:05:8c:2f:56:5c:e3:a9:bd:0a:4a:fa:5a:7f:e6:74: 19:2a:e9:bc:59:fe:f7:58:cf:44:d9:9f:d8:04:19:ce:5f:a3: b4:2b:d9:d4:11:cc:fa:f1:70:c3:a3:09:b8:41:af:b4:e0:b8: 3e:7f:c5:8c:f5:da:22:27:2c:52:dc:f2:8b:36:d2:34:ba:25: 3b:5f:04:da:a0:4d:5f:e0:db:6b:8f:10:ef:ee:7e:06:9b:93: 94:b8:03:11:ff:d2:3a:91:d6:18:e6:7c:77:28:47:a1:99:9d: bc:7a:ce:c8:e5:13:80:ff:4f:35:59:4a:8f:dc:56:49:a4:3d: a5:ab:08:89:d1:90:23:58:cf:1d:98:7f:50:9a:41:a3:b1:4e: e8:65:25:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSxgQ67ABs9D04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTdjOWIxOGUtZDUyNC00N2E4LWJhOTYtYjNmYzFiN2E1ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucE5Zto9va8WcZbiSORb1N+2Q9K/VVwCdxhr N3EnbSSKR5FGcg7wh9quEVH1ZccCpPCxm/5Inohjktd+AVHMXhhKbgbo8ZDJKazm CUN3+ydTjGneR6u0d2sayJ5OI6wwD5wi7WysrCKNa/zefUUek6cxvVhbBhBGsBGW TtVmcCku0bTNvpuB+8TXIyw706daIQiH4cSh3lNh/ZFE8H6mScB0Eexry1lRpfXH rIr3Bj5FDu/ivtsbNmxOCfOO4DzPJg0DkwRRBCBdfhN8mjr+CsKdCM4hN86ZFQHg oLW/l4N2kFlYEveBB6SgmKSgzuE6egqRaQYcnQWZnLNXo1dfBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8l1b/o3tKOoheLvsD4LLhwamphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg4YzU3OGItMDQ2Yi0z Y2Y0LWI3ZmItY2U4ZTdhYTNkZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBR7DJBy2Ud9Arcu2ouhbldwZiNFh+neAeUF0zYWTc3pasH/QyDKQSi xkf2RJH0qHPa8h4uKGYJSXyXvPi77RPy+dWdm4mwzNOJbMoqr9RFUmfDr8M/8l6e T0+9a2YWUayYvfUuQOAi9pY7k7PZLAWML1Zc46m9Ckr6Wn/mdBkq6bxZ/vdYz0TZ n9gEGc5fo7Qr2dQRzPrxcMOjCbhBr7TguD5/xYz12iInLFLc8os20jS6JTtfBNqg TV/g22uPEO/ufgabk5S4AxH/0jqR1hjmfHcoR6GZnbx6zsjlE4D/TzVZSo/cVkmk PaWrCInRkCNYzx2Yf1CaQaOxTuhlJRw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:50 2025 by rpki-client