$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa File: 6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa (raw, json) Hash identifier: 43aKi27JQQqxURcqeFfi1+LaKy9qkSbNtHjcCZXbkUA= Subject key identifier: 05:88:37:4F:95:29:B8:21:F1:04:52:5A:63:FB:67:EF:85:3C:7F:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAC09930EE0B58D1B58230 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.107.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c0:99:30:ee:0b:58:d1:b5:82:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=898fa001-0c26-4367-9b49-37df63f1899f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:9a:ff:fe:bb:fc:68:d2:15:75:b0:00:8b: 5c:92:df:3f:c6:35:fc:fe:48:44:a8:bc:bd:88:8e: 9c:38:23:6d:a6:ee:ea:a0:c2:e2:15:ec:8d:83:bf: ae:30:1d:f6:f0:64:8e:e1:5a:52:9e:ac:5e:77:3e: c8:f4:72:9d:2c:cd:d2:a7:16:d3:f9:47:57:e5:d4: be:6f:3d:b9:b0:f9:4c:ce:e4:26:ea:2f:4f:0d:06: 42:62:de:c2:71:bd:86:18:79:4b:51:53:59:01:70: d4:71:de:3e:2d:3e:eb:1c:33:9e:da:80:27:04:a8: 76:94:15:60:58:df:19:c8:4d:47:6c:ae:b6:25:8b: f8:4e:1c:78:a9:7b:ab:25:42:20:02:96:74:0c:70: bd:1b:f5:aa:a2:29:4e:13:5c:1c:5e:cc:38:6c:f4: ff:25:6d:67:d4:19:02:1e:39:9b:1d:a8:b2:cc:2b: 60:17:a0:0c:04:14:4c:0f:b6:8d:f3:a9:20:61:5c: d4:4b:03:0b:a0:18:82:e4:7f:39:75:d6:40:e3:38: 2e:01:9b:f8:64:4b:fd:3f:45:54:74:25:49:f6:46: f5:3f:fa:75:86:e4:cc:61:52:a6:df:1e:5d:cd:b5: 5d:9f:83:3c:e7:92:7d:3a:d2:fc:7b:62:f7:7d:89: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:88:37:4F:95:29:B8:21:F1:04:52:5A:63:FB:67:EF:85:3C:7F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ccdc921-a6c3-3a08-aef1-3cab10757a21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.107.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c6:39:a7:66:35:88:be:06:1b:ed:09:a7:13:cb:0e:91:b6: 07:01:6b:e2:70:63:69:76:15:eb:8d:9e:72:69:97:4a:ba:87: 34:8a:de:51:4b:6a:dd:05:b7:63:12:4a:72:2d:48:8d:1a:72: 84:03:48:fb:e3:13:c6:83:56:49:48:82:6b:b3:91:e8:1a:3d: f9:62:6d:f0:ca:23:96:5d:89:ab:38:20:61:e1:ef:b0:1b:72: 91:a8:0e:49:4c:5c:88:7e:86:f4:bd:65:76:60:b2:5d:14:ae: 73:cb:69:19:8e:75:1e:63:51:0b:e8:df:1c:cb:a3:2c:89:0e: c1:97:5a:4f:d5:f3:78:26:6d:8e:85:a6:ef:27:b7:c2:01:ca: 71:44:bd:d8:79:5a:d5:8f:66:1b:97:12:70:68:f9:e9:c0:f0: 11:d7:39:4c:f6:cf:b7:13:00:ca:6f:10:73:1e:6f:2b:28:3b: 5c:9f:0d:dc:2a:9c:94:66:86:78:d7:e5:a8:f7:6f:ee:3e:33: 6e:9f:9f:24:89:b7:00:37:cf:af:04:6c:6e:ee:13:a1:45:a8: 5a:0c:ff:64:2b:cd:a8:ae:9f:c8:d5:98:18:33:6e:5f:08:f5: a6:ce:55:77:a2:6e:0a:02:b3:dc:57:6b:e2:e8:d7:4f:38:83: 7e:6a:92:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusCZMO4LWNG1gjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODk4ZmEwMDEtMGMyNi00MzY3LTliNDktMzdkZjYzZjE4OTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN+a//67/GjSFXWwAItckt8/xjX8/khEqLy9 iI6cOCNtpu7qoMLiFeyNg7+uMB328GSO4VpSnqxedz7I9HKdLM3SpxbT+UdX5dS+ bz25sPlMzuQm6i9PDQZCYt7Ccb2GGHlLUVNZAXDUcd4+LT7rHDOe2oAnBKh2lBVg WN8ZyE1HbK62JYv4Thx4qXurJUIgApZ0DHC9G/WqoilOE1wcXsw4bPT/JW1n1BkC HjmbHaiyzCtgF6AMBBRMD7aN86kgYVzUSwMLoBiC5H85ddZA4zguAZv4ZEv9P0VU dCVJ9kb1P/p1huTMYVKm3x5dzbVdn4M855J9OtL8e2L3fYk9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWIN0+VKbgh8QRSWmP7Z++FPH8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmNjZGM5MjEtYTZjMy0z YTA4LWFlZjEtM2NhYjEwNzU3YTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzGOadmNYi+BhvtCacTyw6RtgcBa+JwY2l2FeuNnnJpl0q6hzSK3lFL at0Ft2MSSnItSI0acoQDSPvjE8aDVklIgmuzkegaPflibfDKI5Zdias4IGHh77Ab cpGoDklMXIh+hvS9ZXZgsl0UrnPLaRmOdR5jUQvo3xzLoyyJDsGXWk/V83gmbY6F pu8nt8IBynFEvdh5WtWPZhuXEnBo+enA8BHXOUz2z7cTAMpvEHMebysoO1yfDdwq nJRmhnjX5aj3b+4+M26fnySJtwA3z68EbG7uE6FFqFoM/2Qrzaiun8jVmBgzbl8I 9abOVXeibgoCs9xXa+Lo1084g35qkqQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:02 2025 by rpki-client