$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa File: 7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa (raw, json) Hash identifier: ZKTzjXXRYbjQVNj62GouPFTCFCF3BjP0/BPJyFMQtOk= Subject key identifier: 5B:7E:10:49:F2:1D:09:91:BC:02:55:F5:7C:19:4D:3D:93:70:42:3A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BACC7356A800BDEEBE7860 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.121.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cc:73:56:a8:00:bd:ee:be:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3418feb9-dbd5-4a02-af60-204cb08ffc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:55:72:94:cc:65:75:f8:9f:fc:4d:f2:54: ba:6f:de:99:11:ed:86:cb:9e:9f:50:d1:1e:e8:65: 5b:fc:18:7e:25:9e:7d:5a:c5:b0:6a:82:b9:d6:08: 00:e9:d4:3f:0d:92:15:33:49:03:16:75:f6:5d:26: f7:c8:a1:9a:98:17:78:ea:f5:0f:1a:9c:e8:d9:cb: c8:f7:06:50:33:08:89:cb:be:5a:65:e1:71:f2:bf: ed:b7:26:7b:64:46:a0:ac:52:2b:fe:9a:28:e8:ee: fc:fd:0d:43:e0:2d:49:48:14:8c:90:d3:af:f6:42: 58:28:53:50:11:0f:69:29:b2:ea:aa:2f:b5:19:34: e4:35:28:ff:bc:62:b0:a8:62:7a:9b:e0:f5:6c:ca: 8c:02:a0:4f:76:28:0b:d6:db:d9:3b:c6:27:43:78: 74:ce:50:e5:67:dc:95:df:a9:84:5a:81:83:63:11: 51:1e:82:71:db:50:ea:d6:2d:00:c8:dd:b0:5e:c3: 63:3c:62:53:a8:4a:39:99:71:ea:da:c0:f3:34:0e: c9:62:f0:3e:d0:1b:01:10:3b:4b:a3:fb:1f:81:c4: b4:e2:bb:6a:62:a6:6a:5c:dd:8f:b2:b6:a9:d9:4b: 1b:7f:75:86:80:84:cf:8d:2e:2e:d9:9b:b9:a7:da: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:10:49:F2:1D:09:91:BC:02:55:F5:7C:19:4D:3D:93:70:42:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f88d2d8-1d81-32c1-94d0-95062b7c5ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c8:e0:20:5f:b4:ea:10:a3:b8:a1:8d:5b:fa:d0:e0:6b:43: 2c:e5:c0:d9:15:99:34:8a:0e:49:c0:c1:b3:2a:77:7c:5e:a8: 4e:31:ed:08:15:d5:14:d8:51:92:60:a6:64:9a:4e:e1:17:4b: 87:e9:29:ed:7a:61:e3:28:4c:4a:68:ba:fd:52:85:85:99:94: 57:34:af:1f:39:3f:bf:a3:55:3b:b3:42:41:58:fd:84:10:27: 17:69:49:9a:c3:e3:7a:9a:43:a7:e3:8b:c3:bc:b0:e1:1b:7f: a7:4b:86:14:d1:82:ac:5c:b7:29:5d:df:04:33:5e:4b:8b:1b: ed:32:9b:fe:2b:c7:33:24:48:0a:79:5e:cb:ce:50:a5:60:da: fa:44:59:35:39:19:34:bb:00:de:d5:a3:7a:76:67:13:40:54: a1:e6:48:83:a5:5a:e5:29:f1:6f:c5:80:d3:f7:43:43:0f:70: aa:c9:73:74:27:cd:e1:d9:d8:10:0d:fe:d2:58:65:92:31:bc: 43:f4:0c:27:10:6e:9d:f1:8b:7e:19:78:88:38:b9:2a:a1:65: 90:a3:4b:cc:67:b0:50:da:f2:96:83:19:fa:dd:63:9b:f8:b2: 44:52:80:2c:38:95:33:a3:cd:ce:86:2e:aa:65:e9:a3:0a:aa: 33:55:71:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusxzVqgAve6+eGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzQxOGZlYjktZGJkNS00YTAyLWFmNjAtMjA0Y2IwOGZmYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4tVcpTMZXX4n/xN8lS6b96ZEe2Gy56fUNEe 6GVb/Bh+JZ59WsWwaoK51ggA6dQ/DZIVM0kDFnX2XSb3yKGamBd46vUPGpzo2cvI 9wZQMwiJy75aZeFx8r/ttyZ7ZEagrFIr/poo6O78/Q1D4C1JSBSMkNOv9kJYKFNQ EQ9pKbLqqi+1GTTkNSj/vGKwqGJ6m+D1bMqMAqBPdigL1tvZO8YnQ3h0zlDlZ9yV 36mEWoGDYxFRHoJx21Dq1i0AyN2wXsNjPGJTqEo5mXHq2sDzNA7JYvA+0BsBEDtL o/sfgcS04rtqYqZqXN2Psrap2Usbf3WGgITPjS4u2Zu5p9qsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt+EEnyHQmRvAJV9XwZTT2TcEI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2Y4OGQyZDgtMWQ4MS0z MmMxLTk0ZDAtOTUwNjJiN2M1YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfI4CBftOoQo7ihjVv60OBrQyzlwNkVmTSKDknAwbMqd3xeqE4x7QgV 1RTYUZJgpmSaTuEXS4fpKe16YeMoTEpouv1ShYWZlFc0rx85P7+jVTuzQkFY/YQQ JxdpSZrD43qaQ6fji8O8sOEbf6dLhhTRgqxctyld3wQzXkuLG+0ym/4rxzMkSAp5 XsvOUKVg2vpEWTU5GTS7AN7Vo3p2ZxNAVKHmSIOlWuUp8W/FgNP3Q0MPcKrJc3Qn zeHZ2BAN/tJYZZIxvEP0DCcQbp3xi34ZeIg4uSqhZZCjS8xnsFDa8paDGfrdY5v4 skRSgCw4lTOjzc6GLqpl6aMKqjNVccU= -----END CERTIFICATE-----Generated at Sun Apr 27 09:53:08 2025 by rpki-client