$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa File: 900a292b-8892-3e6a-8710-e6bd1171ce27.roa (raw, json) Hash identifier: jFSyFWOTWwiaUFBl+vzx7Ad1pkDiMGU9aKLhProafKc= Subject key identifier: 51:34:F5:BB:A9:5F:F9:49:8B:E7:39:5E:C4:59:8D:1E:C2:3C:97:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78516FC804390214F306A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.89.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:16:fc:80:43:90:21:4f:30:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0235ffde-8c10-46ed-8385-d23cbe66bb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:71:c3:ad:37:f8:cd:f1:2c:47:57:7a:1c:2a: ba:a3:80:e2:3f:4b:11:3b:7a:0b:bf:3d:d3:70:30: e9:fb:42:50:e9:fb:4d:2b:9b:59:39:41:d1:f1:5d: 4c:39:08:63:49:ac:77:c9:46:93:69:8c:99:37:94: 2c:68:70:96:e1:d7:3b:f8:1e:a7:e9:6c:b8:4b:64: 3c:af:46:6d:24:17:e2:71:6c:53:2c:12:22:49:dd: c3:e1:7e:5c:37:0c:47:a0:69:dd:26:39:cf:c1:b7: a0:76:ba:7d:7f:6f:04:8d:e8:b7:a2:ef:7d:15:ac: ff:48:4e:67:da:42:78:48:05:da:4b:63:f9:b3:c1: a2:cb:05:ed:7d:67:81:89:4a:8d:f1:5c:63:4e:63: d7:14:e5:4d:69:1c:fc:b5:87:2c:dc:7f:da:16:9a: 58:db:4b:50:95:0d:a2:26:ef:e4:28:57:e6:40:bf: 59:ef:bd:8d:34:c0:05:f2:2f:e4:b8:5c:e1:9c:23: a0:ee:8e:87:38:21:f6:60:af:7a:23:b5:e5:3d:31: 7d:e3:64:45:c6:8c:21:fa:a0:88:bf:3d:28:26:96: a8:2d:1d:81:61:4c:c9:b0:cf:98:d5:7c:ae:7f:32: 29:f7:a4:b8:b4:a3:5f:cd:05:66:23:99:c8:fe:4c: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:34:F5:BB:A9:5F:F9:49:8B:E7:39:5E:C4:59:8D:1E:C2:3C:97:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/900a292b-8892-3e6a-8710-e6bd1171ce27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:be:91:18:36:7b:a8:e6:e2:ed:3e:17:08:c7:69:49:cd:c6: 45:6c:e7:1c:cd:e0:2f:0c:c6:fe:19:d8:69:a1:b1:b9:b8:5e: 10:6b:53:62:32:4d:99:5a:c3:dd:ca:3d:96:f1:3d:22:3e:6e: c3:58:59:c3:63:11:10:09:75:1a:52:37:d3:8f:38:90:93:6c: c0:bb:d6:f3:01:d2:dd:74:95:e3:22:84:07:b4:b6:3f:5c:cc: d1:de:9a:1c:9a:ba:19:3d:0f:2d:bd:09:f5:3a:6c:99:23:df: f5:77:08:b0:a2:71:d1:14:91:1d:76:71:a2:57:ef:f7:e1:8b: 61:d5:d9:cf:88:ee:90:e9:81:e1:fb:52:2b:68:e8:00:7f:6d: ca:f9:82:aa:15:a7:39:e9:bb:55:6f:bd:4f:93:e4:4f:d9:33: 5b:b4:4c:e1:bc:5f:1c:65:e6:5a:58:07:e0:e9:b2:df:49:24: 75:10:af:5d:03:12:ee:65:93:e8:a0:18:76:89:6d:b5:93:bf: d9:9b:3a:6b:05:2f:38:be:be:22:74:22:ee:76:f2:00:d1:be: e0:c3:c9:dd:f7:ba:5b:6f:a1:b0:55:27:14:5c:8a:aa:f7:22: 4c:a6:1d:f1:29:c3:22:c1:27:fc:2c:c3:cb:47:f1:6d:29:6d: f9:fb:ac:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRb8gEOQIU8waoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDIzNWZmZGUtOGMxMC00NmVkLTgzODUtZDIzY2JlNjZiYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXHDrTf4zfEsR1d6HCq6o4DiP0sRO3oLvz3T cDDp+0JQ6ftNK5tZOUHR8V1MOQhjSax3yUaTaYyZN5QsaHCW4dc7+B6n6Wy4S2Q8 r0ZtJBficWxTLBIiSd3D4X5cNwxHoGndJjnPwbegdrp9f28Ejei3ou99Faz/SE5n 2kJ4SAXaS2P5s8GiywXtfWeBiUqN8VxjTmPXFOVNaRz8tYcs3H/aFppY20tQlQ2i Ju/kKFfmQL9Z772NNMAF8i/kuFzhnCOg7o6HOCH2YK96I7XlPTF942RFxowh+qCI vz0oJpaoLR2BYUzJsM+Y1XyufzIp96S4tKNfzQVmI5nI/kwSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE09bupX/lJi+c5XsRZjR7CPJcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTAwYTI5MmItODg5Mi0z ZTZhLTg3MTAtZTZiZDExNzFjZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIllgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6+kRg2e6jm4u0+FwjHaUnNxkVs5xzN4C8Mxv4Z2Gmhsbm4XhBrU2Iy TZlaw93KPZbxPSI+bsNYWcNjERAJdRpSN9OPOJCTbMC71vMB0t10leMihAe0tj9c zNHemhyauhk9Dy29CfU6bJkj3/V3CLCicdEUkR12caJX7/fhi2HV2c+I7pDpgeH7 Uito6AB/bcr5gqoVpznpu1VvvU+T5E/ZM1u0TOG8Xxxl5lpYB+Dpst9JJHUQr10D Eu5lk+igGHaJbbWTv9mbOmsFLzi+viJ0Iu528gDRvuDDyd33ultvobBVJxRciqr3 IkymHfEpwyLBJ/wsw8tH8W0pbfn7rGg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:07 2025 by rpki-client