$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa File: 9a959411-f4f4-3ff7-af68-485ef8c1d984.roa (raw, json) Hash identifier: kdw/5/68iaYBGzwMtV3vIaijfyvf9C+TMdKyxFkVH0Q= Subject key identifier: 65:4A:00:47:6F:55:D8:91:2C:D8:54:EE:AB:C4:A3:66:68:AF:F3:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F6A2438286421ADE9B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.89.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f6:a2:43:82:86:42:1a:de:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=88fb0374-f036-40c2-a607-5655a514ad5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:94:9c:a4:09:dd:a6:08:82:17:92:37:8f: 1f:84:0b:41:83:43:29:bd:c5:0c:9b:01:23:3f:9a: 4a:fe:53:9e:00:e6:c6:55:23:53:e1:88:e7:c4:8b: 3e:44:5b:e5:00:07:c3:1a:b2:69:d8:13:8b:3c:47: cb:67:f9:82:39:37:4e:71:c1:5e:06:cf:13:64:c6: 51:5d:46:25:4e:cd:01:d4:90:d3:71:c3:11:9b:15: 50:c4:11:18:e4:7d:05:0a:99:72:51:2a:31:8a:e4: 08:46:eb:dd:e0:1f:23:ab:48:65:e6:d3:13:bc:ea: 00:78:6c:c3:64:81:ec:10:eb:6b:97:d0:2f:5a:71: 4b:d8:2c:26:da:70:56:a5:40:79:58:a9:70:1b:b1: ca:71:93:5f:1a:a0:8a:60:40:03:ad:8b:75:e5:43: 5c:4e:92:07:99:0d:c3:24:e8:62:6d:ea:c5:53:c9: 57:89:48:39:66:fd:f5:44:57:75:27:f3:98:3f:66: 07:b6:b7:9c:95:0f:7f:58:1c:11:84:da:c0:46:41: dc:e3:5d:50:e9:0d:21:b4:2c:15:21:2c:46:18:9e: 5c:a1:7d:80:85:6f:3e:4c:d3:f6:51:65:a2:ae:2c: e0:25:9b:76:25:c7:9f:12:7d:6b:11:37:d9:8f:45: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4A:00:47:6F:55:D8:91:2C:D8:54:EE:AB:C4:A3:66:68:AF:F3:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a959411-f4f4-3ff7-af68-485ef8c1d984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e2:5d:f3:f8:0d:ca:10:34:2d:66:af:c6:5a:75:77:e4:ec: b2:b6:7a:2f:f8:a2:7b:56:f6:20:81:af:a1:38:9c:b1:94:56: 02:32:39:50:5e:92:c2:5a:3f:ad:75:6e:78:cb:2c:16:8f:fc: 2e:36:cc:44:7c:65:4e:6a:bb:29:e4:1f:a6:a8:71:7a:f7:ff: 07:d7:2a:ea:eb:bd:a6:71:6f:98:5d:f2:09:84:07:b5:03:23: 3d:31:23:58:61:aa:82:49:91:e6:d8:2c:18:1f:f9:9c:43:78: 6e:12:47:0c:e0:fc:38:71:32:f0:79:8a:f6:93:6d:77:a4:cd: 0e:33:7e:f1:50:fd:99:5d:4e:25:65:33:d3:6d:2c:7a:32:2a: d3:f0:40:ab:d5:e7:92:5d:f9:1f:e8:20:13:65:f1:ef:2e:a0: 07:4d:e1:91:5f:7b:68:c9:2b:32:a0:ae:7b:5e:79:c3:16:0d: 6a:c9:f1:a3:0f:17:78:fa:a5:c5:01:98:c3:a0:71:71:55:69: 37:c2:f2:0f:c0:ae:06:b1:e8:22:48:54:10:c1:4e:33:79:b1: 78:84:0d:0b:0a:f5:1f:63:00:89:62:85:1c:14:65:d8:f9:65: 72:73:69:7c:c2:6f:92:b5:5b:43:4b:8c:17:50:36:18:0e:65: 99:56:2e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPaiQ4KGQhrem4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODhmYjAzNzQtZjAzNi00MGMyLWE2MDctNTY1NWE1MTRhZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7qUnKQJ3aYIgheSN48fhAtBg0MpvcUMmwEj P5pK/lOeAObGVSNT4YjnxIs+RFvlAAfDGrJp2BOLPEfLZ/mCOTdOccFeBs8TZMZR XUYlTs0B1JDTccMRmxVQxBEY5H0FCplyUSoxiuQIRuvd4B8jq0hl5tMTvOoAeGzD ZIHsEOtrl9AvWnFL2Cwm2nBWpUB5WKlwG7HKcZNfGqCKYEADrYt15UNcTpIHmQ3D JOhiberFU8lXiUg5Zv31RFd1J/OYP2YHtreclQ9/WBwRhNrARkHc411Q6Q0htCwV ISxGGJ5coX2AhW8+TNP2UWWirizgJZt2JcefEn1rETfZj0X1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVKAEdvVdiRLNhU7qvEo2Zor/PDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE5NTk0MTEtZjRmNC0z ZmY3LWFmNjgtNDg1ZWY4YzFkOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHiXfP4DcoQNC1mr8ZadXfk7LK2ei/4ontW9iCBr6E4nLGUVgIyOVBe ksJaP611bnjLLBaP/C42zER8ZU5quynkH6aocXr3/wfXKurrvaZxb5hd8gmEB7UD Iz0xI1hhqoJJkebYLBgf+ZxDeG4SRwzg/DhxMvB5ivaTbXekzQ4zfvFQ/ZldTiVl M9NtLHoyKtPwQKvV55Jd+R/oIBNl8e8uoAdN4ZFfe2jJKzKgrnteecMWDWrJ8aMP F3j6pcUBmMOgcXFVaTfC8g/Argax6CJIVBDBTjN5sXiEDQsK9R9jAIlihRwUZdj5 ZXJzaXzCb5K1W0NLjBdQNhgOZZlWLqM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:57 2025 by rpki-client