$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa File: 9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa (raw, json) Hash identifier: eNFI+aSiR82Eqb8iqLh01XEIhKtBG6gg9FgqAjZda3E= Subject key identifier: 38:04:AB:70:B1:C6:8B:96:B2:B7:F8:88:2B:24:A8:CE:BF:DD:11:0D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CDCBDA3DBDA36EE60A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cd:cb:da:3d:bd:a3:6e:e6:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1df37bf8-b5e2-46dd-9d1b-c9e1a0dffb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:44:ba:fd:bc:ab:0a:8d:5d:36:f3:92:14: ce:e4:20:c2:35:68:c9:d4:d3:b8:00:3e:93:7b:54: 4b:49:29:22:70:55:41:e6:eb:99:d3:da:1e:38:89: 3e:c8:e0:32:9d:53:8f:be:c1:bf:3f:6e:1c:6c:d1: c6:a6:72:0e:77:b1:5b:e6:e9:81:e7:12:92:12:e5: 1b:9e:93:e9:45:2a:7a:38:a2:dd:e0:f0:a1:6e:2a: b5:42:2e:bf:44:b0:ba:7c:51:31:d5:f7:e7:99:b5: 94:f0:6f:12:f8:51:96:b3:48:1c:d1:37:ad:ff:a0: c6:87:fe:4d:33:d3:5c:dc:2b:1d:3d:13:13:c8:d2: e9:c9:a1:43:54:2a:e6:6b:19:15:e5:2c:44:b5:9f: 8b:a5:63:f8:87:53:d7:50:73:56:f2:df:db:5f:db: 83:27:6b:75:9c:95:07:ec:e7:50:8d:9e:5e:77:8d: 09:01:64:f8:5e:da:f6:f1:f2:10:b9:67:8a:7e:8a: 51:1f:05:ae:7f:0a:f5:fb:6b:f3:b0:36:b4:42:ca: b7:48:70:12:b5:d0:ba:7f:af:e3:1f:c6:51:5d:24: 39:00:28:e4:9e:ed:d9:b3:50:db:89:09:9b:78:d1: 38:8f:31:24:41:c5:17:2a:27:19:34:27:f4:a4:af: 87:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:AB:70:B1:C6:8B:96:B2:B7:F8:88:2B:24:A8:CE:BF:DD:11:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d7:2e:77:ab:ee:02:93:9e:94:55:55:43:7a:86:da:9d:0a: 03:34:1a:f4:6c:a0:2c:04:ec:1c:40:97:5a:53:28:b6:5c:95: 70:7c:21:d5:a6:cd:eb:cf:73:3f:ee:34:d3:56:46:ba:3c:14: 03:47:2c:4d:73:55:4f:f8:32:2d:97:c6:9d:a9:49:a5:48:a1: af:40:0c:17:2e:f0:b5:34:62:b0:cc:bc:ed:83:f2:4e:4e:03: f1:f4:7e:13:95:46:5b:17:84:a8:74:15:61:a3:34:39:cd:78: be:da:7f:25:4f:43:89:0b:ea:63:23:c6:8c:2d:2c:c7:80:3d: 5b:1a:f7:4b:61:fb:2f:39:6a:26:39:37:9d:91:08:0a:b3:e2: 27:a0:15:c1:03:34:01:aa:7a:46:6f:fe:e8:18:cb:c8:76:fc: a7:73:9e:80:e6:a9:10:63:4a:9b:06:0a:6c:cf:85:33:59:e0: 38:3a:9a:ba:74:4c:73:0e:91:fe:32:9e:28:e3:b8:40:e1:15: d4:fe:b9:7e:c6:44:dc:8e:f1:d9:a4:20:f5:d0:69:16:9e:6b: f8:2f:ee:75:c1:73:60:84:75:84:95:f1:31:72:dd:36:49:be: 71:29:90:f9:d2:e6:d3:00:ea:c8:b0:73:75:a3:96:93:1b:9c: 67:4f:18:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM3L2j29o27mCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWRmMzdiZjgtYjVlMi00NmRkLTlkMWItYzllMWEwZGZmYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIVEuv28qwqNXTbzkhTO5CDCNWjJ1NO4AD6T e1RLSSkicFVB5uuZ09oeOIk+yOAynVOPvsG/P24cbNHGpnIOd7Fb5umB5xKSEuUb npPpRSp6OKLd4PChbiq1Qi6/RLC6fFEx1ffnmbWU8G8S+FGWs0gc0Tet/6DGh/5N M9Nc3CsdPRMTyNLpyaFDVCrmaxkV5SxEtZ+LpWP4h1PXUHNW8t/bX9uDJ2t1nJUH 7OdQjZ5ed40JAWT4Xtr28fIQuWeKfopRHwWufwr1+2vzsDa0Qsq3SHAStdC6f6/j H8ZRXSQ5ACjknu3Zs1DbiQmbeNE4jzEkQcUXKicZNCf0pK+HawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgEq3CxxouWsrf4iCskqM6/3RENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWIxNzBiMjgtY2Y0ZC0z NmE3LWFkN2EtNjE0NmZkMTJiODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPXLner7gKTnpRVVUN6htqdCgM0GvRsoCwE7BxAl1pTKLZclXB8IdWm zevPcz/uNNNWRro8FANHLE1zVU/4Mi2Xxp2pSaVIoa9ADBcu8LU0YrDMvO2D8k5O A/H0fhOVRlsXhKh0FWGjNDnNeL7afyVPQ4kL6mMjxowtLMeAPVsa90th+y85aiY5 N52RCAqz4iegFcEDNAGqekZv/ugYy8h2/KdznoDmqRBjSpsGCmzPhTNZ4Dg6mrp0 THMOkf4ynijjuEDhFdT+uX7GRNyO8dmkIPXQaRaea/gv7nXBc2CEdYSV8TFy3TZJ vnEpkPnS5tMA6siwc3WjlpMbnGdPGLY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:06 2025 by rpki-client