$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2a99100-c6ac-30db-b19d-a52691151283.roa File: a2a99100-c6ac-30db-b19d-a52691151283.roa (raw, json) Hash identifier: rJyORnp8JKp1ugwtwnrO+qrO8iu0AOyXC+t+5OxS3k4= Subject key identifier: 68:D6:8D:B9:97:27:D0:59:92:7D:05:F1:BD:2D:61:CB:92:20:54:8F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F7633B9C65B6502E7E40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2a99100-c6ac-30db-b19d-a52691151283.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.90.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f7:63:3b:9c:65:b6:50:2e:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=58abcdc0-5434-4ded-96aa-4c1f0a7b2743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:3e:b4:1a:7a:30:c6:a8:66:f1:d7:9a:54: 3b:72:34:f7:ef:df:8f:f0:b2:cc:4b:8e:1e:c6:18: 4b:8f:cc:da:e5:a5:ce:fc:a5:32:5a:55:11:a4:b2: 6b:fc:44:7b:59:02:58:37:79:1c:0b:d7:fc:a7:8c: 1e:37:78:39:04:c0:ff:26:94:12:11:b2:a3:8c:73: 7e:0f:28:f7:2e:95:56:3b:03:03:05:25:25:9c:5c: e1:af:9f:1a:cb:51:a2:fc:cf:ad:35:88:6b:03:c0: 7e:51:11:97:9d:0c:54:c3:ad:2f:98:86:91:e5:4f: 19:e6:4b:53:0a:33:1d:df:42:92:1c:5f:7d:85:77: 8b:07:ad:7b:c4:6d:e5:8e:52:df:b6:b6:6d:aa:33: da:ba:89:f5:12:f6:86:23:88:56:b3:05:8d:fb:1c: 0c:4c:c5:c2:b7:51:54:9e:64:2c:ad:9e:b2:9c:c7: 03:cb:dd:8a:2c:dc:aa:a2:79:50:f0:5d:c2:92:64: 3a:9a:36:f9:be:ad:c0:16:a6:e4:ef:40:82:07:de: 82:ba:56:38:44:21:04:74:0f:95:57:e7:3a:ca:e2: 03:ea:2a:f7:88:32:dd:c6:4f:2b:80:25:95:ff:e8: f3:1a:36:fa:eb:43:fa:7c:92:ba:9c:7e:81:96:bc: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D6:8D:B9:97:27:D0:59:92:7D:05:F1:BD:2D:61:CB:92:20:54:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2a99100-c6ac-30db-b19d-a52691151283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.90.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2d:c8:57:2b:0c:45:e4:cd:76:0f:c0:89:5f:8e:0b:77:b8: c0:d8:0b:37:1c:7e:7c:36:b3:c3:92:48:e8:bb:e2:17:92:d9: b5:c8:ca:ce:74:30:59:0c:4a:af:06:9e:d3:24:c1:dd:f5:8c: 60:9c:8c:0f:97:01:c1:4f:cf:04:2b:41:59:1b:cb:4f:15:95: 45:b0:39:77:49:46:66:67:0e:21:4b:d3:22:80:93:d7:7b:c3: 4e:a2:6a:6e:02:4f:a0:c9:f8:42:9d:31:b9:6d:bd:50:7a:46: f5:ab:97:42:61:d5:10:2c:31:18:d8:ed:69:e2:47:b6:83:b9: f7:98:2c:57:60:ad:cf:1c:87:af:80:38:c6:f6:3a:2d:0c:a4: be:a2:56:b9:70:46:e5:07:b6:13:d2:84:cd:bc:f7:53:ed:98: 71:39:ce:aa:28:23:6c:bb:d8:de:e9:62:68:f2:f0:1c:93:cb: 3a:78:cc:16:18:7a:42:cb:d6:c6:a5:e8:f1:2a:c2:f8:50:ec: 56:17:0f:3d:db:98:b6:ac:f7:3e:8e:87:fb:ab:22:94:6c:f1: 23:81:5e:6c:83:93:ec:b5:21:e8:26:e9:45:50:ba:35:da:a7: 08:df:b4:6c:2a:48:0e:6b:dd:05:27:4e:51:26:6f:c6:1c:00: be:0a:0c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPdjO5xltlAufkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NThhYmNkYzAtNTQzNC00ZGVkLTk2YWEtNGMxZjBhN2IyNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhY+tBp6MMaoZvHXmlQ7cjT379+P8LLMS44e xhhLj8za5aXO/KUyWlURpLJr/ER7WQJYN3kcC9f8p4weN3g5BMD/JpQSEbKjjHN+ Dyj3LpVWOwMDBSUlnFzhr58ay1Gi/M+tNYhrA8B+URGXnQxUw60vmIaR5U8Z5ktT CjMd30KSHF99hXeLB617xG3ljlLftrZtqjPauon1EvaGI4hWswWN+xwMTMXCt1FU nmQsrZ6ynMcDy92KLNyqonlQ8F3CkmQ6mjb5vq3AFqbk70CCB96CulY4RCEEdA+V V+c6yuID6ir3iDLdxk8rgCWV/+jzGjb660P6fJK6nH6BlrzCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjWjbmXJ9BZkn0F8b0tYcuSIFSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTJhOTkxMDAtYzZhYy0z MGRiLWIxOWQtYTUyNjkxMTUxMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4tyFcrDEXkzXYPwIlfjgt3uMDYCzccfnw2s8OSSOi74heS2bXIys50 MFkMSq8GntMkwd31jGCcjA+XAcFPzwQrQVkby08VlUWwOXdJRmZnDiFL0yKAk9d7 w06iam4CT6DJ+EKdMbltvVB6RvWrl0Jh1RAsMRjY7WniR7aDufeYLFdgrc8ch6+A OMb2Oi0MpL6iVrlwRuUHthPShM2891PtmHE5zqooI2y72N7pYmjy8ByTyzp4zBYY ekLL1sal6PEqwvhQ7FYXDz3bmLas9z6Oh/urIpRs8SOBXmyDk+y1Iegm6UVQujXa pwjftGwqSA5r3QUnTlEmb8YcAL4KDGQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:41:20 2025 by rpki-client