$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa File: a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa (raw, json) Hash identifier: h4QBewCFYPl+d3jj9IP5cfQljFyfx7ZwTYYVjvQjXlg= Subject key identifier: 33:56:87:8A:5E:FB:9F:59:E1:40:62:49:64:7F:A7:CC:94:87:5D:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853A339D20022AB332DD20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3a:33:9d:20:02:2a:b3:32:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=dce23d83-3ab7-49b1-a7b5-faac2c7dc251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:c0:f9:df:47:e1:b1:e6:87:69:d2:29:16: 2f:55:ed:65:51:69:22:47:8e:f6:fa:57:db:5e:b8: 94:9e:e4:ab:75:8c:9b:46:e8:0b:f4:05:75:42:37: 04:d1:cf:5b:45:db:be:8e:46:a4:c3:67:78:9c:80: 8f:17:43:ee:2c:91:58:3e:31:9d:08:79:0a:44:2a: 4e:0f:3d:d3:94:ac:1b:a5:9b:c8:29:e1:ce:73:81: 31:c7:3d:e2:a8:85:a1:e2:6f:e9:bc:cb:ec:1c:19: f6:2e:a2:69:1d:b7:05:dd:bc:8f:60:68:d6:4b:c9: a9:e9:37:a3:09:b9:88:4d:06:5c:16:6f:69:64:03: 04:c7:c6:eb:ac:0b:23:02:4c:18:fc:97:3e:df:d6: d8:da:10:2c:7a:f6:62:29:1d:d7:37:c0:73:61:0f: a7:1b:e3:65:85:4d:27:c7:49:d6:44:73:65:b5:28: b6:86:80:fc:0b:53:29:52:61:61:ef:e4:31:6f:60: f9:be:dd:88:fa:1d:30:05:55:3c:b1:f5:10:a5:82: 24:7c:4a:b0:77:32:14:2f:c7:60:f8:ad:e9:5e:4c: 8b:cb:e3:73:ee:20:85:6c:9c:3d:36:02:cf:3d:ec: 8c:dd:7a:78:ab:90:68:d4:17:73:19:21:89:00:3d: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:87:8A:5E:FB:9F:59:E1:40:62:49:64:7F:A7:CC:94:87:5D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:55:4f:44:23:75:12:64:f3:37:f9:5a:ec:ea:cd:5b:2d:79: 6d:81:3e:30:92:a0:13:bd:50:10:97:a9:60:57:b6:fd:3b:c2: 9b:97:11:22:3d:f8:3c:ce:01:8c:ef:a5:80:33:3f:86:b0:37: dc:60:66:55:a2:3f:0f:b0:97:f2:a2:38:d9:21:19:be:34:4e: cf:a0:8d:4e:f9:1b:83:90:91:b7:16:fc:67:b2:f0:f6:bd:bf: 28:d5:86:6e:59:1a:04:5d:6d:d8:0e:7f:73:9a:41:2f:de:3b: c6:90:36:43:0e:80:e2:a0:6f:ef:e7:66:85:b9:fd:7c:4e:d3: 55:cd:8d:ab:76:6f:09:14:9d:19:85:65:b6:d6:96:3e:46:ff: 52:e0:72:90:2d:c2:68:56:22:36:c7:b7:98:7b:e0:82:3f:33: a4:6e:4a:4b:d6:78:74:bc:c6:f4:2d:ea:ab:4c:38:eb:4e:8e: 32:09:a5:1d:93:6e:db:a1:f1:f8:dc:fc:0c:5b:c9:42:e2:f8: 43:b8:da:de:2e:a5:ad:30:7a:1b:c5:72:b6:c8:8a:83:22:b4: 61:27:bd:3f:ff:52:03:0d:95:42:d4:59:83:10:1c:60:0a:8c: 20:04:2e:47:38:62:7f:e3:05:87:9d:df:76:9f:49:ee:23:81: 36:62:22:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhToznSACKrMy3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGNlMjNkODMtM2FiNy00OWIxLWE3YjUtZmFhYzJjN2RjMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6XA+d9H4bHmh2nSKRYvVe1lUWkiR472+lfb XriUnuSrdYybRugL9AV1QjcE0c9bRdu+jkakw2d4nICPF0PuLJFYPjGdCHkKRCpO Dz3TlKwbpZvIKeHOc4Exxz3iqIWh4m/pvMvsHBn2LqJpHbcF3byPYGjWS8mp6Tej CbmITQZcFm9pZAMEx8brrAsjAkwY/Jc+39bY2hAsevZiKR3XN8BzYQ+nG+NlhU0n x0nWRHNltSi2hoD8C1MpUmFh7+Qxb2D5vt2I+h0wBVU8sfUQpYIkfEqwdzIUL8dg +K3pXkyLy+Nz7iCFbJw9NgLPPeyM3Xp4q5Bo1BdzGSGJAD21ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNWh4pe+59Z4UBiSWR/p8yUh13tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTViNzU1NTQtZGQ3YS0z NWFhLWE5ZDMtYmY0NGMzNTEyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxVT0QjdRJk8zf5WuzqzVsteW2BPjCSoBO9UBCXqWBXtv07wpuXESI9 +DzOAYzvpYAzP4awN9xgZlWiPw+wl/KiONkhGb40Ts+gjU75G4OQkbcW/Gey8Pa9 vyjVhm5ZGgRdbdgOf3OaQS/eO8aQNkMOgOKgb+/nZoW5/XxO01XNjat2bwkUnRmF ZbbWlj5G/1LgcpAtwmhWIjbHt5h74II/M6RuSkvWeHS8xvQt6qtMOOtOjjIJpR2T btuh8fjc/AxbyULi+EO42t4upa0wehvFcrbIioMitGEnvT//UgMNlULUWYMQHGAK jCAELkc4Yn/jBYed33afSe4jgTZiIhw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:41:44 2025 by rpki-client