$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa File: a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa (raw, json) Hash identifier: cjOUwpvRaBGrVs7xqzDoJ+FVEigDYM78cwJ6YPWoqiA= Subject key identifier: 95:56:02:AC:DE:EE:A1:CE:CB:90:67:4E:8C:50:0F:2B:79:16:88:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F2B305FF7999127BBCB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f2:b3:05:ff:79:99:12:7b:bc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0e48386d-ac81-45cf-8242-ec90a70be53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:7e:78:27:f1:94:02:da:c8:68:6a:b1:9a: 39:08:36:d0:81:cb:f1:44:03:d4:e7:67:e7:b2:88: 49:9f:8b:ec:99:f0:fa:ef:36:65:5b:cd:35:7c:77: 8c:19:01:f8:fe:c8:fe:9b:44:08:4c:dc:bc:0e:c3: 10:98:d2:d7:7f:c4:de:f8:2b:32:9a:c1:78:e8:b1: 9d:30:79:16:5e:98:60:30:0c:f8:cf:a4:43:2e:54: af:eb:8d:bc:2b:78:95:74:bb:60:ab:24:4c:c4:5f: 2c:30:f6:74:e4:aa:af:a1:f9:2e:5f:b5:fb:4a:14: cd:fd:1a:5b:ce:e7:fa:da:0d:d2:4b:a8:25:b3:66: ce:38:75:6e:28:66:35:09:b2:99:80:13:3d:07:2a: 4b:18:da:33:90:52:f3:cf:86:b8:60:22:68:dd:d5: b0:7a:df:2b:f5:0c:4d:9f:1a:d9:85:64:fc:94:72: 5c:fb:8d:67:4c:20:ef:1f:03:ee:62:3c:25:27:bb: c4:01:44:9a:3d:95:c7:28:c8:87:a8:a6:d5:ae:39: 01:97:14:24:3f:a6:0b:76:ae:de:60:d2:7d:f9:bc: e9:ea:15:b4:f9:bb:cf:b5:ed:db:e9:df:18:56:d8: d5:12:12:6b:6c:39:04:39:cd:50:c1:6a:2d:68:f6: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:56:02:AC:DE:EE:A1:CE:CB:90:67:4E:8C:50:0F:2B:79:16:88:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a80d53f5-622b-3923-83fb-6a4f50d3ee9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f6:1b:b5:0b:28:bd:e4:45:6c:9f:4f:33:43:58:c6:a4:8a: d4:2b:bd:b5:12:06:e7:62:67:50:2f:cb:62:a9:5c:a1:07:52: fb:7c:2c:a4:2b:88:6f:10:a7:46:93:ed:64:0b:8d:b1:08:f7: 80:be:8a:70:7d:7c:5f:b3:4f:68:4e:06:53:73:1b:89:bf:c2: 67:fc:c5:40:3b:44:3b:f4:e7:59:06:5e:de:39:ea:50:34:0a: 4f:eb:41:c9:0b:bd:b1:52:07:01:da:44:26:e0:49:30:df:96: f1:5b:ef:44:c6:f8:0d:5d:f9:ad:77:99:59:f3:d2:c7:02:06: da:8d:d5:15:ab:4d:1e:3a:c4:3d:14:5a:56:d9:1f:3e:ec:5c: 8a:d1:e9:0e:ef:e8:df:81:ae:6a:81:2a:f0:63:e0:35:09:31: 1e:c9:85:09:0e:ff:bc:25:05:36:1b:2c:fb:19:8c:cc:19:68: 28:c4:9a:e4:57:24:81:ff:61:8f:48:c7:6f:dd:d5:a0:e1:1a: dd:c7:35:de:3a:b4:7d:ff:13:b6:8a:69:f5:44:3f:26:a2:cb: 08:b2:90:a4:ac:56:b5:02:e2:01:ac:39:8a:ac:3f:b1:11:36: 25:3d:9a:f7:37:47:98:a7:6c:74:21:e3:27:22:dd:e9:e0:aa: 57:90:2a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPKzBf95mRJ7vLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGU0ODM4NmQtYWM4MS00NWNmLTgyNDItZWM5MGE3MGJlNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk5+eCfxlALayGhqsZo5CDbQgcvxRAPU52fn sohJn4vsmfD67zZlW801fHeMGQH4/sj+m0QITNy8DsMQmNLXf8Te+CsymsF46LGd MHkWXphgMAz4z6RDLlSv6428K3iVdLtgqyRMxF8sMPZ05KqvofkuX7X7ShTN/Rpb zuf62g3SS6gls2bOOHVuKGY1CbKZgBM9BypLGNozkFLzz4a4YCJo3dWwet8r9QxN nxrZhWT8lHJc+41nTCDvHwPuYjwlJ7vEAUSaPZXHKMiHqKbVrjkBlxQkP6YLdq7e YNJ9+bzp6hW0+bvPte3b6d8YVtjVEhJrbDkEOc1QwWotaPZiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVWAqze7qHOy5BnToxQDyt5FojRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTgwZDUzZjUtNjIyYi0z OTIzLTgzZmItNmE0ZjUwZDNlZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT2G7ULKL3kRWyfTzNDWMakitQrvbUSBudiZ1Avy2KpXKEHUvt8LKQr iG8Qp0aT7WQLjbEI94C+inB9fF+zT2hOBlNzG4m/wmf8xUA7RDv051kGXt456lA0 Ck/rQckLvbFSBwHaRCbgSTDflvFb70TG+A1d+a13mVnz0scCBtqN1RWrTR46xD0U WlbZHz7sXIrR6Q7v6N+BrmqBKvBj4DUJMR7JhQkO/7wlBTYbLPsZjMwZaCjEmuRX JIH/YY9Ix2/d1aDhGt3HNd46tH3/E7aKafVEPyaiywiykKSsVrUC4gGsOYqsP7ER NiU9mvc3R5inbHQh4yci3engqleQKug= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:27 2025 by rpki-client