$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa1ef3fc-8457-3766-9cee-13d2585328c9.roa File: aa1ef3fc-8457-3766-9cee-13d2585328c9.roa (raw, json) Hash identifier: XxRv3wU5cWEsf1kR92Ciny1v1s+WLDkoHDZJtLR4RQQ= Subject key identifier: 10:28:4D:5D:2B:E4:A2:A2:D1:59:E3:15:A9:F4:6A:EE:6D:58:48:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB787D48FCC94C554E8780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa1ef3fc-8457-3766-9cee-13d2585328c9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.116.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:78:7d:48:fc:c9:4c:55:4e:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=537346b4-add4-4650-9f99-d21cb337414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:96:7f:e9:df:9c:20:fc:53:87:d9:9a:4b: 7f:63:81:52:cf:a1:94:37:52:5a:a2:65:54:bb:a5: 5d:df:ca:3c:c5:6b:06:df:9f:62:1d:bc:02:00:f9: bc:aa:c6:26:e7:ed:53:f5:8d:28:40:2e:4e:c8:a6: d9:52:6f:86:22:3c:b1:8a:e8:2d:ca:12:77:bc:3e: 6a:d0:d0:4d:24:a0:ba:58:42:86:dd:fd:9b:a2:1e: 1e:3f:9f:ab:72:36:d9:97:a6:c0:ba:01:4b:52:3c: 1c:f5:5a:11:3a:8a:8f:b2:b3:d4:a0:da:c1:7a:c2: f5:ef:91:4a:bc:1e:7b:ca:c2:c3:ff:7b:c0:5d:f2: ee:58:bf:34:03:68:ed:76:74:a6:c4:01:98:de:c6: a8:c7:fc:17:e8:d9:36:86:27:bd:eb:ca:9a:45:c7: 62:4f:56:88:8b:e6:ad:ba:13:59:5d:4f:ad:d4:6d: 44:e4:18:86:6f:2a:2c:25:11:6a:4c:39:fd:66:e4: 35:39:38:5c:27:ef:10:3b:b8:27:01:c4:00:18:7f: 1b:98:5b:f7:d1:77:1d:49:86:a7:12:7b:7b:71:ee: b4:98:35:cc:18:66:d4:0e:a5:b6:25:39:00:14:84: 95:ad:29:2d:5e:0a:47:07:ed:4f:44:0d:db:00:df: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:4D:5D:2B:E4:A2:A2:D1:59:E3:15:A9:F4:6A:EE:6D:58:48:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa1ef3fc-8457-3766-9cee-13d2585328c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.116.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f4:8a:50:8b:84:e4:2e:60:0b:87:30:40:ae:ec:f8:f7:4d: 8d:b9:6a:6f:2b:f8:ce:c5:de:02:7d:29:c7:4c:47:b3:34:e7: 59:cd:17:e4:58:a8:a2:f6:e4:7d:01:0a:f4:c2:06:26:e7:6c: 72:19:e0:38:0c:49:81:13:2d:5f:6e:4d:87:eb:22:47:39:5f: 05:6a:67:b0:0f:59:0b:79:65:3f:0f:b8:f3:a7:45:b8:04:1c: e3:65:06:56:5c:14:71:5b:88:04:94:22:d8:b6:39:bc:34:a3: bd:0f:f1:2c:24:36:ea:fb:43:58:d5:f5:46:dd:13:d2:35:6c: 3c:bd:08:19:6e:3d:c1:16:ac:68:8e:7c:18:f7:7f:b5:77:f6: 76:63:e0:43:68:c5:96:43:39:64:6e:38:71:2b:94:29:57:af: 54:12:de:82:d6:a9:86:ea:af:2c:e7:a6:a9:1a:be:84:20:a4: 0e:74:04:0a:fd:47:99:f2:d0:0b:af:e0:ce:bc:38:33:29:71: 47:0d:68:c3:1a:a8:a5:d0:c6:01:a2:2f:8b:09:a4:85:5d:41: 72:de:b0:bb:4e:2e:8e:74:a2:81:e2:bf:45:1a:b1:3d:30:09: 1e:6e:40:27:ad:11:07:73:ce:b8:53:0b:7e:c5:45:61:a3:fe: 3b:9a:a4:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3h9SPzJTFVOh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTM3MzQ2YjQtYWRkNC00NjUwLTlmOTktZDIxY2IzMzc0MTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxKWf+nfnCD8U4fZmkt/Y4FSz6GUN1JaomVU u6Vd38o8xWsG359iHbwCAPm8qsYm5+1T9Y0oQC5OyKbZUm+GIjyxiugtyhJ3vD5q 0NBNJKC6WEKG3f2boh4eP5+rcjbZl6bAugFLUjwc9VoROoqPsrPUoNrBesL175FK vB57ysLD/3vAXfLuWL80A2jtdnSmxAGY3saox/wX6Nk2hie968qaRcdiT1aIi+at uhNZXU+t1G1E5BiGbyosJRFqTDn9ZuQ1OThcJ+8QO7gnAcQAGH8bmFv30XcdSYan Ent7ce60mDXMGGbUDqW2JTkAFISVrSktXgpHB+1PRA3bAN++YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAoTV0r5KKi0VnjFan0au5tWEg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWExZWYzZmMtODQ1Ny0z NzY2LTljZWUtMTNkMjU4NTMyOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFX0ilCLhOQuYAuHMECu7Pj3TY25am8r+M7F3gJ9KcdMR7M051nNF+RY qKL25H0BCvTCBibnbHIZ4DgMSYETLV9uTYfrIkc5XwVqZ7APWQt5ZT8PuPOnRbgE HONlBlZcFHFbiASUIti2Obw0o70P8SwkNur7Q1jV9UbdE9I1bDy9CBluPcEWrGiO fBj3f7V39nZj4ENoxZZDOWRuOHErlClXr1QS3oLWqYbqryznpqkavoQgpA50BAr9 R5ny0Auv4M68ODMpcUcNaMMaqKXQxgGiL4sJpIVdQXLesLtOLo50ooHiv0UasT0w CR5uQCetEQdzzrhTC37FRWGj/juapHg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:04 2025 by rpki-client