$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac369aa1-17e2-3c45-8c3c-7c37a20c08ae.roa File: ac369aa1-17e2-3c45-8c3c-7c37a20c08ae.roa (raw, json) Hash identifier: qHlzzhx5gLNZsylTJg6QTNvbZ0eFMB65Fs7PNH7tiYI= Subject key identifier: BA:FC:3D:B6:BD:79:19:51:22:D7:69:AE:53:E9:6A:E9:00:B3:20:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB62250B631AC0C90C0D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac369aa1-17e2-3c45-8c3c-7c37a20c08ae.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.119.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:62:25:0b:63:1a:c0:c9:0c:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9bdd78ba-e476-4c29-a267-4d0cc9b2e317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:d0:c4:6b:33:d3:3a:c8:ba:e7:8e:4e:75: 95:89:09:7a:74:83:8f:a9:b3:6f:16:45:57:a9:f9: cc:27:07:d5:d5:17:a9:c3:fc:09:ad:64:15:f5:b0: fd:72:f6:2a:7e:06:2e:b6:3d:31:02:af:40:62:e1: 48:ba:64:4d:80:36:9d:85:74:c8:0a:31:d8:52:23: 4e:cf:f6:2d:db:9e:40:ed:f2:12:03:37:1e:a0:e8: 77:df:6f:03:13:5b:be:19:52:13:86:f0:57:2f:4b: 87:aa:eb:6c:63:7f:ef:8f:2d:29:8b:89:ca:31:22: 83:62:fc:39:40:c6:a5:6f:07:39:fc:2d:c0:60:21: 49:c5:28:3c:12:a1:51:0a:0d:09:31:c8:df:ca:9d: 90:85:10:da:d3:6e:20:11:5d:11:be:52:63:32:3f: bd:c9:13:e6:35:cb:a5:95:90:59:b7:27:77:ca:19: 67:fe:6a:0d:4d:d5:21:9e:33:ea:c7:35:72:2a:05: 3e:30:16:e0:33:e6:aa:34:50:4f:bb:d3:a9:92:19: e5:4f:13:21:1f:dd:e1:ef:3a:64:a4:dd:0c:94:29: 38:f3:40:af:9a:46:c9:99:08:c3:9a:40:da:c6:7e: 5d:3a:55:cf:28:b9:18:76:d1:58:40:b8:cc:d7:57: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FC:3D:B6:BD:79:19:51:22:D7:69:AE:53:E9:6A:E9:00:B3:20:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac369aa1-17e2-3c45-8c3c-7c37a20c08ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cb:e9:58:1e:06:98:6c:d2:5d:96:3a:f9:a2:27:48:d3:36: 35:ff:6f:08:5b:98:3f:5e:fe:05:82:fa:74:79:36:d3:33:e4: 3c:58:49:59:ff:84:83:14:1f:b0:12:ac:d4:1d:1d:8d:23:86: 24:d7:34:45:32:62:32:60:70:37:14:1f:ef:50:2f:6c:ff:99: 7c:19:56:f7:df:17:97:4c:c8:ba:92:b1:e5:0e:5c:86:9c:b1: 98:55:f7:b0:65:3b:af:2b:b6:b0:8e:5e:7b:dc:72:91:a5:62: 92:c9:82:e6:c4:21:73:4b:9a:f1:93:6c:85:5c:a6:ba:37:48: 83:f8:fa:e3:c8:77:10:b1:fc:c5:57:da:db:1a:53:34:4f:e0: 0c:b5:ec:cf:ad:16:20:c3:09:f4:11:b2:a2:d4:1e:5d:af:46: a1:e7:67:d1:6f:6e:96:bf:4c:dd:ba:31:0e:b1:c8:39:eb:d7: df:4b:e4:a9:cd:67:a5:4c:bd:15:10:c8:5b:8e:dc:a3:47:8a: 02:71:11:b6:8a:88:2c:8b:b7:f2:78:b4:b3:a1:26:ff:aa:c3: 3f:e4:28:a9:ae:a7:ba:a1:e0:0f:53:e8:d6:1f:f5:9a:50:5a: 99:bd:a5:91:13:cf:17:3a:39:ee:04:37:39:2e:e2:22:9d:71: 59:d7:90:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2IlC2MawMkMDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWJkZDc4YmEtZTQ3Ni00YzI5LWEyNjctNGQwY2M5YjJlMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnPQxGsz0zrIuueOTnWViQl6dIOPqbNvFkVX qfnMJwfV1Repw/wJrWQV9bD9cvYqfgYutj0xAq9AYuFIumRNgDadhXTICjHYUiNO z/Yt255A7fISAzceoOh3328DE1u+GVIThvBXL0uHqutsY3/vjy0pi4nKMSKDYvw5 QMalbwc5/C3AYCFJxSg8EqFRCg0JMcjfyp2QhRDa024gEV0RvlJjMj+9yRPmNcul lZBZtyd3yhln/moNTdUhnjPqxzVyKgU+MBbgM+aqNFBPu9OpkhnlTxMhH93h7zpk pN0MlCk480CvmkbJmQjDmkDaxn5dOlXPKLkYdtFYQLjM11eaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr8Pba9eRlRItdprlPpaukAsyDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMzNjlhYTEtMTdlMi0z YzQ1LThjM2MtN2MzN2EyMGMwOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3L6VgeBphs0l2WOvmiJ0jTNjX/bwhbmD9e/gWC+nR5NtMz5DxYSVn/ hIMUH7ASrNQdHY0jhiTXNEUyYjJgcDcUH+9QL2z/mXwZVvffF5dMyLqSseUOXIac sZhV97BlO68rtrCOXnvccpGlYpLJgubEIXNLmvGTbIVcpro3SIP4+uPIdxCx/MVX 2tsaUzRP4Ay17M+tFiDDCfQRsqLUHl2vRqHnZ9Fvbpa/TN26MQ6xyDnr199L5KnN Z6VMvRUQyFuO3KNHigJxEbaKiCyLt/J4tLOhJv+qwz/kKKmup7qh4A9T6NYf9ZpQ Wpm9pZETzxc6Oe4ENzku4iKdcVnXkJY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:57 2025 by rpki-client