$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa File: afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa (raw, json) Hash identifier: 79yf1qdbrjXoSDOMtXMnQoo4m+ACLKSu/OOB9/6EB8I= Subject key identifier: 95:78:B0:37:E5:F1:06:7A:CC:91:8D:03:36:E0:40:34:56:24:5F:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D4A3F0929CB499ED4780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.77.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d4:a3:f0:92:9c:b4:99:ed:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9365310e-9897-45a6-9076-3c94d1ac65fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:3d:9e:a6:3b:2b:87:17:c8:09:4a:8c:2a: af:28:0c:e5:e1:d8:20:e8:19:00:e8:8e:7e:3a:ec: f5:c7:9c:c0:76:47:ab:b5:8e:6b:91:d6:e4:bd:6a: e9:1c:54:ea:26:88:2a:11:3f:b2:e8:cb:79:77:8d: 2f:7a:75:25:4e:2b:82:77:36:eb:8e:03:a2:7b:53: da:c6:f2:dc:92:c7:ae:b3:8c:81:4a:ff:0d:10:7b: 33:92:04:16:ad:1e:b6:41:76:7c:43:30:02:df:b2: 44:35:da:4e:8c:2c:f0:b6:02:54:d1:2d:31:2f:97: 0b:12:e4:1a:13:31:df:28:c7:d4:8e:94:d7:83:7a: c2:b3:2a:7c:b8:af:ae:f8:1e:0a:66:85:3a:4c:97: 75:57:76:dc:2a:85:56:af:49:0e:b3:f5:87:c7:6d: f4:5c:d2:22:f9:6f:71:88:e2:e9:7e:e7:fe:dc:d9: f7:42:3b:af:14:18:0c:24:5d:48:7f:e2:22:e3:ca: e8:c7:62:69:6c:2e:7c:10:a6:6d:f3:9c:f4:2a:2a: a0:89:90:2b:2e:2b:e7:53:06:99:ba:77:8a:f8:11: 34:6a:98:6d:23:23:e3:fb:1b:26:1a:96:34:05:c0: 7d:00:aa:53:42:3c:0f:92:38:05:92:8c:89:62:91: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:B0:37:E5:F1:06:7A:CC:91:8D:03:36:E0:40:34:56:24:5F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.77.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:14:bb:2e:ba:3c:5d:7d:2a:66:06:ab:6d:af:61:c3:76:30: 8b:4a:1b:66:86:b3:16:19:ab:f6:68:c7:4a:75:ec:d4:63:01: 2e:7d:96:1b:c5:7d:77:53:bd:50:fb:ab:07:df:79:65:9c:84: 7a:9f:cd:0d:6a:cf:81:61:b9:8d:c2:72:40:62:99:a7:68:75: 91:63:33:9a:0c:6e:f2:77:05:ac:4c:6c:db:7d:13:d1:c1:e0: 9f:7c:89:15:c9:25:5e:07:7d:3e:27:50:22:02:27:8b:11:c3: 0c:41:2e:d8:a9:08:ee:45:98:16:d3:e3:59:15:e8:ff:bd:35: 1a:43:54:1e:9c:80:c1:0c:0e:1a:90:6e:7e:ef:0d:7c:d9:e4: 56:65:88:60:ad:1e:af:f2:45:38:96:58:88:c1:f6:8c:af:41: 69:8c:24:e9:ce:4b:6c:c7:ea:5c:98:32:de:fd:d5:92:0a:26: 7f:b2:77:0b:9b:1a:d3:1e:f5:40:3b:9d:60:81:9b:b0:e9:b8: 82:12:2e:19:7c:1d:e2:64:3c:98:ec:66:e6:8d:55:47:f2:3e: 51:3a:24:a4:cb:44:7f:89:28:eb:12:90:aa:24:07:b2:13:31: 70:c4:21:05:0c:af:4d:f1:9c:9d:68:c3:96:88:f0:1c:4b:81: d2:d5:f1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNSj8JKctJntR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTM2NTMxMGUtOTg5Ny00NWE2LTkwNzYtM2M5NGQxYWM2NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzQ9nqY7K4cXyAlKjCqvKAzl4dgg6BkA6I5+ Ouz1x5zAdkertY5rkdbkvWrpHFTqJogqET+y6Mt5d40venUlTiuCdzbrjgOie1Pa xvLckseus4yBSv8NEHszkgQWrR62QXZ8QzAC37JENdpOjCzwtgJU0S0xL5cLEuQa EzHfKMfUjpTXg3rCsyp8uK+u+B4KZoU6TJd1V3bcKoVWr0kOs/WHx230XNIi+W9x iOLpfuf+3Nn3QjuvFBgMJF1If+Ii48rox2JpbC58EKZt85z0KiqgiZArLivnUwaZ uneK+BE0aphtIyPj+xsmGpY0BcB9AKpTQjwPkjgFkoyJYpFtQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV4sDfl8QZ6zJGNAzbgQDRWJF9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZjNGYzYzQtNDE0OC0z YmQwLThhZWEtNzA1MzdiZmU3N2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4Uuy66PF19KmYGq22vYcN2MItKG2aGsxYZq/Zox0p17NRjAS59lhvF fXdTvVD7qwffeWWchHqfzQ1qz4FhuY3CckBimadodZFjM5oMbvJ3BaxMbNt9E9HB 4J98iRXJJV4HfT4nUCICJ4sRwwxBLtipCO5FmBbT41kV6P+9NRpDVB6cgMEMDhqQ bn7vDXzZ5FZliGCtHq/yRTiWWIjB9oyvQWmMJOnOS2zH6lyYMt791ZIKJn+ydwub GtMe9UA7nWCBm7DpuIISLhl8HeJkPJjsZuaNVUfyPlE6JKTLRH+JKOsSkKokB7IT MXDEIQUMr03xnJ1ow5aI8BxLgdLV8W8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:16 2025 by rpki-client