$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b357e3d7-ebc7-3e58-964d-abb85a017f11.roa File: b357e3d7-ebc7-3e58-964d-abb85a017f11.roa (raw, json) Hash identifier: zwQvd+/RnRHFXcXcEyVWmgwKD4cvRj8E1zxMuD8pkF8= Subject key identifier: 98:63:6C:8A:2E:E7:97:45:6C:4D:0A:91:FF:B9:1A:E6:52:87:BD:BF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852D765E2915FB40DCF380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b357e3d7-ebc7-3e58-964d-abb85a017f11.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.124.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2d:76:5e:29:15:fb:40:dc:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=17f56041-f3c2-4688-9b86-d05b30e71a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:eb:64:cd:e9:c2:7a:bf:62:e1:06:45:ed: 81:35:61:8e:ca:17:4f:dd:b9:36:1e:fc:16:3e:e5: d3:d1:1e:8d:9c:df:e0:39:a3:bb:b1:1b:f5:48:69: 06:07:d2:f4:5b:f8:1c:46:27:6f:5d:65:d8:3b:79: 70:aa:f0:f2:23:ac:41:6d:82:e6:2b:87:53:f6:47: 02:18:b9:15:1f:2e:28:20:47:32:ce:65:aa:33:e8: 6e:18:58:f5:50:78:6e:1b:83:fc:7d:ab:90:27:f9: 2d:fe:33:d0:31:e9:19:84:8f:cd:36:36:8e:f9:a8: 59:2f:53:40:24:0b:a2:77:06:96:b7:fd:3d:92:7d: 1b:ae:28:5f:94:c9:e5:45:fd:6a:f5:7d:a5:1e:99: e7:33:6d:e9:19:40:d7:0f:96:bb:e4:8c:db:11:fd: 4a:60:e1:e3:35:92:41:43:d2:8f:0c:99:c7:82:42: 2c:a3:8e:75:5c:a3:08:60:39:62:c7:e3:a6:8b:df: 21:9a:dc:e0:ce:cb:54:da:74:1b:14:52:4b:49:da: b4:74:80:43:7c:61:fc:19:25:e5:1c:eb:d9:6c:7b: 53:93:f2:9b:b1:68:ee:24:5d:10:eb:72:10:30:1d: 12:a5:30:54:94:a8:b2:9a:a8:d1:a8:06:5b:fe:5d: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:6C:8A:2E:E7:97:45:6C:4D:0A:91:FF:B9:1A:E6:52:87:BD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b357e3d7-ebc7-3e58-964d-abb85a017f11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d4:3f:c5:9b:70:cd:dd:46:fd:09:dc:9c:e4:00:dd:dd:fa: 8c:b5:1e:27:ca:aa:61:d2:53:63:ee:7c:c4:13:b0:fe:b8:45: bf:76:30:01:ab:45:43:5c:b8:a9:4c:39:69:a9:dc:51:95:41: af:8b:9d:88:18:a0:95:97:9f:eb:91:02:fc:1d:ba:da:2d:20: 55:2c:f7:2a:24:5f:cf:4d:29:5a:10:4f:df:8e:ad:f2:c1:4a: 54:b5:af:1a:f5:2a:cb:2e:56:53:27:8f:1c:fc:28:76:d8:12: 9f:7f:13:ae:5b:11:75:ac:22:37:3f:d4:f3:95:f8:b9:bb:6b: 6c:7a:18:84:e7:df:e3:04:a7:ed:75:35:42:ad:a3:02:c7:6e: 22:5f:08:fd:33:57:5a:79:0a:57:3a:d6:5f:49:66:03:90:6b: 72:c5:6c:bb:dd:41:a3:7f:d5:34:e6:d3:bb:09:b4:fb:37:31: 05:06:c4:37:9c:01:df:27:4d:26:0f:ba:1f:59:4b:f4:1f:9c: ee:54:a5:b0:9f:6c:a1:2f:5e:0a:e7:12:ec:b6:f4:29:b7:62: 86:31:77:24:de:7a:21:3a:7e:95:47:87:cd:9d:ff:cd:47:1d: 71:07:18:a8:f6:f0:3d:a3:f1:d0:e8:20:75:ca:97:43:6a:48: 9d:d0:6a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS12XikV+0Dc84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTdmNTYwNDEtZjNjMi00Njg4LTliODYtZDA1YjMwZTcxYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcfrZM3pwnq/YuEGRe2BNWGOyhdP3bk2HvwW PuXT0R6NnN/gOaO7sRv1SGkGB9L0W/gcRidvXWXYO3lwqvDyI6xBbYLmK4dT9kcC GLkVHy4oIEcyzmWqM+huGFj1UHhuG4P8fauQJ/kt/jPQMekZhI/NNjaO+ahZL1NA JAuidwaWt/09kn0brihflMnlRf1q9X2lHpnnM23pGUDXD5a75IzbEf1KYOHjNZJB Q9KPDJnHgkIso451XKMIYDlix+Omi98hmtzgzstU2nQbFFJLSdq0dIBDfGH8GSXl HOvZbHtTk/KbsWjuJF0Q63IQMB0SpTBUlKiymqjRqAZb/l1b2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhjbIou55dFbE0Kkf+5GuZSh72/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM1N2UzZDctZWJjNy0z ZTU4LTk2NGQtYWJiODVhMDE3ZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnUP8WbcM3dRv0J3JzkAN3d+oy1HifKqmHSU2PufMQTsP64Rb92MAGr RUNcuKlMOWmp3FGVQa+LnYgYoJWXn+uRAvwdutotIFUs9yokX89NKVoQT9+OrfLB SlS1rxr1KssuVlMnjxz8KHbYEp9/E65bEXWsIjc/1POV+Lm7a2x6GITn3+MEp+11 NUKtowLHbiJfCP0zV1p5Clc61l9JZgOQa3LFbLvdQaN/1TTm07sJtPs3MQUGxDec Ad8nTSYPuh9ZS/QfnO5UpbCfbKEvXgrnEuy29Cm3YoYxdyTeeiE6fpVHh82d/81H HXEHGKj28D2j8dDoIHXKl0NqSJ3QapA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:11 2025 by rpki-client