$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa File: b5dd507c-2031-35e3-a85f-266fb48df32d.roa (raw, json) Hash identifier: LdbievnAanbHyGBlJcqhXIXRRyt4meKK6Qw/OrlDbx4= Subject key identifier: 7F:78:7A:D4:75:C2:37:2E:EA:A1:92:FF:15:E0:4F:3B:C3:27:88:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E9A3F44B8BBA7EA24B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e9:a3:f4:4b:8b:ba:7e:a2:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7fc2b900-6614-4f18-b6f0-47d93a8baa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:4e:14:b1:61:6e:82:84:85:20:66:71:92: 4e:d8:2b:04:3a:66:9c:96:b0:d0:de:38:51:f3:4d: 5d:57:8e:c7:81:82:f2:d0:1f:f0:d5:d3:34:e6:1e: be:50:12:8b:f3:5d:6c:e0:4f:5c:21:e2:27:50:32: c2:33:a8:b9:25:ee:54:4a:a1:23:b4:c6:26:dc:ca: 4f:af:6f:a2:4e:64:49:b6:a0:26:9d:fd:ae:6a:0b: 17:2e:64:d1:46:80:cb:c8:eb:e5:30:9e:2a:96:c0: 23:b2:5f:fb:8d:ea:db:81:b3:cf:03:02:9d:02:96: cc:a4:76:89:40:72:7b:57:4a:f5:2a:83:5b:b5:6a: 51:2b:c5:1c:b2:26:eb:79:3c:4b:2d:b3:52:3c:a8: 34:ce:73:d8:99:e9:b5:1e:ed:a1:e0:6d:2b:5a:79: 65:5d:98:a2:2c:e0:6e:e5:da:60:31:8c:7a:da:ce: b3:9c:e1:01:ad:37:c9:0e:40:dc:96:96:57:85:ca: d9:9f:3e:17:6f:5d:c9:10:33:b9:e7:b0:05:6a:c6: 5a:55:35:97:a0:3f:15:5b:86:bc:be:4e:92:21:41: 97:c2:a4:66:8d:a6:3a:a8:de:f1:b5:38:08:5f:b9: 1c:25:f0:25:8e:26:c2:93:ea:de:07:6a:f0:4e:95: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:7A:D4:75:C2:37:2E:EA:A1:92:FF:15:E0:4F:3B:C3:27:88:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5dd507c-2031-35e3-a85f-266fb48df32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c0:4b:a4:74:43:9c:3d:de:c3:00:3e:25:d5:79:72:ed:3e: b8:43:b5:f2:19:1a:bd:f6:4b:6f:2e:e3:66:59:49:d3:44:79: 45:82:c2:41:e0:0e:9e:32:66:0b:e0:fd:30:bd:07:1e:f5:87: 2a:bb:d1:a7:b7:2d:3f:61:d8:4f:27:8d:c5:be:6b:f3:b7:33: 0d:f6:de:ce:b8:8f:5a:7d:bf:b4:d8:ba:78:14:81:76:9e:ce: dd:59:d1:c5:8c:5e:bf:6b:ab:93:18:a9:e0:71:86:fe:00:97: d4:81:85:3c:b3:73:82:11:f3:b3:fa:9a:4d:31:31:ee:59:40: 8a:47:64:2d:a2:ad:2a:05:94:5a:a6:5f:89:12:7d:00:fe:05: 0b:70:1b:ec:53:4f:26:f2:74:18:8d:03:13:5d:aa:31:1d:12: ac:6d:e6:36:e9:1f:b4:6a:2b:14:97:04:c0:17:c2:cf:9b:c9: cd:bc:3c:f0:7e:a6:87:c1:c7:01:f8:35:5f:01:75:0a:fb:51: 1b:1e:30:23:70:e4:31:7c:99:84:b4:8f:64:88:74:ce:74:32: 5d:d7:ad:69:c0:61:84:2e:5e:c2:a2:7a:37:11:a3:a1:43:01: 58:f6:7b:06:66:d0:de:d6:12:18:eb:cf:fb:af:e2:c0:d8:f5: dc:d7:53:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOmj9EuLun6iS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2ZjMmI5MDAtNjYxNC00ZjE4LWI2ZjAtNDdkOTNhOGJhYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBVOFLFhboKEhSBmcZJO2CsEOmaclrDQ3jhR 801dV47HgYLy0B/w1dM05h6+UBKL811s4E9cIeInUDLCM6i5Je5USqEjtMYm3MpP r2+iTmRJtqAmnf2uagsXLmTRRoDLyOvlMJ4qlsAjsl/7jerbgbPPAwKdApbMpHaJ QHJ7V0r1KoNbtWpRK8UcsibreTxLLbNSPKg0znPYmem1Hu2h4G0rWnllXZiiLOBu 5dpgMYx62s6znOEBrTfJDkDclpZXhcrZnz4Xb13JEDO557AFasZaVTWXoD8VW4a8 vk6SIUGXwqRmjaY6qN7xtTgIX7kcJfAljibCk+reB2rwTpXbGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH94etR1wjcu6qGS/xXgTzvDJ4gjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjVkZDUwN2MtMjAzMS0z NWUzLWE4NWYtMjY2ZmI0OGRmMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3AS6R0Q5w93sMAPiXVeXLtPrhDtfIZGr32S28u42ZZSdNEeUWCwkHg Dp4yZgvg/TC9Bx71hyq70ae3LT9h2E8njcW+a/O3Mw323s64j1p9v7TYungUgXae zt1Z0cWMXr9rq5MYqeBxhv4Al9SBhTyzc4IR87P6mk0xMe5ZQIpHZC2irSoFlFqm X4kSfQD+BQtwG+xTTybydBiNAxNdqjEdEqxt5jbpH7RqKxSXBMAXws+byc28PPB+ pofBxwH4NV8BdQr7URseMCNw5DF8mYS0j2SIdM50Ml3XrWnAYYQuXsKiejcRo6FD AVj2ewZm0N7WEhjrz/uv4sDY9dzXU5E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:49 2025 by rpki-client