$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa File: bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa (raw, json) Hash identifier: 59ktFZtxyoKcn6FqVVbfvbpXNgdffOveFOFOg9Zt1DA= Subject key identifier: 0E:53:82:31:59:7B:E7:F8:FC:21:0B:AD:06:2F:07:BB:4E:64:59:05 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785349BEC1E1034468AB000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.69.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:34:9b:ec:1e:10:34:46:8a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e46e64a0-412e-4477-8691-3641cf161ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:38:8e:47:17:a6:56:df:4a:b4:90:fb:76:0d: 61:a1:c0:50:b5:cc:9f:91:d7:44:79:08:d8:bf:7a: 78:a7:a3:c7:26:16:b6:92:94:c9:b3:76:37:82:a7: 85:05:74:0a:47:63:bf:91:f5:fe:91:4e:11:02:04: 43:85:24:4d:d0:cf:a6:1a:ea:bc:fe:47:98:43:23: 59:5d:d5:6a:38:f6:12:73:68:03:5f:d0:1c:61:da: af:08:44:ef:47:6b:56:a9:a6:de:1f:df:eb:f2:d6: 8f:eb:c1:9b:6b:e0:f1:47:10:c5:46:fc:49:6a:a7: cd:8b:3e:82:ee:8d:ef:e9:2b:b8:5a:f2:7f:6a:e4: 74:b8:f7:ec:e3:45:c1:24:2d:39:23:7f:10:4d:3a: f1:16:f9:72:6e:0d:90:28:b3:9d:27:34:e4:f9:7f: db:d7:83:78:52:68:da:a7:3c:6e:1d:51:5f:8e:70: a9:22:41:b8:9e:a3:a2:7e:de:b9:73:21:41:9e:2f: ae:39:ef:37:f2:9b:e9:10:c4:2a:a8:e7:1a:10:44: 83:0f:58:42:89:f0:65:da:e1:ca:31:cb:b9:0c:31: 73:f3:fe:ef:ec:11:c1:b4:05:0b:77:df:78:16:e0: 23:9e:76:c4:42:d6:68:9f:34:fd:e8:b2:4f:6c:4f: 67:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:53:82:31:59:7B:E7:F8:FC:21:0B:AD:06:2F:07:BB:4E:64:59:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bacda312-5f9e-32dc-a8b6-6eeb127b6542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5f:7e:99:e6:89:f5:98:27:73:01:43:68:c0:e4:69:86:59: fa:a1:65:3c:47:ce:ec:dc:e4:22:27:24:d2:d0:a2:bf:88:a2: f9:ac:c9:73:19:50:1e:2c:a3:50:c3:db:a4:61:99:d0:fc:74: 60:a2:38:c7:b0:38:60:9f:a2:da:f3:e3:ab:2e:2a:4a:02:41: a5:c9:2c:68:a4:2f:bf:95:d0:e6:40:7d:fa:c6:23:3c:53:af: ca:a4:4e:6c:ca:95:f4:38:25:20:c5:4c:a2:16:57:e8:19:36: d7:cb:24:9d:ae:45:41:89:a3:5d:25:09:01:60:47:53:42:61: 2f:40:e6:69:1c:c2:04:aa:e8:23:37:84:b1:55:77:43:5e:b9: ef:25:a3:59:62:94:1c:01:a9:64:dd:98:a1:a0:33:27:52:74: 6e:ca:3f:7f:54:fd:0a:d8:cf:2a:21:10:4d:0d:af:23:e8:00: 16:ce:b6:41:13:b0:7a:88:7c:27:6f:d1:13:53:30:7e:93:a6: fb:ae:50:74:81:c0:2d:7e:ce:34:f2:22:ff:8a:36:45:b9:29: 18:fb:c8:23:76:3a:16:2a:03:c8:67:c7:6e:b3:35:e0:a3:32: aa:d5:4e:8a:dc:8d:92:51:bc:ea:52:cb:67:f9:51:09:0e:a0: cd:00:aa:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTSb7B4QNEaKsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTQ2ZTY0YTAtNDEyZS00NDc3LTg2OTEtMzY0MWNmMTYxY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jiORxemVt9KtJD7dg1hocBQtcyfkddEeQjY v3p4p6PHJha2kpTJs3Y3gqeFBXQKR2O/kfX+kU4RAgRDhSRN0M+mGuq8/keYQyNZ XdVqOPYSc2gDX9AcYdqvCETvR2tWqabeH9/r8taP68Gba+DxRxDFRvxJaqfNiz6C 7o3v6Su4WvJ/auR0uPfs40XBJC05I38QTTrxFvlybg2QKLOdJzTk+X/b14N4Umja pzxuHVFfjnCpIkG4nqOift65cyFBni+uOe838pvpEMQqqOcaEESDD1hCifBl2uHK Mcu5DDFz8/7v7BHBtAULd994FuAjnnbEQtZonzT96LJPbE9n4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5TgjFZe+f4/CELrQYvB7tOZFkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmFjZGEzMTItNWY5ZS0z MmRjLWE4YjYtNmVlYjEyN2I2NTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlffpnmifWYJ3MBQ2jA5GmGWfqhZTxHzuzc5CInJNLQor+IovmsyXMZ UB4so1DD26RhmdD8dGCiOMewOGCfotrz46suKkoCQaXJLGikL7+V0OZAffrGIzxT r8qkTmzKlfQ4JSDFTKIWV+gZNtfLJJ2uRUGJo10lCQFgR1NCYS9A5mkcwgSq6CM3 hLFVd0Neue8lo1lilBwBqWTdmKGgMydSdG7KP39U/QrYzyohEE0NryPoABbOtkET sHqIfCdv0RNTMH6TpvuuUHSBwC1+zjTyIv+KNkW5KRj7yCN2OhYqA8hnx26zNeCj MqrVTorcjZJRvOpSy2f5UQkOoM0Aqpo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:21:14 2025 by rpki-client