$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa File: bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa (raw, json) Hash identifier: Z1etWJCnvd0M/4SBIeZd1qb08b/ZNGy8ABJfNcLXw20= Subject key identifier: 73:7B:C5:4A:2A:04:07:DD:BE:D8:9E:73:AA:C5:B4:E9:88:E5:64:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D507AA9387671DB0C600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.122.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d5:07:aa:93:87:67:1d:b0:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=deb50b5f-98da-47da-a9ab-917aa9ab494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:13:fb:d7:cb:4e:3b:4e:cb:0a:59:f9:3c: 00:d6:0f:21:e2:ab:c2:c0:e6:17:f8:f2:33:49:33: ca:f5:29:9b:25:35:49:fa:bb:2b:01:6a:e1:32:77: 7d:4f:6e:ab:d2:19:d1:2f:ef:4d:2d:6e:7e:b9:bf: c2:dc:78:f6:a2:77:7e:da:00:39:3b:65:d9:10:6b: 75:4f:c8:23:12:7f:f5:1a:22:52:12:91:d2:41:95: a6:72:b7:62:9b:9b:a2:94:f6:6f:7f:bc:f1:9a:eb: ad:df:b1:73:69:4e:6e:06:d1:7a:fe:71:e7:9f:9d: 58:da:70:b7:f8:d3:34:44:2c:93:25:40:a4:52:56: 0c:61:c3:51:51:a4:5d:ba:15:73:03:f6:6c:ae:86: 94:d8:e2:2f:5a:92:35:a4:e7:51:cc:be:f1:38:a2: e6:a5:19:31:0d:0d:c2:92:06:9f:ee:60:cb:ee:c1: d5:49:44:88:9e:cc:34:af:bf:a6:da:f0:88:2d:70: 8c:9a:5e:c6:1a:ac:db:f1:c6:62:bb:72:37:59:b6: 3e:6e:87:1a:7b:e1:6c:e4:3d:a4:50:f7:ca:24:cd: 73:dc:55:65:c0:3e:f2:f1:d2:18:2c:e0:fc:42:ba: e3:9c:ae:9b:7e:49:f6:6f:69:9b:9e:e6:12:2f:4a: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7B:C5:4A:2A:04:07:DD:BE:D8:9E:73:AA:C5:B4:E9:88:E5:64:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb06a86-989c-309e-8d22-e28eaaabf2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4f:f7:07:61:82:7e:32:2a:1c:5b:15:ba:5a:9b:ad:ba:01: 88:50:5c:8b:67:52:df:4e:14:0b:bf:52:1e:52:d0:a6:ea:ce: f9:2d:44:15:90:f3:70:a4:a6:a0:57:99:d3:6a:b8:79:3c:8a: 64:ab:13:3f:2f:1d:ed:79:63:85:01:dd:19:64:38:53:49:24: 2a:65:95:66:b4:7b:53:f3:7c:d8:36:42:6c:d7:cf:5a:cc:95: 3b:34:b3:d5:4f:cf:0b:5d:96:9e:39:3a:e5:8c:38:62:28:9a: 07:a1:44:d9:05:c8:15:ae:49:ef:26:72:5c:19:52:b3:fa:cf: c0:5a:86:c4:19:54:0b:1f:7a:61:cf:25:af:ae:c7:77:2c:e1: 65:e4:41:19:3b:cb:0b:e9:20:8d:70:66:15:42:10:c6:4f:1c: 09:59:3c:f3:5c:86:f0:f8:c5:22:aa:d5:67:e2:d9:d3:cd:70: 88:ee:8a:52:99:de:be:71:84:61:dd:8b:f4:6b:a8:0a:0e:57: 6e:8b:75:29:19:68:f6:04:d5:fb:fe:06:29:64:69:f9:e6:e9: 8a:19:20:19:f9:1c:7a:f0:21:13:35:3c:f6:df:ca:7b:f3:f6: ea:6a:5b:b3:21:a8:86:63:7f:f6:d8:3c:2f:97:c1:00:b4:a5: 93:e7:a8:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNUHqpOHZx2wxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGViNTBiNWYtOThkYS00N2RhLWE5YWItOTE3YWE5YWI0OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmQT+9fLTjtOywpZ+TwA1g8h4qvCwOYX+PIz STPK9SmbJTVJ+rsrAWrhMnd9T26r0hnRL+9NLW5+ub/C3Hj2ond+2gA5O2XZEGt1 T8gjEn/1GiJSEpHSQZWmcrdim5uilPZvf7zxmuut37FzaU5uBtF6/nHnn51Y2nC3 +NM0RCyTJUCkUlYMYcNRUaRduhVzA/ZsroaU2OIvWpI1pOdRzL7xOKLmpRkxDQ3C kgaf7mDL7sHVSUSInsw0r7+m2vCILXCMml7GGqzb8cZiu3I3WbY+bocae+Fs5D2k UPfKJM1z3FVlwD7y8dIYLOD8QrrjnK6bfkn2b2mbnuYSL0oumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN7xUoqBAfdvtiec6rFtOmI5WQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmJiMDZhODYtOTg5Yy0z MDllLThkMjItZTI4ZWFhYWJmMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVP9wdhgn4yKhxbFbpam626AYhQXItnUt9OFAu/Uh5S0KbqzvktRBWQ 83CkpqBXmdNquHk8imSrEz8vHe15Y4UB3RlkOFNJJCpllWa0e1PzfNg2QmzXz1rM lTs0s9VPzwtdlp45OuWMOGIomgehRNkFyBWuSe8mclwZUrP6z8BahsQZVAsfemHP Ja+ux3cs4WXkQRk7ywvpII1wZhVCEMZPHAlZPPNchvD4xSKq1Wfi2dPNcIjuilKZ 3r5xhGHdi/RrqAoOV26LdSkZaPYE1fv+Bilkafnm6YoZIBn5HHrwIRM1PPbfynvz 9upqW7MhqIZjf/bYPC+XwQC0pZPnqK0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:36 2025 by rpki-client