$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa File: bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa (raw, json) Hash identifier: Lv2gMUAfw84v3y/EYyx9H+qpkwBumYjQV7TsySaBP+8= Subject key identifier: F6:68:29:4B:93:C3:3A:C7:7D:3B:62:82:D5:08:DF:99:EA:E1:9C:EC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E447E6D1AFCBA58CC380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.91.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:47:e6:d1:af:cb:a5:8c:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=461c6004-b664-4710-8f29-49a10772adfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:79:19:57:7e:e7:52:38:2e:e6:82:09:43: fc:c6:2f:03:34:81:e9:2f:d9:c5:93:72:9a:08:d1: ee:42:4a:01:b0:d9:8d:60:39:ad:43:15:08:de:fb: 17:2f:5a:42:4b:8a:a8:c2:0f:42:86:0e:44:43:17: e6:de:b5:fe:49:2e:4b:f0:81:47:f7:ae:8c:ac:14: 3e:86:b3:04:b8:6d:bb:5b:b4:08:a1:d5:aa:c3:42: 64:a6:7d:43:cc:20:cc:73:84:be:2f:ea:2d:25:c1: 0b:39:ed:db:d0:55:d8:f4:3b:78:a3:d9:1c:b9:7e: bc:2f:f6:be:9b:6a:16:e7:04:80:7f:3a:0d:e5:a1: 38:e4:e5:cb:17:fb:41:96:7f:ec:b7:52:10:95:0b: a8:76:e2:b9:f0:e0:a6:48:53:9e:14:3c:25:39:ae: 81:cd:6b:6c:ff:99:0c:c0:53:9f:9e:35:a3:c4:b5: 46:ec:9b:e6:86:c6:29:96:36:12:92:2c:fc:4d:46: 40:67:8c:f4:5e:fd:2b:8b:fd:02:7e:6a:6d:b4:c5: 44:77:21:57:ed:b5:13:92:b3:26:d3:85:29:cd:37: b9:00:f4:9c:14:83:99:1e:d2:ca:0c:de:83:26:0d: cd:99:2e:8a:cd:27:dd:a0:2a:dc:ca:03:26:2a:18: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:29:4B:93:C3:3A:C7:7D:3B:62:82:D5:08:DF:99:EA:E1:9C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:70:f2:f6:24:08:a2:41:43:92:09:60:50:68:d0:ed:2a:d5: 38:d4:8a:f4:35:88:62:95:2b:ad:de:8e:ed:9e:57:e7:9b:a3: 3b:41:b0:7e:87:96:e4:7f:1a:e9:90:cd:c5:e4:66:94:c3:2b: 1c:09:af:53:aa:36:07:7c:8b:f2:fa:da:01:ec:c2:75:4d:a6: ab:33:dd:65:4d:16:d6:b8:2e:31:55:bc:83:b1:64:0c:df:a6: bc:f3:54:21:f1:e6:e9:5a:e2:f8:5c:80:64:d0:95:30:7a:f1: e8:a1:95:da:af:d6:a1:e6:a6:42:fc:b7:14:9e:9c:21:b3:12: 0b:71:42:b6:79:e9:22:d0:2c:d0:32:5b:78:e7:58:20:f3:d2: 3a:d5:02:0d:fb:94:70:03:3b:bc:07:7c:10:18:ce:4d:57:73: 10:54:f6:c1:8d:e5:63:2d:e4:95:fa:5e:f7:bf:86:bb:f0:a8: 84:86:55:f3:87:90:ea:64:1d:b2:1d:0c:ca:08:f3:5a:a1:82: 7f:d4:8c:1b:68:66:44:70:e5:b7:5a:84:54:56:fb:21:d3:26: 36:03:1b:9b:e6:e8:ed:27:fb:4a:47:cb:34:34:9c:11:49:d3: b2:10:55:b7:ac:44:01:41:e5:5c:f5:82:c6:52:01:8e:8f:2e: 04:60:ea:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhORH5tGvy6WMw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDYxYzYwMDQtYjY2NC00NzEwLThmMjktNDlhMTA3NzJhZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOp5GVd+51I4LuaCCUP8xi8DNIHpL9nFk3Ka CNHuQkoBsNmNYDmtQxUI3vsXL1pCS4qowg9Chg5EQxfm3rX+SS5L8IFH966MrBQ+ hrMEuG27W7QIodWqw0Jkpn1DzCDMc4S+L+otJcELOe3b0FXY9Dt4o9kcuX68L/a+ m2oW5wSAfzoN5aE45OXLF/tBln/st1IQlQuoduK58OCmSFOeFDwlOa6BzWts/5kM wFOfnjWjxLVG7JvmhsYpljYSkiz8TUZAZ4z0Xv0ri/0CfmpttMVEdyFX7bUTkrMm 04UpzTe5APScFIOZHtLKDN6DJg3NmS6KzSfdoCrcygMmKhhr5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZoKUuTwzrHfTtigtUI35nq4ZzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY1ZTVjNGEtNWRmNy0z ZjZiLWI1NjYtNTMxYmQ1Y2FjZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIltwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVw8vYkCKJBQ5IJYFBo0O0q1TjUivQ1iGKVK63eju2eV+eboztBsH6H luR/GumQzcXkZpTDKxwJr1OqNgd8i/L62gHswnVNpqsz3WVNFta4LjFVvIOxZAzf przzVCHx5ula4vhcgGTQlTB68eihldqv1qHmpkL8txSenCGzEgtxQrZ56SLQLNAy W3jnWCDz0jrVAg37lHADO7wHfBAYzk1XcxBU9sGN5WMt5JX6Xve/hrvwqISGVfOH kOpkHbIdDMoI81qhgn/UjBtoZkRw5bdahFRW+yHTJjYDG5vm6O0n+0pHyzQ0nBFJ 07IQVbesRAFB5Vz1gsZSAY6PLgRg6ss= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:57 2025 by rpki-client