$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa File: c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa (raw, json) Hash identifier: XBlqWPwid42zYpRRSSCNlHWwA7EUGXwrtFzOsZ3xMGA= Subject key identifier: AF:9E:BA:CE:27:61:9B:14:C2:10:B7:6E:B8:47:67:29:B6:9F:AD:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FBFF6237DCC670BECD40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.96.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fb:ff:62:37:dc:c6:70:be:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=34a73544-cc1b-4bdc-b71b-795812cd0ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:ad:2a:a5:7c:22:8b:8b:f0:30:34:b7:61: fa:4e:05:c2:8a:19:f3:6e:9d:85:ee:72:3d:b9:8f: 47:4e:4d:11:a5:c1:ff:5f:45:c7:b4:f8:f1:38:67: 49:dc:45:eb:11:85:b2:3d:ea:8e:2d:36:01:d7:57: 1f:5a:7b:d6:8d:60:21:28:2a:d5:7d:c6:a5:1e:79: 8e:d1:51:7d:80:24:13:d9:ec:2e:27:e6:93:fc:ca: 22:4d:03:3f:12:64:41:25:73:98:d6:37:7a:97:b6: 8f:fe:f7:a9:bf:be:56:5a:21:4d:56:7c:f3:3c:0f: d2:76:38:e6:44:e3:cc:c4:36:a0:31:46:6e:ca:0e: 80:34:40:0d:a8:d6:19:48:ff:65:a9:92:62:32:05: 5d:e5:51:d9:57:ac:17:81:e7:86:44:4f:c5:4c:b2: d3:33:88:07:0f:e6:fe:e3:c9:24:88:0a:23:7e:ec: db:db:e9:5d:89:36:1b:74:7d:b9:5f:8d:28:57:0f: 95:de:09:64:e1:f1:ba:ca:39:87:0e:45:1d:b7:40: c4:9e:06:be:6c:bd:b2:3d:79:04:ef:c8:7f:a8:44: 17:d5:23:bc:dc:cb:c1:99:f6:a8:0f:1b:dd:2c:9f: 75:e3:0a:02:f2:65:32:31:4d:75:37:4f:a2:62:22: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:BA:CE:27:61:9B:14:C2:10:B7:6E:B8:47:67:29:B6:9F:AD:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c39b71e9-8c6d-36fb-9529-547ee5d71b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3a:a7:35:d2:54:d7:2c:74:d5:cc:46:3c:b4:04:e1:ca:ab: 30:19:01:ec:ba:a1:41:9e:27:fd:19:67:ba:f4:8c:d7:e6:83: 13:c1:88:ef:47:79:f0:4d:0f:c3:ef:47:9b:d5:99:57:7d:12: d9:af:77:c7:fe:65:ed:7e:ef:25:3b:ab:f0:9d:2a:78:c5:d3: 40:9d:13:7d:4d:f1:4f:45:40:b6:a7:c9:68:80:ce:cd:1a:a2: b7:53:bd:8d:93:aa:88:2f:99:a4:9e:af:2b:2b:30:76:38:56: 48:e2:3f:11:7e:d5:b1:e9:47:0c:14:67:d8:06:9b:a8:5f:91: 0d:01:28:cf:ce:de:61:8c:46:60:0f:f7:4c:db:da:86:69:b3: 5c:cd:60:da:b8:79:b3:69:92:70:17:97:6c:59:31:67:e5:14: 2b:0a:42:4f:fd:85:5b:c3:b4:36:d4:e4:d3:d0:ea:b9:e0:95: 6e:a4:c7:e7:d3:53:b6:2f:5e:17:ab:5f:b4:c0:7b:23:4f:24: 19:5d:22:de:df:df:7c:90:a7:5b:68:3e:87:87:17:0d:38:3d: 77:37:c0:1d:b9:d4:90:d4:ba:e9:2f:69:90:79:e3:e6:c1:b2: 62:ea:ac:f7:1f:94:12:5c:d4:0a:e9:58:b0:bb:86:b3:16:b5: fb:10:ff:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPv/YjfcxnC+zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzRhNzM1NDQtY2MxYi00YmRjLWI3MWItNzk1ODEyY2QwZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseitKqV8IouL8DA0t2H6TgXCihnzbp2F7nI9 uY9HTk0RpcH/X0XHtPjxOGdJ3EXrEYWyPeqOLTYB11cfWnvWjWAhKCrVfcalHnmO 0VF9gCQT2ewuJ+aT/MoiTQM/EmRBJXOY1jd6l7aP/vepv75WWiFNVnzzPA/Sdjjm ROPMxDagMUZuyg6ANEANqNYZSP9lqZJiMgVd5VHZV6wXgeeGRE/FTLLTM4gHD+b+ 48kkiAojfuzb2+ldiTYbdH25X40oVw+V3glk4fG6yjmHDkUdt0DEnga+bL2yPXkE 78h/qEQX1SO83MvBmfaoDxvdLJ914woC8mUyMU11N0+iYiImbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+eus4nYZsUwhC3brhHZym2n60xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzM5YjcxZTktOGM2ZC0z NmZiLTk1MjktNTQ3ZWU1ZDcxYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB46pzXSVNcsdNXMRjy0BOHKqzAZAey6oUGeJ/0ZZ7r0jNfmgxPBiO9H efBND8PvR5vVmVd9Etmvd8f+Ze1+7yU7q/CdKnjF00CdE31N8U9FQLanyWiAzs0a ordTvY2TqogvmaSerysrMHY4VkjiPxF+1bHpRwwUZ9gGm6hfkQ0BKM/O3mGMRmAP 90zb2oZps1zNYNq4ebNpknAXl2xZMWflFCsKQk/9hVvDtDbU5NPQ6rnglW6kx+fT U7YvXherX7TAeyNPJBldIt7f33yQp1toPoeHFw04PXc3wB251JDUuukvaZB54+bB smLqrPcflBJc1ArpWLC7hrMWtfsQ/3w= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:13 2025 by rpki-client