$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa File: c5aa77b2-9462-3e06-b308-60218f049024.roa (raw, json) Hash identifier: cQ2QvbES0QX4lzEnR3yx/POWw10GiI2Vqh0Hae7eRbw= Subject key identifier: F9:DA:13:B3:10:5E:6C:C5:74:C9:0E:AC:96:25:F8:D7:A8:80:14:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB68C0ED201D5109473D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.118.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:68:c0:ed:20:1d:51:09:47:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2e6b2b7a-6bd8-4486-aa87-b2200acd2f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:cd:97:d6:a4:c0:bc:d0:d5:11:77:0f:1a: d3:5a:fa:fe:25:96:53:f3:3d:6d:2d:0f:5a:df:5b: 7a:19:c8:11:1b:81:dc:76:e6:5b:2b:ac:50:22:98: 3f:97:73:6f:5d:5d:c2:ce:c6:26:37:98:2f:c3:aa: 8e:95:e8:7b:2b:d5:40:4a:55:2e:f2:9e:87:71:70: 06:5a:13:99:ca:fc:b2:9d:ef:b1:7f:cc:e1:68:66: 0d:3b:1c:40:52:d5:86:43:d7:4a:f8:36:96:7b:46: 96:ae:e1:f2:10:5e:53:08:da:8e:a4:ff:4f:f9:81: 91:80:18:b4:d4:db:51:43:65:2c:3a:75:f3:4e:a6: 16:44:0a:60:52:c3:ce:e1:bc:98:76:a1:84:67:28: cb:fb:bb:a2:98:32:f4:bf:4f:f4:4b:0f:56:77:f7: 4d:b4:6a:57:53:17:38:5c:f3:5d:61:51:6b:97:08: 4c:6b:ba:b1:61:57:05:f0:96:0b:66:21:39:f5:30: 9c:e9:f0:69:e3:50:56:4f:72:03:f3:a7:de:cb:a2: be:f7:db:be:e0:70:c1:3c:94:10:bc:b4:2b:58:c3: 53:b1:19:f3:f0:9a:7e:61:4b:9e:21:ae:8b:37:d8: 19:65:aa:e9:9b:8a:29:48:f1:42:34:f9:50:03:9e: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DA:13:B3:10:5E:6C:C5:74:C9:0E:AC:96:25:F8:D7:A8:80:14:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5aa77b2-9462-3e06-b308-60218f049024.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:04:73:81:07:d6:c6:72:d3:8d:05:e5:ed:82:06:97:ee:b4: cb:60:a5:6b:50:c5:79:f8:4c:03:fe:05:9b:e0:2b:fb:6d:67: a6:26:d3:15:4f:bd:0c:ba:35:1b:40:2f:66:f5:8c:99:62:5c: 9d:74:48:ea:6b:05:7c:c2:65:b6:bd:46:26:c1:26:ff:e9:5c: 57:e9:1e:62:83:25:aa:63:64:fd:d4:44:f2:7b:07:10:6d:6b: a6:20:f8:15:d0:d5:31:b0:10:bb:25:d4:bf:72:d5:53:ed:ff: 10:de:4e:7d:1e:95:14:0d:f5:91:ba:1e:30:55:79:62:61:72: 7b:f5:5a:f8:bf:65:7e:e6:ea:8b:d5:9b:e2:98:68:45:91:54: 3d:12:07:80:4e:52:cb:c2:89:ab:57:30:ef:cc:87:7d:64:ab: 0c:dc:79:c2:7b:37:1c:5e:e8:21:1f:b8:eb:96:7b:fa:06:49: 60:a2:ff:e5:5c:a9:6c:1b:76:dd:c3:84:6f:83:a0:0b:23:82: 2f:85:64:1c:5b:77:ca:4c:20:e3:27:e2:8c:28:62:1f:06:06: e7:1b:ea:2c:bb:83:a2:d7:b1:1d:25:ab:72:59:de:43:95:80: 29:67:04:80:43:fe:3e:ff:15:9f:85:2e:b6:b0:9d:c0:38:86: ac:64:56:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2jA7SAdUQlHPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmU2YjJiN2EtNmJkOC00NDg2LWFhODctYjIyMDBhY2QyZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSnNl9akwLzQ1RF3DxrTWvr+JZZT8z1tLQ9a 31t6GcgRG4HcduZbK6xQIpg/l3NvXV3CzsYmN5gvw6qOleh7K9VASlUu8p6HcXAG WhOZyvyyne+xf8zhaGYNOxxAUtWGQ9dK+DaWe0aWruHyEF5TCNqOpP9P+YGRgBi0 1NtRQ2UsOnXzTqYWRApgUsPO4byYdqGEZyjL+7uimDL0v0/0Sw9Wd/dNtGpXUxc4 XPNdYVFrlwhMa7qxYVcF8JYLZiE59TCc6fBp41BWT3ID86fey6K+99u+4HDBPJQQ vLQrWMNTsRnz8Jp+YUueIa6LN9gZZarpm4opSPFCNPlQA55tuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnaE7MQXmzFdMkOrJYl+NeogBSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVhYTc3YjItOTQ2Mi0z ZTA2LWIzMDgtNjAyMThmMDQ5MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0Ec4EH1sZy040F5e2CBpfutMtgpWtQxXn4TAP+BZvgK/ttZ6Ym0xVP vQy6NRtAL2b1jJliXJ10SOprBXzCZba9RibBJv/pXFfpHmKDJapjZP3URPJ7BxBt a6Yg+BXQ1TGwELsl1L9y1VPt/xDeTn0elRQN9ZG6HjBVeWJhcnv1Wvi/ZX7m6ovV m+KYaEWRVD0SB4BOUsvCiatXMO/Mh31kqwzcecJ7Nxxe6CEfuOuWe/oGSWCi/+Vc qWwbdt3DhG+DoAsjgi+FZBxbd8pMIOMn4owoYh8GBucb6iy7g6LXsR0lq3JZ3kOV gClnBIBD/j7/FZ+FLrawncA4hqxkVlw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:34 2025 by rpki-client