$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa File: c5e0edf3-4a9e-3035-8292-c043825a0c27.roa (raw, json) Hash identifier: dmEbE7ZQ4If1O0In/drK2iFE46OJYYlerSrDXyQ7wWE= Subject key identifier: F4:DB:5A:C7:8A:C3:09:59:75:FE:D7:E4:3A:F9:CB:F0:34:61:12:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850B6B8E9558F695F00500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.69.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0b:6b:8e:95:58:f6:95:f0:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=90bb120c-b5e0-4c0c-9909-791d673a6824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:f3:5a:5a:71:63:16:72:f1:f2:30:8c:79: 7b:6d:75:fa:ae:9a:ce:f4:d6:f9:69:db:0f:98:23: c2:07:1e:5a:75:2f:74:6c:b1:4d:a5:20:f1:dc:bd: 97:2d:cd:92:35:ab:be:a7:54:e3:3c:d5:2d:17:2d: 57:53:81:84:7a:bd:19:96:97:50:b1:fa:af:93:aa: 59:0f:1e:58:8c:6c:7b:18:f7:a5:c5:d6:95:79:fb: 76:78:76:20:a3:4e:81:16:65:47:a3:e8:e2:1c:6d: de:a9:89:9b:12:5c:94:2d:6a:15:5f:23:c8:2e:11: 0c:88:bd:5f:e6:64:0b:c1:e8:2d:18:ba:6f:19:68: 88:7f:fb:a3:ea:4e:34:b9:32:70:32:d2:fb:96:84: 29:3d:da:82:17:3e:67:bf:8f:a9:de:b7:c2:62:04: 0c:d9:03:56:89:85:3d:db:5a:14:47:d1:59:26:2c: 4b:66:10:71:73:43:62:dd:eb:6b:28:be:af:12:52: 57:da:6c:d9:85:50:58:8f:fb:a0:90:f0:ed:0e:81: 7d:2d:2a:be:6b:a5:a1:7e:25:47:a4:d9:c8:1e:ff: 9c:56:4e:ec:93:86:59:1a:67:e8:0d:48:a0:e5:5e: 3d:59:80:e4:b6:17:48:82:e1:9c:24:d1:9f:d2:87: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:5A:C7:8A:C3:09:59:75:FE:D7:E4:3A:F9:CB:F0:34:61:12:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5e0edf3-4a9e-3035-8292-c043825a0c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:73:b5:fb:57:d5:e7:04:93:62:b0:2a:c8:ee:52:ae:60:3c: c3:c4:d1:d7:35:0c:51:7e:4c:e6:99:c7:67:f6:e7:6e:79:b7: de:26:e3:7f:ac:44:35:6f:c8:82:43:db:97:57:60:86:ab:10: 04:76:e5:36:84:7a:e5:76:f3:36:8d:af:53:cc:52:56:7e:ca: fc:8c:e9:6a:1f:cc:4a:70:51:8a:da:06:50:27:80:a1:68:c2: e2:15:3d:34:0c:e9:e7:12:42:10:68:0b:dd:ed:76:95:e3:01: 65:02:3b:18:e4:cd:ff:99:9d:ed:e1:d2:92:90:53:e8:a7:96: 77:86:72:4b:b7:ba:a0:04:4a:c1:7c:a0:93:08:bd:0b:ba:e3: f7:3c:5b:0c:7c:71:7c:59:57:ce:30:dc:2b:8f:29:61:e3:d1: ee:24:9d:8c:42:f4:af:6d:a1:8b:47:53:cf:71:a5:e4:1b:44: 2a:36:0d:b5:c4:69:08:6e:a5:e0:18:9e:b8:e0:e8:da:3c:db: cb:d0:22:f9:f1:65:60:f1:9e:7d:19:0f:7c:d9:c0:50:ef:07: 26:80:97:df:b8:6c:de:78:6c:04:30:d6:0e:4c:7c:2b:95:61: 66:57:5a:c6:6b:76:6a:fd:05:fb:82:61:70:00:5a:f8:65:e8: 01:e9:5c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQtrjpVY9pXwBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTBiYjEyMGMtYjVlMC00YzBjLTk5MDktNzkxZDY3M2E2ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30nzWlpxYxZy8fIwjHl7bXX6rprO9Nb5adsP mCPCBx5adS90bLFNpSDx3L2XLc2SNau+p1TjPNUtFy1XU4GEer0ZlpdQsfqvk6pZ Dx5YjGx7GPelxdaVeft2eHYgo06BFmVHo+jiHG3eqYmbElyULWoVXyPILhEMiL1f 5mQLwegtGLpvGWiIf/uj6k40uTJwMtL7loQpPdqCFz5nv4+p3rfCYgQM2QNWiYU9 21oUR9FZJixLZhBxc0Ni3etrKL6vElJX2mzZhVBYj/ugkPDtDoF9LSq+a6WhfiVH pNnIHv+cVk7sk4ZZGmfoDUig5V49WYDkthdIguGcJNGf0odtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTbWseKwwlZdf7X5Dr5y/A0YRLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVlMGVkZjMtNGE5ZS0z MDM1LTgyOTItYzA0MzgyNWEwYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlztftX1ecEk2KwKsjuUq5gPMPE0dc1DFF+TOaZx2f25255t94m43+s RDVvyIJD25dXYIarEAR25TaEeuV28zaNr1PMUlZ+yvyM6WofzEpwUYraBlAngKFo wuIVPTQM6ecSQhBoC93tdpXjAWUCOxjkzf+Zne3h0pKQU+inlneGcku3uqAESsF8 oJMIvQu64/c8Wwx8cXxZV84w3CuPKWHj0e4knYxC9K9toYtHU89xpeQbRCo2DbXE aQhupeAYnrjg6No828vQIvnxZWDxnn0ZD3zZwFDvByaAl9+4bN54bAQw1g5MfCuV YWZXWsZrdmr9BfuCYXAAWvhl6AHpXOI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:48 2025 by rpki-client