$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7df7c37-7aa0-3407-9869-859c1d4a139f.roa File: c7df7c37-7aa0-3407-9869-859c1d4a139f.roa (raw, json) Hash identifier: Mw+7tZsmR27BMwWzve7YyY9mGzRBdJs89rVf/1gKa80= Subject key identifier: 9E:AD:C3:BB:89:3A:60:C4:24:7D:E1:72:1D:45:CF:9F:21:E1:40:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C8DCBDA237F5046F2460 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7df7c37-7aa0-3407-9869-859c1d4a139f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.97.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c8:dc:bd:a2:37:f5:04:6f:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8e14e516-e731-42c6-9d32-eaaf9f4b7947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:00:5d:98:25:0c:13:10:16:84:c3:ed:b9:4b: 28:33:90:40:c8:f7:8d:75:0c:fa:97:01:67:5c:f5: 14:97:35:f2:a2:f8:e3:2c:2f:1c:15:56:26:40:91: bb:65:26:35:10:8d:5f:7a:50:22:69:e5:7f:bf:cb: 99:5a:c3:74:18:24:3a:76:9e:ee:b5:0f:98:c6:12: a2:f2:c0:84:2b:8d:5e:c4:b2:f4:6d:55:66:a0:78: c9:fb:5f:ea:c6:5b:56:32:70:69:e4:9c:20:25:b9: 83:0c:47:03:f1:0a:2a:22:7a:f7:92:61:05:e3:f0: 57:44:b8:a5:a6:c4:b5:de:2b:82:da:76:b7:b8:5f: bd:f0:b3:ea:45:1c:4a:87:a5:02:b2:00:44:52:7c: 46:e2:0e:10:f3:e4:14:80:f3:aa:e3:57:d7:3e:35: 95:60:43:70:8a:d9:54:c2:c7:5f:ae:12:a6:0c:c8: c1:ef:35:7a:44:68:ad:d4:49:a9:fc:be:ad:d0:5b: a2:48:fd:13:d7:22:8d:aa:12:0a:df:86:d3:3a:f0: 89:44:7f:2e:e0:cc:89:76:b4:d7:a4:bb:05:2b:f8: 51:4c:2a:c7:da:f3:6e:37:56:0c:96:cf:60:f3:ff: e9:16:ce:83:e6:94:e2:81:12:9a:8c:e5:d0:0b:ad: 7d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AD:C3:BB:89:3A:60:C4:24:7D:E1:72:1D:45:CF:9F:21:E1:40:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c7df7c37-7aa0-3407-9869-859c1d4a139f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5f:0a:8e:05:18:4b:f0:51:d8:2b:a9:05:e6:29:99:5f:a4: f4:45:78:c1:da:89:1f:a2:4b:82:e6:15:1c:fc:a8:66:08:6a: db:d6:d7:14:3e:7f:c9:fe:fb:f1:ef:a6:1d:85:3e:b1:9e:29: 0e:4e:a6:0d:4b:db:b5:36:49:27:63:fc:e7:14:9e:cc:42:94: 9a:ff:f3:18:ee:d0:d3:a7:47:c5:cd:28:37:f3:70:f6:9f:21: d1:0c:d1:b1:6c:b5:6c:27:74:07:2b:45:53:b4:4e:fb:c8:39: 60:39:d6:c8:3f:4c:1f:84:55:73:67:c4:25:0e:73:c8:2b:c3: 82:e6:f5:e2:4a:6a:b0:e5:67:b6:aa:bf:df:9d:e4:3f:65:7d: 65:fc:c3:8b:0a:fc:c3:30:ba:cc:6e:e2:8b:88:87:91:61:ec: 05:14:91:e1:a9:bc:2f:f0:1a:02:f3:51:cd:89:7b:48:50:64: 9c:e1:cb:a8:e7:0c:38:94:01:f1:df:a9:3a:16:4a:42:9c:71: c8:72:01:02:c4:44:61:62:50:fd:2c:5b:5f:cf:34:48:fb:ee: 32:60:79:7d:54:2f:5c:b9:11:e5:e1:b4:f5:c1:19:5f:fa:89: 6e:26:eb:e7:2e:26:3a:49:29:dc:36:06:bc:c6:0d:18:89:e4: fa:06:63:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMjcvaI39QRvJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGUxNGU1MTYtZTczMS00MmM2LTlkMzItZWFhZjlmNGI3OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjABdmCUMExAWhMPtuUsoM5BAyPeNdQz6lwFn XPUUlzXyovjjLC8cFVYmQJG7ZSY1EI1felAiaeV/v8uZWsN0GCQ6dp7utQ+YxhKi 8sCEK41exLL0bVVmoHjJ+1/qxltWMnBp5JwgJbmDDEcD8QoqInr3kmEF4/BXRLil psS13iuC2na3uF+98LPqRRxKh6UCsgBEUnxG4g4Q8+QUgPOq41fXPjWVYENwitlU wsdfrhKmDMjB7zV6RGit1Emp/L6t0FuiSP0T1yKNqhIK34bTOvCJRH8u4MyJdrTX pLsFK/hRTCrH2vNuN1YMls9g8//pFs6D5pTigRKajOXQC619BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6tw7uJOmDEJH3hch1Fz58h4UCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzdkZjdjMzctN2FhMC0z NDA3LTk4NjktODU5YzFkNGExMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5fCo4FGEvwUdgrqQXmKZlfpPRFeMHaiR+iS4LmFRz8qGYIatvW1xQ+ f8n++/Hvph2FPrGeKQ5Opg1L27U2SSdj/OcUnsxClJr/8xju0NOnR8XNKDfzcPaf IdEM0bFstWwndAcrRVO0TvvIOWA51sg/TB+EVXNnxCUOc8grw4Lm9eJKarDlZ7aq v9+d5D9lfWX8w4sK/MMwusxu4ouIh5Fh7AUUkeGpvC/wGgLzUc2Je0hQZJzhy6jn DDiUAfHfqToWSkKccchyAQLERGFiUP0sW1/PNEj77jJgeX1UL1y5EeXhtPXBGV/6 iW4m6+cuJjpJKdw2BrzGDRiJ5PoGY1U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:40 2025 by rpki-client