$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa File: c809be10-f019-3ce3-8366-95c1c2eec42b.roa (raw, json) Hash identifier: mK9MTUqPG2ezptsQkwbxy92LLIMs0PVKHkayNowD2m4= Subject key identifier: 39:BF:0F:94:5B:33:07:96:67:EA:61:2C:5D:E2:78:F9:67:AA:48:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB66154FB231C588AD5C20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.121.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:66:15:4f:b2:31:c5:88:ad:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=48cf53d6-18b9-4840-b789-feb1d2d44d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:3a:62:22:40:f4:09:d2:20:eb:12:1a:37: d7:61:ff:34:10:ce:1e:03:9d:ff:fb:70:fb:97:5a: 62:d1:08:23:6d:e5:49:ed:43:bd:a5:49:93:50:bb: 64:ba:d5:59:80:94:33:31:62:f1:37:f0:6c:dc:48: 4a:bc:8f:63:ed:8e:a3:de:42:30:f7:21:1e:99:6a: d5:2a:e4:fc:f4:8f:8e:1d:4f:d9:78:be:24:82:71: 06:62:68:f3:af:ab:09:7e:25:87:c2:2f:b1:25:13: 01:15:8e:f2:27:ad:e8:64:1c:13:1f:45:ba:cb:6f: 8a:04:29:db:3b:cd:e1:84:b4:8d:df:a5:92:22:68: 77:5c:09:13:d0:3e:bd:a6:b8:45:fc:ea:c9:98:b7: 4b:68:88:63:46:da:ea:e2:d9:7d:09:b0:66:ca:eb: 03:51:81:fd:1e:10:10:ba:1d:9d:05:fa:ca:ff:fc: ca:d4:7c:d9:f2:cf:1b:2c:d9:51:eb:21:d1:f8:da: 8c:a1:9e:1d:42:a8:39:d5:e5:58:e9:42:8b:a6:a9: a1:6c:a6:55:fe:80:b9:d5:78:c2:42:92:ff:4e:45: 18:82:09:0f:36:49:fa:5b:41:64:0d:74:58:b9:6a: 97:45:34:1c:c3:9a:2e:97:de:05:ba:de:4f:4a:f9: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BF:0F:94:5B:33:07:96:67:EA:61:2C:5D:E2:78:F9:67:AA:48:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c809be10-f019-3ce3-8366-95c1c2eec42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e9:8d:85:50:95:da:df:55:e1:01:70:fe:20:23:d6:aa:3d: f1:49:3b:bb:ec:9d:3c:95:29:5b:ac:e2:4d:51:37:88:c0:91: 59:04:d4:11:b5:61:46:af:ad:e7:d5:fd:04:d8:0a:dd:33:ad: 81:39:fc:e6:3e:60:35:a3:e3:0e:48:71:46:5c:43:1f:c8:38: 05:c0:eb:c8:05:d0:cb:e0:3e:e7:cc:bb:75:ad:f4:8e:e1:76: 86:d6:01:47:1d:f3:e5:c5:0f:c8:47:19:49:c1:e8:48:54:0f: 1b:79:41:ad:d9:ab:27:28:09:54:d4:46:8e:97:31:96:1b:8c: 1a:9d:4d:a7:cc:c4:11:00:77:fb:39:f4:74:fe:f6:51:d0:a9: f4:79:78:b8:7a:0b:d5:1a:9d:e7:2d:a0:9e:dd:c3:a2:84:fc: e0:a7:f8:8a:41:b5:74:96:8b:83:91:de:31:39:54:69:3c:72: 8a:45:8d:fe:95:5d:0f:11:dd:71:02:9d:52:39:f5:d2:c7:38: e7:64:25:bb:1b:cb:07:c9:f6:09:ed:04:d3:61:68:58:6c:29: b6:ad:c9:de:20:e1:55:ae:29:13:15:84:0a:a0:92:f7:db:1d: 6d:c5:8c:ca:fe:79:07:fa:84:c5:16:30:2a:74:87:35:2e:99: 1c:fc:8e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2YVT7IxxYitXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDhjZjUzZDYtMThiOS00ODQwLWI3ODktZmViMWQyZDQ0ZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW46YiJA9AnSIOsSGjfXYf80EM4eA53/+3D7 l1pi0QgjbeVJ7UO9pUmTULtkutVZgJQzMWLxN/Bs3EhKvI9j7Y6j3kIw9yEemWrV KuT89I+OHU/ZeL4kgnEGYmjzr6sJfiWHwi+xJRMBFY7yJ63oZBwTH0W6y2+KBCnb O83hhLSN36WSImh3XAkT0D69prhF/OrJmLdLaIhjRtrq4tl9CbBmyusDUYH9HhAQ uh2dBfrK//zK1HzZ8s8bLNlR6yHR+NqMoZ4dQqg51eVY6UKLpqmhbKZV/oC51XjC QpL/TkUYggkPNkn6W0FkDXRYuWqXRTQcw5oul94Fut5PSvkpcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDm/D5RbMweWZ+phLF3iePlnqkjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzgwOWJlMTAtZjAxOS0z Y2UzLTgzNjYtOTVjMWMyZWVjNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfpjYVQldrfVeEBcP4gI9aqPfFJO7vsnTyVKVus4k1RN4jAkVkE1BG1 YUavrefV/QTYCt0zrYE5/OY+YDWj4w5IcUZcQx/IOAXA68gF0MvgPufMu3Wt9I7h dobWAUcd8+XFD8hHGUnB6EhUDxt5Qa3ZqycoCVTURo6XMZYbjBqdTafMxBEAd/s5 9HT+9lHQqfR5eLh6C9UanectoJ7dw6KE/OCn+IpBtXSWi4OR3jE5VGk8copFjf6V XQ8R3XECnVI59dLHOOdkJbsbywfJ9gntBNNhaFhsKbatyd4g4VWuKRMVhAqgkvfb HW3FjMr+eQf6hMUWMCp0hzUumRz8jpI= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:13 2025 by rpki-client