$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa File: ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa (raw, json) Hash identifier: 4DKg7XsQMM63CSmsEg9ulbtNVgTXPVXfZ2n5UMOmZpM= Subject key identifier: CF:C4:DE:05:56:2F:4A:3F:0E:50:0E:53:DE:0D:03:34:43:6C:52:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852DFDE3B7CE358F9EFA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2d:fd:e3:b7:ce:35:8f:9e:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=61d99ec5-1bc8-46b9-b927-7966f71f31b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:3e:8d:a8:12:60:1d:0f:ed:76:94:64:f3: 29:81:f1:da:ea:a2:8f:e5:9b:d3:57:2d:89:f9:6c: 66:2c:f0:48:6e:24:c6:bb:d5:42:1f:c0:86:3e:d8: 73:a0:d0:90:a9:1a:c9:da:31:e2:ed:57:06:e2:db: 3d:46:7d:10:cf:50:e1:65:3a:1a:7b:6f:8a:f3:63: 27:aa:9b:19:75:23:86:d5:88:b8:8c:9a:dc:f3:db: 0f:e5:a5:ce:6e:fc:34:b8:8f:ad:a1:f8:5e:97:d3: 06:c5:a4:cf:30:74:55:b7:79:e8:bd:1f:20:cf:42: 4b:2b:af:61:e1:aa:ba:54:40:ab:21:6c:5d:64:3b: db:25:01:89:6a:36:23:24:29:28:1b:9a:31:fa:a0: 9f:57:2b:c4:9c:72:b7:97:f8:db:d8:09:21:2e:f4: 30:f5:e1:a2:b6:7c:cd:bd:25:14:22:82:61:9f:da: 9c:77:39:c8:f5:0d:c2:7e:1d:9e:ac:a4:9e:14:58: cd:d7:57:06:27:8b:80:04:c6:4f:03:63:ba:27:3b: c5:b4:47:45:c7:82:ee:f0:ca:7e:e1:e6:14:ee:63: f8:d4:fa:98:78:8a:db:d6:38:61:43:86:4a:3d:5b: 04:de:79:cf:71:b1:f3:d0:01:fa:a2:0d:76:b9:0d: 75:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C4:DE:05:56:2F:4A:3F:0E:50:0E:53:DE:0D:03:34:43:6C:52:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4d3fd3-2dde-3c2e-b85f-7dc098b5c50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:75:cf:86:fe:6d:08:3c:06:64:a0:16:04:0b:bd:79:ef:60: 6f:64:9d:a6:7f:3b:91:01:80:8e:23:4b:af:d1:2d:4a:b0:a1: c3:ac:1c:43:0e:cb:b0:be:eb:47:90:f6:0a:92:ac:4b:51:47: 0c:5d:d7:94:bd:ef:1e:84:e8:0e:ea:74:a5:5c:1c:e4:d4:54: 2d:44:d0:60:ba:f2:bf:6a:81:91:35:92:57:51:c5:a3:3f:37: 7b:fb:76:d3:9e:3a:39:cc:23:8e:8e:49:d9:02:92:b7:39:42: 21:e5:ab:92:69:3b:85:81:cc:28:1a:19:33:8d:e5:2a:1e:79: 2e:19:3f:30:1f:40:b9:72:b4:9a:a3:d0:d0:1a:db:fb:4b:50: d2:54:2c:46:0f:07:ab:7d:df:e0:a8:92:cb:58:1f:bc:fa:59: a2:71:f3:c6:a8:11:43:bb:79:b8:0c:07:08:f3:2f:bf:9e:06: f6:21:b3:9b:88:c2:5c:af:c7:e2:ca:64:6b:6a:14:6a:fd:17: 49:d3:7c:72:2a:d8:9d:e2:fb:86:c8:de:ee:54:a5:2e:9b:e9: b8:da:e0:f9:7b:0d:92:de:e0:8b:ae:9b:13:16:b4:c3:65:a0: fb:3c:35:45:c2:59:38:e2:3a:66:3d:26:06:e8:3d:a2:a5:ac: fb:f9:f9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS3947fONY+e+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjFkOTllYzUtMWJjOC00NmI5LWI5MjctNzk2NmY3MWYzMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFY+jagSYB0P7XaUZPMpgfHa6qKP5ZvTVy2J +WxmLPBIbiTGu9VCH8CGPthzoNCQqRrJ2jHi7VcG4ts9Rn0Qz1DhZToae2+K82Mn qpsZdSOG1Yi4jJrc89sP5aXObvw0uI+tofhel9MGxaTPMHRVt3novR8gz0JLK69h 4aq6VECrIWxdZDvbJQGJajYjJCkoG5ox+qCfVyvEnHK3l/jb2AkhLvQw9eGitnzN vSUUIoJhn9qcdznI9Q3Cfh2erKSeFFjN11cGJ4uABMZPA2O6JzvFtEdFx4Lu8Mp+ 4eYU7mP41PqYeIrb1jhhQ4ZKPVsE3nnPcbHz0AH6og12uQ11wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/E3gVWL0o/DlAOU94NAzRDbFJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E0ZDNmZDMtMmRkZS0z YzJlLWI4NWYtN2RjMDk4YjVjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ1z4b+bQg8BmSgFgQLvXnvYG9knaZ/O5EBgI4jS6/RLUqwocOsHEMO y7C+60eQ9gqSrEtRRwxd15S97x6E6A7qdKVcHOTUVC1E0GC68r9qgZE1kldRxaM/ N3v7dtOeOjnMI46OSdkCkrc5QiHlq5JpO4WBzCgaGTON5SoeeS4ZPzAfQLlytJqj 0NAa2/tLUNJULEYPB6t93+CokstYH7z6WaJx88aoEUO7ebgMBwjzL7+eBvYhs5uI wlyvx+LKZGtqFGr9F0nTfHIq2J3i+4bI3u5UpS6b6bja4Pl7DZLe4IuumxMWtMNl oPs8NUXCWTjiOmY9JgboPaKlrPv5+eA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:41:38 2025 by rpki-client