$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa File: cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa (raw, json) Hash identifier: pb512ME2K6jrKlKPphrWkt6mots3wAsZFaQG9d9/Rww= Subject key identifier: 89:43:8E:76:C0:B9:0E:B8:54:51:BD:CE:34:F6:D8:2F:07:A8:78:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB5EE82704CAEAADF53040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.104.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5e:e8:27:04:ca:ea:ad:f5:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c010abc7-d888-431f-8b16-0bb26e16aa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:e4:6c:b2:b5:25:2b:07:3b:87:f7:a9:38: 61:6e:47:b7:a5:d8:40:77:a9:5b:06:ad:4c:13:ae: 2a:43:df:4a:8f:4d:61:89:e3:36:a7:13:d9:42:53: de:a7:d1:72:11:b9:90:98:23:ce:e2:9d:aa:cf:9f: cf:6e:60:9e:25:eb:15:28:fd:ac:d8:dc:68:19:fb: 54:db:0d:ab:9d:bf:99:52:54:18:c2:40:b9:70:45: 08:f5:9b:ff:03:5f:17:33:12:e2:54:4a:7d:49:32: 88:9d:a5:c2:d9:d2:cd:1a:28:86:54:14:be:2d:42: d0:52:d6:fd:62:35:17:1f:40:cc:c9:fc:04:f9:c6: 8b:6d:32:99:fc:0c:f0:ec:c7:ef:da:4f:f5:9f:46: 8e:44:ae:e1:0d:c1:c7:29:61:7a:aa:b3:66:6c:43: a0:1f:ee:6e:75:8a:93:f8:2d:dc:47:b3:59:8b:5b: 2e:5e:fa:cf:32:3b:e6:50:9e:71:6b:75:83:a0:7a: db:0d:2e:dc:16:85:c0:d1:7d:76:ff:aa:db:83:a9: 63:15:76:e1:f8:82:6b:60:ac:c5:0b:b5:de:14:0a: 36:fd:64:75:28:7b:b3:f6:1f:60:17:63:67:39:3b: 0b:e4:3b:f8:5b:ef:0c:b0:98:54:5b:69:0c:bf:3b: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:8E:76:C0:B9:0E:B8:54:51:BD:CE:34:F6:D8:2F:07:A8:78:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8d:21:35:3b:c5:cc:53:cb:bf:5a:cc:45:5d:a7:eb:6f:b3: 1d:07:56:6a:c1:8a:94:5e:3c:7d:6a:3b:81:94:75:b7:f2:57: e4:d7:ba:a9:aa:03:04:d1:15:67:80:33:ff:5f:79:92:12:49: d4:d4:31:a8:33:b2:fa:8c:15:97:9f:a1:d8:45:2b:5d:5e:9d: da:09:47:9e:06:86:1a:96:1c:d2:a1:6c:fa:2c:fe:4a:3e:a9: 18:1b:f2:3a:9d:92:e2:26:0a:73:ed:62:40:8d:66:20:f9:96: 15:4c:f5:d8:67:f2:f6:03:3f:5f:cc:b9:50:a4:cd:e8:98:58: 6f:44:84:48:67:3e:83:17:b2:22:bc:14:a0:d0:6d:2d:71:d5: 22:af:b1:6b:cc:e1:a9:78:12:a0:6b:55:b5:81:d8:4d:6d:b9: 15:f0:01:72:02:09:87:60:56:2d:3e:89:0f:d6:f2:0f:bf:79: 96:3e:0f:bc:f3:b0:b6:54:3e:06:84:75:cf:2e:99:21:a3:17: eb:34:2c:2c:1c:d7:0b:b9:48:2d:88:eb:3d:11:79:d7:de:32: 96:8d:db:6d:dc:74:c6:43:95:66:06:57:5c:53:72:ef:94:96: 97:4a:17:2a:40:e6:06:1d:ce:29:dd:54:8c:5f:86:53:42:51: 19:b8:43:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku17oJwTK6q31MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzAxMGFiYzctZDg4OC00MzFmLThiMTYtMGJiMjZlMTZhYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvXkbLK1JSsHO4f3qThhbke3pdhAd6lbBq1M E64qQ99Kj01hieM2pxPZQlPep9FyEbmQmCPO4p2qz5/PbmCeJesVKP2s2NxoGftU 2w2rnb+ZUlQYwkC5cEUI9Zv/A18XMxLiVEp9STKInaXC2dLNGiiGVBS+LULQUtb9 YjUXH0DMyfwE+caLbTKZ/Azw7Mfv2k/1n0aORK7hDcHHKWF6qrNmbEOgH+5udYqT +C3cR7NZi1suXvrPMjvmUJ5xa3WDoHrbDS7cFoXA0X12/6rbg6ljFXbh+IJrYKzF C7XeFAo2/WR1KHuz9h9gF2NnOTsL5Dv4W+8MsJhUW2kMvzsE4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlDjnbAuQ64VFG9zjT22C8HqHhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I0Mzg5YzYtZjFmZC0z ZjllLWI4MGQtYzk5OGViNzk1ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiNITU7xcxTy79azEVdp+tvsx0HVmrBipRePH1qO4GUdbfyV+TXuqmq AwTRFWeAM/9feZISSdTUMagzsvqMFZefodhFK11endoJR54GhhqWHNKhbPos/ko+ qRgb8jqdkuImCnPtYkCNZiD5lhVM9dhn8vYDP1/MuVCkzeiYWG9EhEhnPoMXsiK8 FKDQbS1x1SKvsWvM4al4EqBrVbWB2E1tuRXwAXICCYdgVi0+iQ/W8g+/eZY+D7zz sLZUPgaEdc8umSGjF+s0LCwc1wu5SC2I6z0RedfeMpaN223cdMZDlWYGV1xTcu+U lpdKFypA5gYdzindVIxfhlNCURm4Q4o= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:33 2025 by rpki-client