$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa File: cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa (raw, json) Hash identifier: 8YEjI76t4aV7ZbjJ+dV2RCUwindO7YykmWN31zPXhAY= Subject key identifier: 18:1F:C4:D2:34:49:B7:5B:AB:84:26:8D:DC:20:CC:63:73:B0:19:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853C5132E35CE3AC1D9880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.123.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3c:51:32:e3:5c:e3:ac:1d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ea77aa06-ace5-4eeb-aa2d-d886537ee85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:fa:7f:5b:72:73:a0:a6:16:0f:3c:79:b1: 65:b8:3d:01:67:ba:37:7d:19:aa:9a:ba:b2:01:f9: 13:41:67:4e:24:76:2d:e2:b2:36:3d:6b:19:c7:e9: 13:10:ba:27:df:0e:2e:42:75:5f:d1:92:7a:f2:17: 08:c5:a2:f9:f1:c3:68:3d:72:71:8d:e1:ff:bd:fc: f1:54:7d:f5:e1:70:b9:fa:67:0c:d6:2e:ea:66:2d: 10:11:7d:d0:7a:0d:dd:a4:b5:71:cf:6e:fd:d4:d6: 23:7e:3b:99:3b:93:65:69:f3:06:df:9c:fd:dc:25: f9:2f:7f:c0:71:1b:ee:f5:a5:37:3b:8b:70:c2:27: 2b:ad:16:60:2c:f3:16:88:3b:60:ea:43:fe:3b:3b: 11:04:e8:74:05:f2:64:cd:b1:47:26:df:3c:1f:25: 2f:fc:94:50:20:32:c0:89:82:06:96:82:08:43:5c: 85:45:7b:5b:9d:26:83:ac:2f:fd:f4:09:00:e8:b8: f7:f8:69:02:aa:4f:bd:e5:18:f9:32:ec:15:fb:4b: d4:e5:c9:07:38:ad:19:9f:25:6a:34:13:7b:c2:8e: 82:c2:37:7c:98:33:75:07:49:0d:5a:b8:7e:81:0a: 10:77:65:af:d7:96:d9:a7:fd:61:bc:6d:25:d0:10: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1F:C4:D2:34:49:B7:5B:AB:84:26:8D:DC:20:CC:63:73:B0:19:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cffdeab8-4b1b-3928-916e-1dedc189dd7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e3:72:75:18:25:95:29:c0:5b:50:90:d5:78:75:b6:f3:bc: ff:2b:1d:4c:ee:f9:3c:b8:3b:e3:34:18:5a:63:c8:7a:46:96: 3a:22:5c:cc:1d:f4:12:2d:85:15:86:7f:14:2c:8e:c6:6e:fc: 0e:83:c7:88:a7:87:c9:4c:bf:1a:fe:a6:13:f8:18:6a:0d:c7: 6b:58:57:fb:7e:ab:8f:68:82:fd:c8:4c:f7:73:83:e6:65:f0: 83:0b:1e:b6:5d:bd:bf:de:23:c4:b2:3d:34:67:d3:6d:2f:a6: 10:52:33:c7:3a:1a:fb:50:a5:0f:01:94:d9:72:fc:4f:9f:92: c1:cb:2f:6c:ec:ce:3d:c3:e7:aa:1c:df:36:a3:41:bb:9c:c2: ae:96:94:d3:a7:38:72:ea:2b:2a:9b:6e:47:54:e3:38:3c:99: ce:ec:5c:a6:7d:ac:f1:eb:94:ce:38:48:7e:d2:63:90:b3:51: bc:c5:b6:4a:85:a9:bd:a6:e3:b6:ba:d4:85:76:a7:9d:57:f0: 67:c0:9f:33:4f:c9:6a:5c:2c:99:9b:8c:f8:b1:d4:91:40:bf: e1:f6:b1:ca:51:2b:82:14:68:c8:90:71:49:05:31:d1:9f:b8: 2b:17:b0:c5:fb:8e:90:e4:dc:a6:9b:7a:7e:9f:9d:46:89:68: b7:9d:a3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTxRMuNc46wdmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWE3N2FhMDYtYWNlNS00ZWViLWFhMmQtZDg4NjUzN2VlODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9D6f1tyc6CmFg88ebFluD0BZ7o3fRmqmrqy AfkTQWdOJHYt4rI2PWsZx+kTELon3w4uQnVf0ZJ68hcIxaL58cNoPXJxjeH/vfzx VH314XC5+mcM1i7qZi0QEX3Qeg3dpLVxz2791NYjfjuZO5NlafMG35z93CX5L3/A cRvu9aU3O4twwicrrRZgLPMWiDtg6kP+OzsRBOh0BfJkzbFHJt88HyUv/JRQIDLA iYIGloIIQ1yFRXtbnSaDrC/99AkA6Lj3+GkCqk+95Rj5MuwV+0vU5ckHOK0ZnyVq NBN7wo6Cwjd8mDN1B0kNWrh+gQoQd2Wv15bZp/1hvG0l0BAjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgfxNI0Sbdbq4QmjdwgzGNzsBlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZmZGVhYjgtNGIxYi0z OTI4LTkxNmUtMWRlZGMxODlkZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/jcnUYJZUpwFtQkNV4dbbzvP8rHUzu+Ty4O+M0GFpjyHpGljoiXMwd 9BIthRWGfxQsjsZu/A6Dx4inh8lMvxr+phP4GGoNx2tYV/t+q49ogv3ITPdzg+Zl 8IMLHrZdvb/eI8SyPTRn020vphBSM8c6GvtQpQ8BlNly/E+fksHLL2zszj3D56oc 3zajQbucwq6WlNOnOHLqKyqbbkdU4zg8mc7sXKZ9rPHrlM44SH7SY5CzUbzFtkqF qb2m47a61IV2p51X8GfAnzNPyWpcLJmbjPix1JFAv+H2scpRK4IUaMiQcUkFMdGf uCsXsMX7jpDk3Kaben6fnUaJaLedozQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:02 2025 by rpki-client