$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa File: d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa (raw, json) Hash identifier: str7o1cLM35IhRxG+QhrziNRLlBtDHeDcjUwhOLm5ck= Subject key identifier: AE:C6:15:3D:E9:2A:D3:1A:CC:E6:AF:81:61:0C:D5:EB:DD:73:46:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EE15415F2E97EEB8BE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.71.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ee:15:41:5f:2e:97:ee:b8:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c607fd1b-f86c-41e9-ab94-d3f988a560b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:a9:1e:1a:f1:dc:83:31:a2:78:44:02:7c: a3:73:37:30:8f:cb:95:b5:98:be:a2:fa:ef:9b:24: aa:c3:93:82:ec:c6:06:3e:5a:eb:57:aa:01:16:a0: 68:c2:00:f3:d3:a1:c3:b3:f2:06:f0:93:b7:7e:10: fc:aa:78:c8:06:04:fc:82:a6:32:e8:a2:fb:04:d6: fe:91:67:68:a4:69:c5:27:70:b0:b7:c4:81:91:10: b6:10:49:fc:7a:1d:ba:43:27:36:15:18:00:ec:ad: a3:92:6a:ea:60:a0:8b:e9:ae:cd:f0:63:68:b7:ce: 4f:d2:3d:ed:ef:38:8f:5f:a9:a0:ab:08:8c:75:24: 7a:e5:29:9c:4b:4c:ae:60:b4:22:c4:b1:6c:73:df: f2:ae:df:b6:1c:81:1d:36:3f:08:ab:81:38:70:45: d2:a5:ad:42:8b:64:be:1c:74:94:66:eb:ca:97:d2: 9d:83:47:da:cf:58:ce:04:fd:2d:c6:15:e0:3a:b2: fc:ae:e4:6c:57:1b:98:6d:4b:1f:2b:47:07:ae:92: 05:dc:90:95:8e:8e:23:54:0f:a4:5d:d0:f8:df:65: ac:44:48:ad:9f:5f:61:6d:aa:74:b8:41:4a:92:13: fa:78:65:d4:97:c2:8b:72:ac:4f:65:c2:30:4c:01: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:15:3D:E9:2A:D3:1A:CC:E6:AF:81:61:0C:D5:EB:DD:73:46:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d134356b-d3eb-3e9f-ac5d-e0d3f3cd8186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a4:21:c0:e7:30:b7:b7:db:14:6d:57:43:76:00:8d:84:41: 41:e2:b9:22:d4:2a:86:ac:cd:98:3d:ba:b7:f8:cf:96:08:d6: fe:f6:63:49:8a:14:30:47:d5:84:36:bd:3e:cb:87:77:99:f7: 4d:f4:24:f9:d1:13:cb:43:f1:99:3a:c8:9d:d3:42:34:3d:e7: 06:83:7a:b8:28:bb:b0:11:d8:c5:ae:d2:b4:c8:7f:b0:71:03: 7c:dd:9f:de:5f:4e:5e:7e:13:2e:73:38:21:71:82:8b:59:1f: 54:88:eb:41:b1:d8:7a:87:f2:c7:a3:bc:87:30:44:a2:27:9e: f6:f5:d1:cc:8e:39:bb:f3:ec:af:ef:06:42:54:c8:98:37:07: e0:d8:77:8d:04:16:7f:30:3e:48:71:ea:54:b3:de:8f:11:f2: af:71:90:08:ed:cc:de:fe:7e:e2:33:49:63:aa:3f:ca:83:ae: 47:10:59:26:46:96:7b:e4:13:83:d5:04:fd:6e:b3:ea:9c:c9: 94:f1:4c:67:7c:31:77:db:ce:20:26:85:6e:ec:81:39:e0:82: cf:25:3e:e7:81:f5:20:8c:8a:a8:da:4f:67:49:ba:d7:cd:a5: 76:35:6b:9e:20:fd:51:29:58:a3:99:fb:33:8d:f2:00:60:11: 32:5b:85:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO4VQV8ul+64voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzYwN2ZkMWItZjg2Yy00MWU5LWFiOTQtZDNmOTg4YTU2MGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszKpHhrx3IMxonhEAnyjczcwj8uVtZi+ovrv mySqw5OC7MYGPlrrV6oBFqBowgDz06HDs/IG8JO3fhD8qnjIBgT8gqYy6KL7BNb+ kWdopGnFJ3Cwt8SBkRC2EEn8eh26Qyc2FRgA7K2jkmrqYKCL6a7N8GNot85P0j3t 7ziPX6mgqwiMdSR65SmcS0yuYLQixLFsc9/yrt+2HIEdNj8Iq4E4cEXSpa1Ci2S+ HHSUZuvKl9Kdg0faz1jOBP0txhXgOrL8ruRsVxuYbUsfK0cHrpIF3JCVjo4jVA+k XdD432WsREitn19hbap0uEFKkhP6eGXUl8KLcqxPZcIwTAEuQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7GFT3pKtMazOavgWEM1evdc0aiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEzNDM1NmItZDNlYi0z ZTlmLWFjNWQtZTBkM2YzY2Q4MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACekIcDnMLe32xRtV0N2AI2EQUHiuSLUKoaszZg9urf4z5YI1v72Y0mK FDBH1YQ2vT7Lh3eZ9030JPnRE8tD8Zk6yJ3TQjQ95waDergou7AR2MWu0rTIf7Bx A3zdn95fTl5+Ey5zOCFxgotZH1SI60Gx2HqH8sejvIcwRKInnvb10cyOObvz7K/v BkJUyJg3B+DYd40EFn8wPkhx6lSz3o8R8q9xkAjtzN7+fuIzSWOqP8qDrkcQWSZG lnvkE4PVBP1us+qcyZTxTGd8MXfbziAmhW7sgTnggs8lPueB9SCMiqjaT2dJutfN pXY1a54g/VEpWKOZ+zON8gBgETJbhWk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:37 2025 by rpki-client