$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa File: d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa (raw, json) Hash identifier: lqdNn/m0niQoeBn9lUR1Jw46CAQgyTnxgig03KqOClI= Subject key identifier: 99:99:CF:62:02:6C:8B:F0:FD:14:FF:08:B4:C6:32:DE:24:AD:1E:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851FC9728A5BE955EC5300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.67.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1f:c9:72:8a:5b:e9:55:ec:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c26b2e7a-88c7-402b-9666-8adc0e85305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:27:eb:46:80:c0:26:1e:b9:1e:05:2e:c8: bf:2c:82:88:d3:55:8f:b7:bf:72:fb:b3:e4:03:65: 3d:00:db:d9:ad:0c:11:37:5f:e7:1b:11:e4:82:2b: 1d:ec:3a:90:17:06:37:80:11:45:75:95:50:79:bb: 5b:a2:40:d0:ca:a5:2b:40:28:fb:c9:a4:b3:8d:0a: 71:f7:d6:c0:e6:d6:bf:77:4f:fd:af:21:4c:3b:19: e8:43:20:f6:fe:95:6b:07:74:bc:25:ce:e3:54:d0: d6:86:6d:36:a2:9c:88:a0:34:0a:a6:12:14:63:32: 75:29:9d:55:7e:77:81:eb:96:e2:e2:90:62:84:fc: 0f:4e:f6:8c:42:ed:91:96:c4:d4:aa:86:f0:9e:2b: de:de:a7:97:81:d1:63:9a:d9:da:e4:9f:41:a4:6c: 5b:8a:54:66:53:cb:04:c6:29:2f:93:11:86:26:45: 47:f3:0e:84:fa:81:7a:4d:52:97:ac:13:d6:29:3f: 45:6b:50:0f:e6:91:0c:dd:7d:35:2e:05:15:3a:a8: ad:c7:aa:05:86:08:f2:d9:9c:b7:63:28:c9:ca:14: fd:dd:89:a6:52:b9:86:9c:63:73:34:47:bf:fd:e9: d8:a2:c5:0b:0b:69:45:dc:c7:74:cd:dd:af:7c:bd: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:99:CF:62:02:6C:8B:F0:FD:14:FF:08:B4:C6:32:DE:24:AD:1E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:69:00:df:0f:34:29:2b:e6:0c:a9:d7:ca:8f:59:76:87:3b: 99:67:67:f8:f7:44:07:c2:95:fb:09:08:fd:e4:fe:db:c8:58: 9e:73:18:e7:d8:fb:9d:19:75:5d:1e:63:99:31:04:b9:78:d4: 3c:b7:d0:cb:cc:11:ee:a7:1a:30:94:5e:7c:7e:97:c3:76:a1: de:80:b2:e7:dd:05:1c:b4:d8:1a:18:89:3f:76:44:5a:ce:9d: c6:64:ae:56:16:e7:64:4b:96:0f:2f:57:e7:8a:b4:e6:83:5a: 89:2f:eb:a2:65:76:21:47:e7:ef:40:c5:a8:f6:1f:4e:20:22: 30:ac:59:bc:70:94:30:28:be:db:ae:ca:32:05:b7:ff:0d:be: 6c:ab:0e:c3:7f:16:78:4c:24:39:b1:05:2b:6b:c0:3f:c8:25: ae:1d:bb:b0:e0:2e:e1:37:0e:3a:3c:3d:18:9e:4e:17:15:11: fe:60:c1:7e:fc:87:98:f9:95:89:e2:26:d3:e3:f7:dd:9a:8f: fa:a4:5f:a0:ce:40:b3:fe:0a:fe:c0:2c:e3:88:9c:03:e7:ec: 09:7c:ef:9e:3b:92:9b:a6:ab:8b:d6:dc:9e:13:a7:55:f0:34: b4:8f:ab:df:b3:e6:62:a2:77:25:9f:80:51:59:36:8d:02:65: 48:a3:bc:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR/Jcopb6VXsUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzI2YjJlN2EtODhjNy00MDJiLTk2NjYtOGFkYzBlODUzMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVMn60aAwCYeuR4FLsi/LIKI01WPt79y+7Pk A2U9ANvZrQwRN1/nGxHkgisd7DqQFwY3gBFFdZVQebtbokDQyqUrQCj7yaSzjQpx 99bA5ta/d0/9ryFMOxnoQyD2/pVrB3S8Jc7jVNDWhm02opyIoDQKphIUYzJ1KZ1V fneB65bi4pBihPwPTvaMQu2RlsTUqobwnive3qeXgdFjmtna5J9BpGxbilRmU8sE xikvkxGGJkVH8w6E+oF6TVKXrBPWKT9Fa1AP5pEM3X01LgUVOqitx6oFhgjy2Zy3 YyjJyhT93YmmUrmGnGNzNEe//enYosULC2lF3Md0zd2vfL25XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmZz2ICbIvw/RT/CLTGMt4krR6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDE4MTBhOTgtMjJjMS0z NDVlLWJkZmItNWQyYWI0Y2ZiMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNpAN8PNCkr5gyp18qPWXaHO5lnZ/j3RAfClfsJCP3k/tvIWJ5zGOfY +50ZdV0eY5kxBLl41Dy30MvMEe6nGjCUXnx+l8N2od6AsufdBRy02BoYiT92RFrO ncZkrlYW52RLlg8vV+eKtOaDWokv66JldiFH5+9Axaj2H04gIjCsWbxwlDAovtuu yjIFt/8NvmyrDsN/FnhMJDmxBStrwD/IJa4du7DgLuE3Djo8PRieThcVEf5gwX78 h5j5lYniJtPj992aj/qkX6DOQLP+Cv7ALOOInAPn7Al87547kpumq4vW3J4Tp1Xw NLSPq9+z5mKidyWfgFFZNo0CZUijvDE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:05 2025 by rpki-client