$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5d22f3a-c323-3ad5-a2a0-b0140ede9737.roa File: e5d22f3a-c323-3ad5-a2a0-b0140ede9737.roa (raw, json) Hash identifier: AZeujLywShvzYZgKZFxGFpsudO0lTB/yjN+AFXwmQvI= Subject key identifier: 80:28:3F:06:F9:91:9C:39:68:25:D7:F3:74:81:D7:57:64:1A:00:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D9A4E330C212838DAF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5d22f3a-c323-3ad5-a2a0-b0140ede9737.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d9:a4:e3:30:c2:12:83:8d:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=02e0b7bd-d0c7-4c91-8451-1f69792ede26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f5:c5:88:8a:d9:f6:d6:3f:3a:89:a3:ed:19: 48:02:33:ed:4e:3a:7d:66:b3:30:d2:21:2c:41:24: e9:ef:10:ed:fd:2c:78:6d:dd:25:ad:dc:f6:48:7a: c3:51:5b:ef:dd:39:85:2b:33:ae:77:ee:ac:26:39: 90:bb:be:32:d4:f6:f0:94:d9:4f:f7:26:e4:f5:4c: 65:83:b1:7e:8b:5a:c4:ee:19:cb:92:de:13:e3:17: 22:d1:19:ec:f6:73:15:d6:ff:d8:7c:3a:b5:a8:71: a9:ac:94:0e:ff:68:e0:30:d4:34:d4:06:0e:b9:39: 68:38:53:51:3b:92:f6:44:3f:7f:32:04:52:ba:d1: e3:0c:0e:f6:1d:d4:93:46:41:d3:0b:41:8f:40:5f: 92:77:34:fe:60:cf:0a:1a:48:75:c4:51:cc:aa:25: c6:01:fe:26:4e:85:c3:b6:e7:0d:56:da:f2:61:78: 01:58:ca:dd:5d:a5:fe:a4:9a:5c:c4:7b:cb:cb:f2: 9d:c9:70:d8:46:88:7c:87:84:fb:9c:3e:26:23:b7: 61:ed:7d:bc:5f:bb:db:99:46:93:f8:ee:5c:49:5d: a5:da:90:ef:1f:87:fe:ea:b4:a1:c9:ad:fb:40:c0: 11:92:53:e6:62:a9:63:e3:20:0e:a9:41:0d:e0:56: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:28:3F:06:F9:91:9C:39:68:25:D7:F3:74:81:D7:57:64:1A:00:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5d22f3a-c323-3ad5-a2a0-b0140ede9737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b3:c0:e3:24:c0:72:9f:62:2e:bf:08:92:92:b3:97:77:20: bd:fa:61:09:35:13:18:3c:27:bf:72:20:91:34:5b:a6:3d:ee: 12:19:1e:98:21:3e:c3:89:8c:65:a3:30:bc:0f:81:68:e5:4a: d4:1a:3a:9d:50:6c:3c:44:c5:33:34:0b:26:b2:bf:03:75:b7: 75:66:ea:db:bd:9b:34:88:6c:0f:1a:52:44:a0:c8:a0:a7:2a: b6:f1:1e:37:81:d7:88:48:db:cb:3a:72:81:18:2d:e0:a8:a4: 52:ef:d0:dc:56:97:32:94:40:6e:19:ee:aa:42:cb:74:c4:ed: d2:5c:56:1c:55:12:9f:dc:22:d6:d1:3d:41:bb:5b:47:b5:83: 65:9f:3b:1a:3b:ce:88:07:db:61:77:02:79:31:5d:3e:ef:10: 6e:1d:4f:54:ba:33:da:5f:62:1f:8b:53:3a:8a:7f:90:79:a1: 75:a3:0d:83:1a:dd:54:3d:44:f8:db:70:57:bf:ff:88:3a:d6: bd:d3:78:3e:1b:1b:18:9f:36:4c:cf:7a:3b:13:80:c8:1f:89: c4:9c:f5:bc:5d:d1:67:c2:11:9d:79:e6:df:1b:cf:91:67:d9: f7:f5:e0:09:5a:44:e3:eb:4a:ec:a7:3d:17:47:a0:19:69:2c: 01:b0:a1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNmk4zDCEoONrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDJlMGI3YmQtZDBjNy00YzkxLTg0NTEtMWY2OTc5MmVkZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPXFiIrZ9tY/Oomj7RlIAjPtTjp9ZrMw0iEs QSTp7xDt/Sx4bd0lrdz2SHrDUVvv3TmFKzOud+6sJjmQu74y1PbwlNlP9ybk9Uxl g7F+i1rE7hnLkt4T4xci0Rns9nMV1v/YfDq1qHGprJQO/2jgMNQ01AYOuTloOFNR O5L2RD9/MgRSutHjDA72HdSTRkHTC0GPQF+SdzT+YM8KGkh1xFHMqiXGAf4mToXD tucNVtryYXgBWMrdXaX+pJpcxHvLy/KdyXDYRoh8h4T7nD4mI7dh7X28X7vbmUaT +O5cSV2l2pDvH4f+6rShya37QMARklPmYqlj4yAOqUEN4FZm2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAoPwb5kZw5aCXX83SB11dkGgBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVkMjJmM2EtYzMyMy0z YWQ1LWEyYTAtYjAxNDBlZGU5NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSzwOMkwHKfYi6/CJKSs5d3IL36YQk1Exg8J79yIJE0W6Y97hIZHpgh PsOJjGWjMLwPgWjlStQaOp1QbDxExTM0CyayvwN1t3Vm6tu9mzSIbA8aUkSgyKCn KrbxHjeB14hI28s6coEYLeCopFLv0NxWlzKUQG4Z7qpCy3TE7dJcVhxVEp/cItbR PUG7W0e1g2WfOxo7zogH22F3AnkxXT7vEG4dT1S6M9pfYh+LUzqKf5B5oXWjDYMa 3VQ9RPjbcFe//4g61r3TeD4bGxifNkzPejsTgMgficSc9bxd0WfCEZ155t8bz5Fn 2ff14AlaROPrSuynPRdHoBlpLAGwof4= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:41 2025 by rpki-client