$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa File: e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa (raw, json) Hash identifier: iHSnIUw2hwwnKm6f63eRpt/wmM+UgqgGO+NJV3tn1e4= Subject key identifier: AA:67:D3:F9:C2:2F:8F:F6:9A:D1:94:57:6A:46:BA:25:0F:82:5C:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F93D07BA369906EB7920 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.76.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f9:3d:07:ba:36:99:06:eb:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4f5b6574-9fb3-4604-9f6a-4664362e7edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:46:df:1d:6f:a8:7f:e4:12:cc:7d:a8:52: 4e:0e:93:d7:f6:0d:b9:2c:39:03:4e:3b:10:9b:d1: 11:1d:09:3b:35:84:a4:a3:67:0a:b0:7f:26:bf:52: 41:43:34:82:56:88:99:81:48:1e:20:6d:3c:f9:65: b1:7c:b1:bd:2f:8c:6a:ce:59:d7:c3:a8:6d:32:81: 1b:f0:81:3a:13:41:e0:7d:23:bc:22:43:77:2c:53: 6b:21:61:ab:02:e3:ee:3d:25:e6:26:01:e5:c9:75: b8:5d:c7:30:3f:06:d4:de:67:c6:c2:ff:93:ff:76: b7:d1:75:0d:1c:ee:22:55:c2:5c:9c:b7:a3:4a:e6: 74:f1:73:1f:03:da:a5:87:11:52:68:90:bd:2e:7f: e6:b3:0a:4b:b8:a9:39:5a:3e:9d:e1:93:62:84:57: 20:57:35:72:94:3d:fd:3f:db:be:2e:1e:21:8c:cb: 82:e1:f7:cf:77:f4:71:6e:4b:49:fd:1e:23:e6:9f: 85:9d:c2:b9:e6:8f:de:d5:06:0f:f0:b0:41:41:d9: b7:9f:92:f6:37:26:d4:b0:e4:be:fa:34:c6:5f:71: 8d:1a:18:c7:48:3e:c6:2b:7e:4f:50:f7:5b:78:c8: 6a:f3:b0:97:ff:d6:19:00:0c:44:7a:0b:94:31:aa: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:67:D3:F9:C2:2F:8F:F6:9A:D1:94:57:6A:46:BA:25:0F:82:5C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e9e0e008-e2da-3ab0-a712-9ab68a0983a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1c:5a:68:7b:65:5d:e2:36:4a:5d:93:c7:ea:a3:f3:53:3d: 84:66:d3:4c:94:d9:73:af:15:28:3e:36:51:ce:ad:ec:a9:2a: 58:a7:9b:71:20:cb:bf:e6:0c:d7:ed:c5:f6:9d:9e:ed:75:e9: a1:5b:35:b3:61:80:30:73:94:d5:cb:b1:9c:66:78:21:3d:cf: 58:6e:53:57:eb:33:c9:9a:83:42:7f:51:c5:2c:5e:7b:74:bf: 82:91:8a:8f:8e:99:9a:4f:61:a0:42:f0:7f:76:6a:c1:3c:65: b4:cf:f3:0e:51:96:c3:5b:79:44:0d:24:5d:61:75:ca:d7:cb: be:dd:3a:fc:15:8c:ba:42:d8:06:73:06:34:61:5c:2e:56:8f: 6f:cb:6c:a9:f5:cf:08:59:fd:2b:45:86:0d:a9:a9:d4:44:be: 5c:62:46:63:ef:0d:25:55:2b:bf:1e:18:e2:78:56:e8:79:cd: 73:fd:35:e6:5e:eb:90:bb:54:ee:2d:06:89:0b:df:ed:bf:4c: 49:82:53:11:5d:a3:22:0a:5a:7a:4b:74:2c:84:d4:1a:ab:1d: 37:aa:fe:18:fa:80:4f:f5:c7:64:c7:3b:fc:46:c6:b3:d5:f7: c8:a0:03:a1:f4:dc:fd:60:69:b6:f9:bc:c7:70:ba:ea:b2:d8: fc:d5:cf:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPk9B7o2mQbreSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGY1YjY1NzQtOWZiMy00NjA0LTlmNmEtNDY2NDM2MmU3ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioFG3x1vqH/kEsx9qFJODpPX9g25LDkDTjsQ m9ERHQk7NYSko2cKsH8mv1JBQzSCVoiZgUgeIG08+WWxfLG9L4xqzlnXw6htMoEb 8IE6E0HgfSO8IkN3LFNrIWGrAuPuPSXmJgHlyXW4XccwPwbU3mfGwv+T/3a30XUN HO4iVcJcnLejSuZ08XMfA9qlhxFSaJC9Ln/mswpLuKk5Wj6d4ZNihFcgVzVylD39 P9u+Lh4hjMuC4ffPd/RxbktJ/R4j5p+FncK55o/e1QYP8LBBQdm3n5L2NybUsOS+ +jTGX3GNGhjHSD7GK35PUPdbeMhq87CX/9YZAAxEeguUMaorAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpn0/nCL4/2mtGUV2pGuiUPglywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTllMGUwMDgtZTJkYS0z YWIwLWE3MTItOWFiNjhhMDk4M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMcWmh7ZV3iNkpdk8fqo/NTPYRm00yU2XOvFSg+NlHOreypKlinm3Eg y7/mDNftxfadnu116aFbNbNhgDBzlNXLsZxmeCE9z1huU1frM8mag0J/UcUsXnt0 v4KRio+OmZpPYaBC8H92asE8ZbTP8w5RlsNbeUQNJF1hdcrXy77dOvwVjLpC2AZz BjRhXC5Wj2/LbKn1zwhZ/StFhg2pqdREvlxiRmPvDSVVK78eGOJ4Vuh5zXP9NeZe 65C7VO4tBokL3+2/TEmCUxFdoyIKWnpLdCyE1BqrHTeq/hj6gE/1x2THO/xGxrPV 98igA6H03P1gabb5vMdwuuqy2PzVz2M= -----END CERTIFICATE-----Generated at Sun Apr 27 01:29:11 2025 by rpki-client