$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa File: f068b724-074e-33c4-be1e-08d4b00df786.roa (raw, json) Hash identifier: K4Mnj0+1SIBav4noPtJ0uiCroc2ZEeHlDCFJBspurYI= Subject key identifier: 5B:D0:56:E6:58:BB:C3:BE:79:AD:5D:A1:52:EC:A9:87:31:5A:57:2C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CB07590E8B8AE0E38300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.85.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cb:07:59:0e:8b:8a:e0:e3:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3ea80c54-adae-419e-9a06-2b48df87f0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:42:53:b6:20:d8:de:57:87:5e:a4:ac:f5: cd:c8:bb:b1:34:84:04:5b:21:0b:e5:05:74:79:3e: fe:0c:7f:a2:d3:96:cc:a8:1f:b9:74:ac:ef:b7:7b: 45:cf:5d:85:96:2a:f3:aa:88:d3:7e:c4:01:23:e1: fd:18:aa:cf:2d:1e:16:32:c2:8c:3d:57:07:81:3b: e6:00:59:22:34:58:28:91:b4:61:b9:63:b1:66:fa: 57:49:58:a6:36:be:93:9e:5f:eb:13:78:c8:77:14: 13:78:95:fa:0f:8d:e8:51:29:78:6f:60:c4:64:88: 43:9d:9c:61:84:6c:bb:9c:8a:54:4b:eb:01:93:5a: 99:be:dc:80:7f:a9:12:93:c3:9b:51:c8:e3:46:6a: 24:25:73:f2:8e:3f:a4:5d:62:db:4a:d7:69:be:c7: 8d:42:28:e7:25:4d:d1:80:fe:cf:ca:06:ee:99:65: 06:1e:fa:34:b2:c1:b1:f0:cb:05:79:77:19:a0:18: d3:32:f4:5e:57:d2:5e:5b:93:f5:35:8f:72:8a:da: 0b:fd:df:55:65:7d:33:74:53:8f:cf:f7:c6:b2:41: 03:0e:4a:26:e4:f4:39:51:a3:a2:d9:b6:ab:d0:28: 8a:6e:70:c6:86:0d:57:00:50:88:4e:0f:55:d4:40: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D0:56:E6:58:BB:C3:BE:79:AD:5D:A1:52:EC:A9:87:31:5A:57:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f068b724-074e-33c4-be1e-08d4b00df786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:27:37:68:1d:18:a8:1b:f3:dd:fa:2a:e9:da:0b:54:e1:6c: 36:c2:d7:f3:6c:68:a2:ca:83:07:2b:a6:5f:60:c0:f6:3b:25: 2f:80:be:ae:ef:46:09:ad:18:61:0a:21:60:6e:bf:f4:a7:fe: d3:46:b4:f3:fa:3e:c1:56:2b:7c:43:4d:e4:0b:3d:67:70:98: 9e:87:56:3c:51:e6:13:d9:0a:b9:85:b8:6f:c5:a5:d2:94:20: a4:6b:00:24:0a:b8:20:28:64:bb:a0:d9:77:36:47:fa:63:1a: fc:ec:a6:c0:35:56:ca:a7:76:8e:2a:63:91:5f:8c:da:15:75: 55:78:5a:2b:ad:0e:a5:33:4d:34:bd:00:79:9a:e8:ea:54:63: 1c:dd:a8:e1:44:2b:06:16:3e:40:38:fd:7d:3c:1b:e8:c4:a4: 9d:31:f0:73:7d:90:25:a8:73:e3:e4:1c:ae:a1:6b:17:a6:1c: e2:07:a0:1b:1b:b3:6c:91:8b:24:b5:a6:c7:cd:38:0d:86:de: 73:16:54:fd:69:62:42:30:55:c4:6b:2b:6a:12:31:25:75:e8: aa:0b:b6:56:c9:b8:98:f5:0f:16:23:10:15:80:a7:f3:c1:8d: a3:a8:6a:9d:47:8e:3f:6e:45:55:27:f2:05:2e:be:c5:b6:c5: 57:eb:b9:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMsHWQ6LiuDjgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2VhODBjNTQtYWRhZS00MTllLTlhMDYtMmI0OGRmODdmMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBCU7Yg2N5Xh16krPXNyLuxNIQEWyEL5QV0 eT7+DH+i05bMqB+5dKzvt3tFz12FlirzqojTfsQBI+H9GKrPLR4WMsKMPVcHgTvm AFkiNFgokbRhuWOxZvpXSVimNr6Tnl/rE3jIdxQTeJX6D43oUSl4b2DEZIhDnZxh hGy7nIpUS+sBk1qZvtyAf6kSk8ObUcjjRmokJXPyjj+kXWLbStdpvseNQijnJU3R gP7PygbumWUGHvo0ssGx8MsFeXcZoBjTMvReV9JeW5P1NY9yitoL/d9VZX0zdFOP z/fGskEDDkom5PQ5UaOi2bar0CiKbnDGhg1XAFCITg9V1ED0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvQVuZYu8O+ea1doVLsqYcxWlcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA2OGI3MjQtMDc0ZS0z M2M0LWJlMWUtMDhkNGIwMGRmNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABonN2gdGKgb8936KunaC1ThbDbC1/NsaKLKgwcrpl9gwPY7JS+Avq7v RgmtGGEKIWBuv/Sn/tNGtPP6PsFWK3xDTeQLPWdwmJ6HVjxR5hPZCrmFuG/FpdKU IKRrACQKuCAoZLug2Xc2R/pjGvzspsA1Vsqndo4qY5FfjNoVdVV4WiutDqUzTTS9 AHma6OpUYxzdqOFEKwYWPkA4/X08G+jEpJ0x8HN9kCWoc+PkHK6haxemHOIHoBsb s2yRiyS1psfNOA2G3nMWVP1pYkIwVcRrK2oSMSV16KoLtlbJuJj1DxYjEBWAp/PB jaOoap1Hjj9uRVUn8gUuvsW2xVfruRc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:28 2025 by rpki-client