$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdcc584a-280e-324f-b4b1-6dc69a5a4aeb.roa File: fdcc584a-280e-324f-b4b1-6dc69a5a4aeb.roa (raw, json) Hash identifier: 5DijX3S/oztCKer4ILCkxhQFZa9kzHjMTkIah2rTXec= Subject key identifier: 27:1F:47:A8:59:EC:EF:9D:EC:F1:27:C5:A1:69:28:62:93:DD:A5:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BACD2983D76561E7D51500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdcc584a-280e-324f-b4b1-6dc69a5a4aeb.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.101.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cd:29:83:d7:65:61:e7:d5:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=df69b4ea-f84f-4646-b5d2-e67aa36e4c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:fe:c6:84:25:55:79:30:f1:90:5d:73:16: e2:60:0d:08:3f:b2:fb:55:31:e0:38:8e:95:c6:36: bc:a0:e4:41:1d:97:85:fd:78:68:b6:06:73:de:25: 27:91:37:d8:ea:43:45:c5:95:25:1d:5e:ee:f6:b7: 6c:cf:fb:05:45:b5:34:7e:1b:d7:d3:ec:b2:cd:32: c6:4a:39:b0:80:9f:eb:f2:c3:f9:33:c5:b8:1f:0c: f5:e4:e9:9c:ba:4b:7c:e2:4e:b8:81:a3:81:63:a9: 0a:d9:c8:5c:6e:79:27:31:03:79:25:07:22:f2:7b: 49:e2:59:b6:c8:c6:11:f7:13:bd:5c:c5:17:74:1c: 5c:92:5e:b8:b1:91:ed:93:fd:51:1d:29:47:68:20: 3c:5c:c3:44:03:60:55:bd:56:bd:ab:11:4b:92:e6: d1:9c:d2:5f:bc:71:3a:f0:44:58:5c:36:64:b6:c6: 4c:ee:f0:ec:d2:25:c9:f4:a5:fc:1a:b7:78:a2:d3: 1e:46:98:4e:92:11:1c:58:15:9b:67:f0:31:b5:5d: 16:25:c8:0f:f6:5a:96:af:04:57:15:9d:11:70:c3: f8:8a:3f:86:0d:45:b1:6d:6c:55:89:50:52:74:f3: ac:b0:18:fb:85:96:a5:21:93:f3:6a:c0:f0:96:2d: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:47:A8:59:EC:EF:9D:EC:F1:27:C5:A1:69:28:62:93:DD:A5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fdcc584a-280e-324f-b4b1-6dc69a5a4aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d4:01:41:4e:2b:29:a1:1c:d5:9a:aa:55:05:2c:9b:4a:a2: 82:b7:64:e1:d3:dc:09:39:0a:fb:d2:a6:ce:d9:ff:5d:4b:51: 9b:b7:6f:15:4a:51:ba:8f:d8:20:18:03:0d:d4:dc:e9:6b:22: f6:22:76:20:98:f7:80:41:3e:a3:ef:52:4c:b9:61:60:18:35: 05:45:49:2b:fb:9d:48:f0:6a:f5:ae:81:a4:3f:a3:2a:31:b9: 4c:ee:8e:fd:3b:72:c4:82:30:3f:7f:17:47:d9:85:6e:b0:b5: 5d:e0:3c:96:83:11:8e:ba:ad:d6:5f:d9:ea:41:10:cd:aa:af: c8:4e:f3:98:a1:cd:4b:7f:c4:93:9c:02:60:d7:40:3a:07:54: c6:c7:e0:7d:35:9a:b4:51:93:7f:47:df:3e:ad:df:ab:8d:3c: a9:0a:29:68:66:e7:28:b0:df:e9:2e:2f:a7:61:77:3a:30:aa: 42:a0:cf:02:82:50:e3:f0:49:ba:68:58:cf:84:a5:8f:68:7e: c4:f0:b2:c4:e9:22:18:cf:d1:7d:a5:22:f5:c5:aa:42:14:f1: c8:a2:8a:ab:b9:15:e4:42:dd:a7:ce:d4:85:f7:b2:3d:e0:9f: e5:cb:03:32:40:6a:ba:72:9e:49:e1:3e:32:6b:8a:93:5d:86: 09:5a:eb:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus0pg9dlYefVFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGY2OWI0ZWEtZjg0Zi00NjQ2LWI1ZDItZTY3YWEzNmU0Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+/+xoQlVXkw8ZBdcxbiYA0IP7L7VTHgOI6V xja8oORBHZeF/XhotgZz3iUnkTfY6kNFxZUlHV7u9rdsz/sFRbU0fhvX0+yyzTLG SjmwgJ/r8sP5M8W4Hwz15Omcukt84k64gaOBY6kK2chcbnknMQN5JQci8ntJ4lm2 yMYR9xO9XMUXdBxckl64sZHtk/1RHSlHaCA8XMNEA2BVvVa9qxFLkubRnNJfvHE6 8ERYXDZktsZM7vDs0iXJ9KX8Grd4otMeRphOkhEcWBWbZ/AxtV0WJcgP9lqWrwRX FZ0RcMP4ij+GDUWxbWxViVBSdPOssBj7hZalIZPzasDwli2FiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcfR6hZ7O+d7PEnxaFpKGKT3aVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmRjYzU4NGEtMjgwZS0z MjRmLWI0YjEtNmRjNjlhNWE0YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPUAUFOKymhHNWaqlUFLJtKooK3ZOHT3Ak5CvvSps7Z/11LUZu3bxVK UbqP2CAYAw3U3OlrIvYidiCY94BBPqPvUky5YWAYNQVFSSv7nUjwavWugaQ/oyox uUzujv07csSCMD9/F0fZhW6wtV3gPJaDEY66rdZf2epBEM2qr8hO85ihzUt/xJOc AmDXQDoHVMbH4H01mrRRk39H3z6t36uNPKkKKWhm5yiw3+kuL6dhdzowqkKgzwKC UOPwSbpoWM+EpY9ofsTwssTpIhjP0X2lIvXFqkIU8ciiiqu5FeRC3afO1IX3sj3g n+XLAzJAarpynknhPjJripNdhgla66Q= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:40 2025 by rpki-client