$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa File: fff97a92-f728-3096-aace-80e53e101e6a.roa (raw, json) Hash identifier: /6iTCYW7CQaSE0eAfxheV/KUKUcDJCkR26Ayjt5K+3o= Subject key identifier: 70:4D:73:46:62:A4:56:B2:11:AE:17:EB:83:02:A4:DC:EA:35:A0:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB75054E4B743B365E3440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 139070 IP address blocks: 34.116.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:75:05:4e:4b:74:3b:36:5e:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d033a3f6-a4fa-41e9-b39b-f847a8eca84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:0b:4e:69:1d:d8:d4:e4:be:71:95:b9:72: 5d:cf:6c:86:db:2c:73:cd:f0:d0:8f:4c:a0:5c:5d: c8:67:aa:93:a3:2d:2e:01:a1:64:86:46:52:91:d6: ae:bd:97:dd:7e:27:fe:3a:8a:d1:09:11:12:07:bd: 66:67:ac:76:a5:8c:d7:d5:c9:3f:27:a2:00:9d:e4: bc:4a:26:f2:30:2c:42:bc:bb:38:d4:c1:a0:6d:fa: 0d:78:e8:ea:d0:84:35:c5:8c:5c:16:d2:dc:7e:63: cf:db:28:be:25:18:53:a1:d8:80:70:b5:b5:a2:57: 3d:ed:5a:2e:9f:82:35:81:54:59:58:87:eb:e9:62: 39:38:a1:2f:b1:30:fb:7c:67:f7:a9:c1:33:45:ee: 93:95:7b:cd:1f:e9:53:69:54:0b:e0:88:6f:6b:53: 82:c0:50:f2:f7:4d:e1:81:c0:78:a1:1d:09:20:ec: 33:0c:10:aa:41:03:9d:46:91:16:13:56:0f:59:a3: fc:19:12:e5:ca:cd:96:7a:46:2c:c1:1c:50:af:ec: c2:e4:98:d4:7b:ac:28:a2:36:89:9c:b5:30:33:25: 67:dc:65:50:24:e3:18:6e:d1:29:a0:1f:52:67:81: ed:73:ea:78:08:af:1b:e4:67:5b:fe:ac:60:3a:4a: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4D:73:46:62:A4:56:B2:11:AE:17:EB:83:02:A4:DC:EA:35:A0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fff97a92-f728-3096-aace-80e53e101e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.116.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c1:fb:89:ad:d1:e2:d8:60:fa:0b:a1:76:08:3c:99:4d:9b: 98:cd:87:04:8a:a6:19:23:b1:99:75:32:d0:0c:00:d9:cb:ea: 32:f6:6d:d6:ef:12:4e:60:e0:30:a8:80:28:89:2d:71:2c:1f: 98:bb:ca:4c:35:5a:9e:d0:e6:cb:2e:ae:be:6e:49:59:21:9a: 8f:60:28:9e:ba:be:96:bb:a0:f5:9a:4d:5f:02:c9:3c:52:84: 13:09:96:1f:7f:f0:d8:19:d4:6e:b9:c5:5f:d7:38:72:24:0e: b8:d6:08:d6:54:2c:b3:8e:97:9c:2f:73:ea:4f:68:cc:84:19: d3:f6:ce:7e:12:85:d5:8d:7e:d9:40:aa:69:fb:b4:83:c7:5a: 26:bb:ba:39:f8:e2:26:e2:41:e0:d7:45:40:62:05:d8:c1:65: 25:a4:7a:28:c3:4e:63:7e:c9:41:8f:18:0e:39:58:f7:bd:8b: 34:6a:ef:94:ce:db:4e:db:cf:3e:77:9b:33:79:d7:0b:04:87: be:a5:6e:16:c7:8d:90:b6:b4:0c:15:64:75:e6:ed:c0:97:37: 1b:89:b7:39:f9:e6:b7:ee:01:1e:22:31:5c:c0:2c:17:08:0e: 5a:34:63:2a:b1:20:ed:74:9e:88:c9:c7:00:14:ab:54:41:86: 32:77:41:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3UFTkt0OzZeNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDAzM2EzZjYtYTRmYS00MWU5LWIzOWItZjg0N2E4ZWNhODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIsLTmkd2NTkvnGVuXJdz2yG2yxzzfDQj0yg XF3IZ6qToy0uAaFkhkZSkdauvZfdfif+OorRCRESB71mZ6x2pYzX1ck/J6IAneS8 SibyMCxCvLs41MGgbfoNeOjq0IQ1xYxcFtLcfmPP2yi+JRhTodiAcLW1olc97Vou n4I1gVRZWIfr6WI5OKEvsTD7fGf3qcEzRe6TlXvNH+lTaVQL4Ihva1OCwFDy903h gcB4oR0JIOwzDBCqQQOdRpEWE1YPWaP8GRLlys2WekYswRxQr+zC5JjUe6woojaJ nLUwMyVn3GVQJOMYbtEpoB9SZ4Htc+p4CK8b5Gdb/qxgOkqrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBNc0ZipFayEa4X64MCpNzqNaA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZmOTdhOTItZjcyOC0z MDk2LWFhY2UtODBlNTNlMTAxZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbB+4mt0eLYYPoLoXYIPJlNm5jNhwSKphkjsZl1MtAMANnL6jL2bdbv Ek5g4DCogCiJLXEsH5i7ykw1Wp7Q5ssurr5uSVkhmo9gKJ66vpa7oPWaTV8CyTxS hBMJlh9/8NgZ1G65xV/XOHIkDrjWCNZULLOOl5wvc+pPaMyEGdP2zn4ShdWNftlA qmn7tIPHWia7ujn44ibiQeDXRUBiBdjBZSWkeijDTmN+yUGPGA45WPe9izRq75TO 207bzz53mzN51wsEh76lbhbHjZC2tAwVZHXm7cCXNxuJtzn55rfuAR4iMVzALBcI Dlo0YyqxIO10nojJxwAUq1RBhjJ3Qfg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:19 2025 by rpki-client