$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa File: aa9337db-fe12-3582-ada2-1a967639968e.roa (raw, json) Hash identifier: FgTxhue4Q1b2F+wdoLAcMIDZ3J67Ew2nZDAUgSvNJIU= Subject key identifier: 22:E6:F8:42:65:12:93:03:E9:8E:D9:74:7B:85:33:5A:E0:43:0F:FF Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699 Certificate serial: 010D0C9F43285849CE9A57206EFC7616866B7900 Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 134.195.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:57:20:6e:fc:76:16:86:6b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=72966fd0-02f2-4102-8437-f0a64a882362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:81:b2:79:43:65:3b:94:31:93:f6:8e:56: 54:c2:5a:0a:74:a9:19:d2:81:30:25:3a:04:d2:f1: b7:a4:bd:5d:32:75:0e:0d:b9:1d:ce:4d:ec:63:46: 9f:c2:c3:cc:a1:79:22:5d:61:d6:c7:cd:cc:10:a8: 04:34:ee:d8:85:5b:6c:7a:eb:94:d9:f3:0d:5b:61: 46:0f:1b:17:4b:21:dc:20:90:4e:bb:1b:21:82:f1: af:fd:f7:eb:b6:5b:9f:9e:f7:f6:ee:9b:77:c9:29: ea:f2:ab:70:e5:6a:64:48:66:4e:1c:b8:a8:4c:21: 69:07:25:c7:bd:99:c5:17:f9:b1:77:9a:af:e8:9a: 53:ad:a3:4a:1a:7c:8e:52:01:c7:59:7d:55:2d:5a: 6c:8a:8d:37:f8:69:f6:2b:3f:d1:7b:5c:01:20:ab: aa:6b:d6:96:7f:ea:7b:00:a3:ae:53:26:50:38:67: 42:1f:62:75:8c:3f:cd:3d:32:bd:da:86:0c:51:e3: 89:85:ab:33:d3:f6:d0:2a:7b:60:84:8a:7b:f6:07: 62:75:e4:44:27:2a:b7:0e:c5:18:07:7c:f1:b1:a2: be:da:f9:33:dd:56:bb:ff:45:dc:07:e3:e8:8d:a3: 5c:78:5f:ff:95:b7:4f:f9:12:a6:cc:75:12:8a:b3: 43:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E6:F8:42:65:12:93:03:E9:8E:D9:74:7B:85:33:5A:E0:43:0F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/aa9337db-fe12-3582-ada2-1a967639968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl X509v3 Authority Key Identifier: keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer sbgp-ipAddrBlock: critical IPv4: 134.195.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:94:c7:61:e3:18:eb:09:e3:37:7a:97:d2:b7:c6:dc:95:57: 89:c6:d4:e4:fb:be:6f:2e:5b:de:e4:89:ec:04:53:30:f5:2f: b0:7e:4a:a1:b6:0e:89:01:79:38:03:34:5d:8e:7d:90:6b:5d: 39:cf:ea:d0:96:f0:84:cf:bd:9c:aa:49:e8:52:f1:b2:dc:c3: 62:ab:4c:50:c2:87:88:3f:40:23:eb:11:bc:05:db:4c:26:67: d1:9e:1e:e7:66:cc:f1:ec:01:5e:99:28:56:c8:9b:50:b9:ef: 1b:c2:61:5f:62:a1:9a:f9:f7:28:cb:fc:8e:56:b0:07:a4:ca: 9e:72:e8:75:07:b2:c0:c4:e1:b9:17:c8:fc:eb:89:b2:2b:6c: ea:25:85:ea:e1:b4:7e:47:1e:25:ff:da:f3:25:68:52:f6:3f: 46:ed:98:12:a2:6d:ad:bd:0b:52:7c:95:d9:b4:14:85:b8:1b: 48:28:5e:bd:9d:c2:6d:c6:9c:c3:ab:8b:46:b2:42:00:5b:2d: 01:4d:8e:a3:04:00:ad:6a:8d:6d:dc:e3:b1:74:e5:bc:38:a0: 93:11:c0:c3:88:72:f4:f1:40:49:f1:65:5d:9f:d8:f1:b2:e8: f1:f4:91:c0:93:55:d5:64:4a:c2:6b:4f:ba:3a:bc:5e:3e:6c: 67:37:88:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlcgbvx2FoZreQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmYTI4NzgtNzE1ZS00NzkzLWFmMmEtNDMyNTgzZWEw Njk5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk NzI5NjZmZDAtMDJmMi00MTAyLTg0MzctZjBhNjRhODgyMzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHKBsnlDZTuUMZP2jlZUwloKdKkZ0oEwJToE 0vG3pL1dMnUODbkdzk3sY0afwsPMoXkiXWHWx83MEKgENO7YhVtseuuU2fMNW2FG DxsXSyHcIJBOuxshgvGv/ffrtlufnvf27pt3ySnq8qtw5WpkSGZOHLioTCFpByXH vZnFF/mxd5qv6JpTraNKGnyOUgHHWX1VLVpsio03+Gn2Kz/Re1wBIKuqa9aWf+p7 AKOuUyZQOGdCH2J1jD/NPTK92oYMUeOJhasz0/bQKntghIp79gdideREJyq3DsUY B3zxsaK+2vkz3Va7/0XcB+PojaNceF//lbdP+RKmzHUSirNDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLm+EJlEpMD6Y7ZdHuFM1rgQw//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZh Mjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1ODNlYTA2OTkvYWE5MzM3ZGItZmUxMi0z NTgyLWFkYTItMWE5Njc2Mzk5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmYTI4NzgtNzE1ZS00NzkzLWFm MmEtNDMyNTgzZWEwNjk5L2EyZmEyODc4LTcxNWUtNDc5My1hZjJhLTQzMjU4M2Vh MDY5OS5jcmwwHwYDVR0jBBgwFoAU6BplsqVg16P5Ea0VVOp5ypXtsF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZhMjg3OC03MTVlLTQ3OTMtYWYyYS00MzI1 ODNlYTA2OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGUx2HjGOsJ4zd6l9K3xtyVV4nG1OT7vm8uW97kiewEUzD1L7B+SqG2 DokBeTgDNF2OfZBrXTnP6tCW8ITPvZyqSehS8bLcw2KrTFDCh4g/QCPrEbwF20wm Z9GeHudmzPHsAV6ZKFbIm1C57xvCYV9ioZr59yjL/I5WsAekyp5y6HUHssDE4bkX yPzribIrbOolherhtH5HHiX/2vMlaFL2P0btmBKiba29C1J8ldm0FIW4G0goXr2d wm3GnMOri0ayQgBbLQFNjqMEAK1qjW3c47F05bw4oJMRwMOIcvTxQEnxZV2f2PGy 6PH0kcCTVdVkSsJrT7o6vF4+bGc3iNc= -----END CERTIFICATE-----Generated at Sat Jun 14 23:56:53 2025 by rpki-client