$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/012daa8b-2662-399b-a651-b34d5147ceb6.roa File: 012daa8b-2662-399b-a651-b34d5147ceb6.roa (raw, json) Hash identifier: Bkv2xGD/iNfdon2vCGsSKzTWi6JkVGQpw+7JYb/O2Mc= Subject key identifier: 4E:D9:CE:FC:BE:B5:B7:22:6F:90:C8:7B:FF:FB:11:A0:74:11:62:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785063084FE6FCE67848BE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/012daa8b-2662-399b-a651-b34d5147ceb6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.124.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:06:30:84:fe:6f:ce:67:84:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1298a012-1686-4993-85ba-e84f5b330661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:a6:c8:37:d8:e7:21:00:6a:f8:fe:35:d4: 6b:37:43:9c:1e:d3:45:fb:ea:28:18:ea:6a:54:b5: 3c:70:6e:64:a9:10:f5:10:1b:b1:33:25:4f:60:69: 71:b2:c8:5c:24:2c:cd:93:90:e2:69:fb:68:bf:d7: 67:af:93:3c:36:90:6f:d2:bd:74:21:6c:87:32:64: 39:ad:ed:62:e4:94:f6:a2:0a:d6:6d:27:73:5a:65: ba:5c:d0:25:5b:60:5f:33:66:7b:ef:b3:9a:ec:a4: 23:63:9b:4a:2b:84:1d:50:9f:8e:46:b1:bb:40:d5: ef:1b:f2:1c:e2:80:d7:7e:f1:5b:76:e6:fe:62:1e: 18:61:3f:a0:ce:19:9b:fb:cf:fb:f3:a7:84:85:3e: 62:38:78:f7:48:b1:29:49:ca:9c:d2:28:af:e2:46: 4e:e4:f4:4d:d1:dd:dc:d0:bd:b7:60:da:0c:c9:e4: 0f:27:5c:22:10:1d:68:ab:5a:9a:4c:d9:4a:79:9f: 31:3e:60:7d:84:f8:fa:cf:08:53:26:06:84:6e:6f: 22:48:a3:1d:59:08:e9:cf:af:be:8a:e9:e1:4f:38: a1:a8:c2:67:14:17:9f:d4:5c:c7:3b:df:22:a9:d4: 2b:88:f7:11:6d:f6:4c:78:95:e9:37:27:97:a7:65: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D9:CE:FC:BE:B5:B7:22:6F:90:C8:7B:FF:FB:11:A0:74:11:62:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/012daa8b-2662-399b-a651-b34d5147ceb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ba:f1:28:bf:41:7a:ec:79:dd:16:4e:fd:97:2a:48:b9:ba: 0e:5d:10:63:83:70:8c:b2:17:eb:90:6b:92:ed:72:d1:01:cf: 42:8c:f2:dd:91:57:80:cb:3e:da:49:b2:69:f8:30:53:18:26: da:7b:25:10:64:b7:df:9d:69:5c:d7:a3:5b:33:ff:9d:cc:e5: b2:f2:67:09:01:0a:a2:4a:ed:c7:40:45:a9:bd:73:87:28:6b: a4:04:2e:68:9b:15:14:41:8d:a3:82:b0:95:ea:35:c1:c1:f0: c3:75:11:33:5f:1c:32:79:e7:bc:4b:03:34:87:c2:98:59:cb: 0d:b3:e0:32:93:75:b9:dd:45:b6:07:7f:a4:6f:43:bc:c8:79: 1d:ba:7a:fd:03:d7:98:35:bc:e8:00:0a:5b:88:a5:81:f9:47: be:40:ca:87:51:9d:a4:84:6d:e5:50:a8:ad:38:fe:79:91:e0: ad:35:5f:ab:0e:15:5a:3d:40:99:f5:61:33:07:24:e7:37:04: d2:32:a8:ad:04:13:dd:ff:8c:7f:d5:13:a8:27:c9:63:33:80: bb:4a:aa:3d:a1:6f:24:73:90:44:1e:84:41:6f:57:bd:17:54: 9c:98:78:f1:ee:c3:f8:9a:1a:9b:0e:1f:9b:a2:c1:0b:93:7c: 8c:f4:76:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQYwhP5vzmeEi+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTI5OGEwMTItMTY4Ni00OTkzLTg1YmEtZTg0ZjViMzMwNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6emyDfY5yEAavj+NdRrN0OcHtNF++ooGOpq VLU8cG5kqRD1EBuxMyVPYGlxsshcJCzNk5Diaftov9dnr5M8NpBv0r10IWyHMmQ5 re1i5JT2ogrWbSdzWmW6XNAlW2BfM2Z777Oa7KQjY5tKK4QdUJ+ORrG7QNXvG/Ic 4oDXfvFbdub+Yh4YYT+gzhmb+8/786eEhT5iOHj3SLEpScqc0iiv4kZO5PRN0d3c 0L23YNoMyeQPJ1wiEB1oq1qaTNlKeZ8xPmB9hPj6zwhTJgaEbm8iSKMdWQjpz6++ iunhTzihqMJnFBef1FzHO98iqdQriPcRbfZMeJXpNyeXp2UsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7Zzvy+tbcib5DIe//7EaB0EWKlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDEyZGFhOGItMjY2Mi0z OTliLWE2NTEtYjM0ZDUxNDdjZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW68Si/QXrsed0WTv2XKki5ug5dEGODcIyyF+uQa5LtctEBz0KM8t2R V4DLPtpJsmn4MFMYJtp7JRBkt9+daVzXo1sz/53M5bLyZwkBCqJK7cdARam9c4co a6QELmibFRRBjaOCsJXqNcHB8MN1ETNfHDJ557xLAzSHwphZyw2z4DKTdbndRbYH f6RvQ7zIeR26ev0D15g1vOgACluIpYH5R75AyodRnaSEbeVQqK04/nmR4K01X6sO FVo9QJn1YTMHJOc3BNIyqK0EE93/jH/VE6gnyWMzgLtKqj2hbyRzkEQehEFvV70X VJyYePHuw/iaGpsOH5uiwQuTfIz0dng= -----END CERTIFICATE-----Generated at Sun May 4 19:35:46 2025 by rpki-client