$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa File: 2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa (raw, json) Hash identifier: 945nHhOyYjtMPOyskmVafnIi07JEcFzhtq3T1TlCxs4= Subject key identifier: A8:D5:50:CD:58:EA:D5:3E:25:EE:DD:C9:AB:75:45:F8:AC:2A:B4:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78514387FC35AA903229000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.84.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:14:38:7f:c3:5a:a9:03:22:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d455673c-8a26-46f1-9736-495ae7cfd96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:bb:7f:2d:35:30:22:bb:6e:f3:05:2c:e6: a9:c8:3a:a5:7d:e3:ad:54:8b:00:9c:4e:08:30:57: db:f6:2d:2b:7a:6a:83:89:84:8c:d9:c0:b9:76:e3: b1:1d:db:e9:4c:16:c6:22:3f:45:96:0b:69:52:19: 3a:ce:bc:5c:94:88:dd:98:98:54:3e:eb:5c:e0:21: 8f:7f:c8:77:e6:43:46:d7:50:74:58:9e:cc:14:1f: f0:b4:6a:e9:67:22:40:3c:a1:86:09:cf:bf:fc:42: f5:20:d2:f6:eb:61:57:bc:b2:e3:c1:df:62:e7:12: 1e:58:2b:df:01:31:e3:27:d7:a2:4b:51:4e:81:8e: f8:e3:2b:ee:ae:29:45:0c:8f:00:29:31:47:fa:52: 52:9c:ce:f2:68:a8:7e:9e:41:c2:90:35:3f:d7:c4: 7f:e0:05:26:fd:91:e8:aa:26:41:e1:76:d2:15:b0: 4c:93:46:aa:bd:be:f5:aa:5f:6f:9b:5d:d0:6e:7d: ec:44:25:ce:4e:ef:90:fd:65:ab:7c:9d:16:04:46: b0:cb:2f:b9:87:25:4c:de:26:50:df:26:9d:95:55: 0c:c0:ce:6c:a6:8c:54:5e:ac:4d:86:a3:b2:ed:64: 4a:da:60:cf:82:b0:75:1e:8a:ba:70:c5:d9:00:1e: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:50:CD:58:EA:D5:3E:25:EE:DD:C9:AB:75:45:F8:AC:2A:B4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bcdff21-8078-3549-9e52-ad3a3a30b9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5c:58:7b:64:72:3e:c1:c9:97:8d:d9:dc:80:5b:f9:07:80: 01:3c:27:dc:d7:9e:bf:4e:16:27:8a:ec:2e:0b:b6:af:a1:61: d8:9d:59:be:cd:83:3a:24:4b:4b:77:07:2e:28:52:dd:61:53: a1:82:be:8e:a8:f6:df:c6:71:93:27:f7:79:a9:d9:bb:db:8c: a0:31:0f:77:11:81:3f:6f:13:3d:2c:3d:da:95:c3:f1:a2:f9: f3:cf:6a:3b:55:c8:d9:81:bd:0b:7f:22:7e:c4:e6:f8:f9:f5: a5:9b:ff:63:cc:52:a4:dd:7e:cd:01:95:32:3a:1e:9f:e4:75: 62:22:37:16:ee:23:04:d1:c8:90:ed:72:61:9c:7b:f1:8a:99: 9a:ef:9f:b8:91:bf:fc:ae:96:9a:18:4b:98:bd:51:71:27:62: 02:9c:9f:57:29:49:c5:09:e4:eb:cf:43:0d:a2:bb:ff:65:c2: d6:ca:cc:98:79:26:3c:17:93:c3:46:c5:6d:3b:12:4b:5c:a7: bb:5c:b0:d1:1e:76:a4:f2:32:e5:a3:2e:50:d8:e5:a3:5a:bf: 95:dc:8e:65:16:d3:f6:3e:e6:ce:f4:53:cd:df:ac:18:d6:5b: 55:0b:ef:30:48:1e:18:d3:75:19:67:46:c3:6c:d7:e7:dd:bd: 50:ab:fc:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRQ4f8NaqQMikAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDQ1NTY3M2MtOGEyNi00NmYxLTk3MzYtNDk1YWU3Y2ZkOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9S7fy01MCK7bvMFLOapyDqlfeOtVIsAnE4I MFfb9i0remqDiYSM2cC5duOxHdvpTBbGIj9FlgtpUhk6zrxclIjdmJhUPutc4CGP f8h35kNG11B0WJ7MFB/wtGrpZyJAPKGGCc+//EL1INL262FXvLLjwd9i5xIeWCvf ATHjJ9eiS1FOgY744yvurilFDI8AKTFH+lJSnM7yaKh+nkHCkDU/18R/4AUm/ZHo qiZB4XbSFbBMk0aqvb71ql9vm13Qbn3sRCXOTu+Q/WWrfJ0WBEawyy+5hyVM3iZQ 3yadlVUMwM5spoxUXqxNhqOy7WRK2mDPgrB1Hoq6cMXZAB5Y0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjVUM1Y6tU+Je7dyat1RfisKrQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJjZGZmMjEtODA3OC0z NTQ5LTllNTItYWQzYTNhMzBiOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5cWHtkcj7ByZeN2dyAW/kHgAE8J9zXnr9OFieK7C4Ltq+hYdidWb7N gzokS0t3By4oUt1hU6GCvo6o9t/GcZMn93mp2bvbjKAxD3cRgT9vEz0sPdqVw/Gi +fPPajtVyNmBvQt/In7E5vj59aWb/2PMUqTdfs0BlTI6Hp/kdWIiNxbuIwTRyJDt cmGce/GKmZrvn7iRv/yulpoYS5i9UXEnYgKcn1cpScUJ5OvPQw2iu/9lwtbKzJh5 JjwXk8NGxW07Ektcp7tcsNEedqTyMuWjLlDY5aNav5XcjmUW0/Y+5s70U83frBjW W1UL7zBIHhjTdRlnRsNs1+fdvVCr/JU= -----END CERTIFICATE-----Generated at Sun May 4 19:28:04 2025 by rpki-client