$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa File: 2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa (raw, json) Hash identifier: pBZIHHV0R5dskCIi5UMKQDTPMeXD5MA0/1KQEnM3nqY= Subject key identifier: 1A:1D:2B:C0:74:A6:94:8D:0A:21:AC:55:64:77:31:9A:B8:04:37:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78531FD606008821B80F380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.123.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:31:fd:60:60:08:82:1b:80:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7d41b95f-88d9-4ac6-8f94-55a2ba35b01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:d4:46:b1:af:aa:55:8a:e3:7d:69:ac:ce: 0f:fa:49:5c:2f:88:f6:e2:ce:13:38:20:4f:a8:34: 10:7a:fa:90:23:6e:a4:43:75:3a:c8:ba:f4:d3:6d: 2d:7c:b0:41:54:00:4c:28:92:a8:04:3e:4a:8e:74: 7f:8c:05:46:77:c5:26:29:dd:81:53:92:ed:66:0a: 14:f0:2e:65:8f:d1:4f:63:0d:14:23:c8:ca:0b:1a: 3b:7e:9f:64:b9:78:69:b2:71:57:68:5b:b1:6c:9c: 52:9a:d7:02:96:2a:08:28:ab:42:c0:1d:4e:3e:61: b7:8b:99:57:77:6a:23:cf:09:a7:d2:26:27:ee:2f: b5:86:db:5e:01:38:18:07:61:ac:ea:47:dc:83:dc: 2b:7b:e9:3d:bd:77:28:09:5a:87:a4:ea:1f:ce:5b: 48:81:54:78:90:a9:59:1e:03:3c:2d:80:52:04:a3: c3:80:2c:d2:f5:47:43:6d:54:20:4a:ba:b7:2f:b4: 4b:bd:d1:1c:1d:12:76:12:95:cf:61:4b:5c:a4:31: 55:f4:ab:56:ed:b3:c8:af:15:fb:a6:1c:0b:9f:d6: 6e:22:16:a5:73:54:1e:45:24:26:31:c5:0f:42:0c: d3:b6:16:86:03:f4:1b:b2:a5:c4:70:a9:33:1c:70: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:2B:C0:74:A6:94:8D:0A:21:AC:55:64:77:31:9A:B8:04:37:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2bd85ba0-5549-3ca6-9681-1c531dcd0b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9f:bf:b1:d9:55:6b:00:ff:a0:db:eb:37:3f:84:0a:ff:79: 49:54:91:28:07:da:e6:09:74:77:e1:c4:71:d6:73:5d:28:2e: c5:67:bd:8f:5a:91:16:63:67:52:ed:ab:a8:e8:a1:8f:50:01: 40:8a:b3:57:02:48:c4:36:27:97:e8:90:b6:dc:bb:fd:88:66: d0:db:d0:4e:d3:7b:2d:e3:ce:c5:dc:e3:2a:b4:d4:bb:8b:b2: e0:8d:f6:ae:81:62:f0:8e:08:5a:66:5f:2c:47:2e:d5:d2:ba: 83:75:1f:73:08:22:0d:d4:68:3a:d9:83:50:ea:da:04:cb:70: ac:87:c7:9b:6b:a4:de:cb:2c:a1:98:a6:d1:24:26:0e:3c:f3: 6a:3c:fa:38:9b:94:15:6f:6b:10:16:7e:94:8a:89:33:04:9a: 9b:0a:28:fc:f5:4a:a1:fd:b0:8a:08:c9:16:4d:c7:fd:02:38: 9e:89:58:8a:bd:ba:27:42:6e:67:0f:bf:68:62:3e:35:8c:69: 8a:e1:22:8a:52:7b:32:de:9e:be:d9:34:a6:96:23:2f:23:1e: c4:87:41:08:df:62:ba:56:a2:03:4a:d3:8e:9e:91:67:e3:cd: d7:8e:60:8b:26:9a:ff:b7:a2:f0:41:0d:d5:aa:47:84:29:95: aa:29:2d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTH9YGAIghuA84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2Q0MWI5NWYtODhkOS00YWM2LThmOTQtNTVhMmJhMzViMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jTURrGvqlWK431prM4P+klcL4j24s4TOCBP qDQQevqQI26kQ3U6yLr0020tfLBBVABMKJKoBD5KjnR/jAVGd8UmKd2BU5LtZgoU 8C5lj9FPYw0UI8jKCxo7fp9kuXhpsnFXaFuxbJxSmtcClioIKKtCwB1OPmG3i5lX d2ojzwmn0iYn7i+1htteATgYB2Gs6kfcg9wre+k9vXcoCVqHpOofzltIgVR4kKlZ HgM8LYBSBKPDgCzS9UdDbVQgSrq3L7RLvdEcHRJ2EpXPYUtcpDFV9KtW7bPIrxX7 phwLn9ZuIhalc1QeRSQmMcUPQgzTthaGA/QbsqXEcKkzHHCmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBodK8B0ppSNCiGsVWR3MZq4BDfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmJkODViYTAtNTU0OS0z Y2E2LTk2ODEtMWM1MzFkY2QwYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSfv7HZVWsA/6Db6zc/hAr/eUlUkSgH2uYJdHfhxHHWc10oLsVnvY9a kRZjZ1Ltq6jooY9QAUCKs1cCSMQ2J5fokLbcu/2IZtDb0E7Tey3jzsXc4yq01LuL suCN9q6BYvCOCFpmXyxHLtXSuoN1H3MIIg3UaDrZg1Dq2gTLcKyHx5trpN7LLKGY ptEkJg4882o8+jiblBVvaxAWfpSKiTMEmpsKKPz1SqH9sIoIyRZNx/0COJ6JWIq9 uidCbmcPv2hiPjWMaYrhIopSezLenr7ZNKaWIy8jHsSHQQjfYrpWogNK046ekWfj zdeOYIsmmv+3ovBBDdWqR4QplaopLRw= -----END CERTIFICATE-----Generated at Sun May 4 19:33:19 2025 by rpki-client