$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c83a503-27dc-3457-9a6d-533e7d3869d7.roa File: 2c83a503-27dc-3457-9a6d-533e7d3869d7.roa (raw, json) Hash identifier: YHGuYIhu3LqeY0DUsl29BzmKm12iavBkldnPhmUU7GA= Subject key identifier: AA:49:23:85:B1:39:08:8B:09:D3:C7:38:7C:B8:30:4A:AA:2C:30:91 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D931F61811E7765ADF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c83a503-27dc-3457-9a6d-533e7d3869d7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.123.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d9:31:f6:18:11:e7:76:5a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=770dea8c-586b-4bf9-a047-44a62d8e0eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:db:e5:d9:fb:9e:36:29:d2:8b:b1:25:99: cb:f7:57:cf:34:f2:45:dc:93:00:8c:fc:c1:8f:82: 6b:48:fb:7b:5d:be:01:da:63:01:4a:83:b0:47:82: b2:7c:d4:62:4a:a0:a9:36:ca:cc:ec:9c:e3:a2:dc: 85:cd:0b:b4:6e:f0:b1:c6:01:e2:e5:9b:c4:68:1a: af:68:6e:7d:a0:9a:fc:b1:c4:f0:d9:13:53:fe:43: bc:0e:e3:85:92:ae:d6:b9:44:99:67:42:8b:1e:c9: d3:7f:16:34:07:b4:23:f0:99:62:c9:7e:50:81:a4: ff:89:e8:f3:13:ab:cd:fb:61:4b:67:d6:31:13:87: cf:8c:c1:92:46:22:60:9a:55:4f:0d:c8:11:0a:56: bb:b3:0a:36:6f:4a:f2:d0:d9:84:2b:95:ea:20:b2: 67:81:56:1e:7f:22:fe:42:fb:36:b4:00:27:14:d3: fd:6e:22:56:66:79:db:4b:d8:1a:0e:06:bd:dc:fb: 33:44:d9:ae:bc:53:5d:4f:fe:71:f1:2e:e3:1b:66: ac:54:83:3b:ee:d5:5e:7b:d6:cd:a2:67:a4:68:13: 05:e2:a4:cc:a0:6e:f2:19:36:05:97:25:48:8e:37: 62:9b:57:3c:3a:60:3a:6f:4d:9a:ee:04:45:92:71: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:49:23:85:B1:39:08:8B:09:D3:C7:38:7C:B8:30:4A:AA:2C:30:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c83a503-27dc-3457-9a6d-533e7d3869d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:85:4a:cf:de:2a:4e:c1:23:23:e6:09:8e:a9:3b:e9:83:b5: c3:15:7a:b0:1c:74:3b:24:82:7d:80:4a:e9:4a:8b:bc:e9:39: ff:7c:7b:3a:f8:f5:d7:a8:ee:84:4c:7d:fe:ee:63:a8:40:16: d0:3b:95:de:59:5d:db:6a:3a:9d:d9:34:4d:2b:7c:b4:df:d0: ee:02:f2:b2:26:3d:81:46:70:91:fb:fa:5f:79:00:73:3a:d5: 10:b6:d6:6f:d1:0e:64:bf:f7:55:76:23:ad:23:54:ab:ba:bc: dd:45:c9:4a:9d:24:d2:f8:ae:7a:e3:4f:53:ea:84:c5:61:95: cb:66:62:aa:2b:81:3c:ce:c9:e2:08:1e:5a:65:5d:88:b1:05: 00:08:db:2f:31:4d:d0:8d:9c:04:1f:2d:fa:9f:e6:db:f0:79: c4:98:7a:06:8a:af:b6:28:eb:e6:0a:32:f4:34:79:b5:b9:cd: e6:4d:89:77:e7:eb:22:cd:3d:86:d6:29:7a:d5:15:91:7c:de: 6f:ca:55:af:b3:39:a0:8f:e5:32:1a:14:8f:b3:f0:f2:c2:70: d5:74:79:9e:84:52:19:ba:af:1c:d5:4a:06:9f:cd:82:e4:ed: 1d:cf:3c:07:01:d9:d8:01:af:1e:50:30:e4:a8:b3:6d:6e:f3: 46:71:c7:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNkx9hgR53Za3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzcwZGVhOGMtNTg2Yi00YmY5LWEwNDctNDRhNjJkOGUwZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLb5dn7njYp0ouxJZnL91fPNPJF3JMAjPzB j4JrSPt7Xb4B2mMBSoOwR4KyfNRiSqCpNsrM7JzjotyFzQu0bvCxxgHi5ZvEaBqv aG59oJr8scTw2RNT/kO8DuOFkq7WuUSZZ0KLHsnTfxY0B7Qj8JliyX5QgaT/iejz E6vN+2FLZ9YxE4fPjMGSRiJgmlVPDcgRCla7swo2b0ry0NmEK5XqILJngVYefyL+ Qvs2tAAnFNP9biJWZnnbS9gaDga93PszRNmuvFNdT/5x8S7jG2asVIM77tVee9bN omekaBMF4qTMoG7yGTYFlyVIjjdim1c8OmA6b02a7gRFknHFSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpJI4WxOQiLCdPHOHy4MEqqLDCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM4M2E1MDMtMjdkYy0z NDU3LTlhNmQtNTMzZTdkMzg2OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6FSs/eKk7BIyPmCY6pO+mDtcMVerAcdDskgn2ASulKi7zpOf98ezr4 9deo7oRMff7uY6hAFtA7ld5ZXdtqOp3ZNE0rfLTf0O4C8rImPYFGcJH7+l95AHM6 1RC21m/RDmS/91V2I60jVKu6vN1FyUqdJNL4rnrjT1PqhMVhlctmYqorgTzOyeII HlplXYixBQAI2y8xTdCNnAQfLfqf5tvwecSYegaKr7Yo6+YKMvQ0ebW5zeZNiXfn 6yLNPYbWKXrVFZF83m/KVa+zOaCP5TIaFI+z8PLCcNV0eZ6EUhm6rxzVSgafzYLk 7R3PPAcB2dgBrx5QMOSos21u80ZxxzI= -----END CERTIFICATE-----Generated at Sun May 4 19:25:07 2025 by rpki-client