$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d59c820-70d4-370d-a879-a413119ce150.roa File: 4d59c820-70d4-370d-a879-a413119ce150.roa (raw, json) Hash identifier: 9ruHEJsMq7az/ZHhYyrRTOmQaDc3TkpGeauGpzpFDx0= Subject key identifier: 94:0D:75:03:EC:25:8A:3A:3B:15:1D:4A:96:72:4C:C2:F0:B5:52:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853C7FD27F42E28DB82A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d59c820-70d4-370d-a879-a413119ce150.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.94.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3c:7f:d2:7f:42:e2:8d:b8:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6d6289f9-ec50-4584-9954-a72f90d161bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:be:67:d0:ae:65:21:2f:45:bf:a2:f9:0c: 71:7e:35:31:d2:78:31:eb:c0:cb:61:70:6e:f9:45: 94:20:b1:2a:9a:9a:77:8d:7f:4f:44:43:e6:ab:23: 2b:16:ca:dd:32:84:fe:37:4c:be:b9:4f:9e:44:69: 6f:62:9c:22:60:1a:0d:ac:ce:e8:8d:92:61:d6:99: 37:ed:70:51:11:09:7c:61:ac:2f:02:f8:0f:f6:f0: d9:6e:7f:85:69:4f:dc:1f:d4:17:4c:57:bc:5e:5e: 60:45:01:80:32:eb:38:96:0f:fe:5c:94:76:4c:f2: dc:bd:ce:d8:d9:b3:3b:cf:1d:6d:86:c6:06:1f:f1: d4:4c:b7:c5:bc:e9:47:6c:5c:8f:57:bc:67:03:c8: e5:de:1d:f4:9b:88:90:c9:7a:09:e2:f1:89:43:56: cc:a9:f8:f3:52:2f:dc:6a:9d:15:4b:0c:e5:06:36: a8:02:6f:c4:5b:bd:4a:34:44:d8:1d:6c:2a:99:c1: ff:ef:6e:40:28:56:1a:c0:6c:7b:e5:f5:1f:91:58: 2f:16:66:e3:60:5f:34:29:d9:03:b3:7a:44:96:d7: 3a:ef:73:03:ca:dc:3d:68:1b:1b:b9:47:98:6e:b1: af:ee:f4:52:e9:aa:d7:60:e2:14:e0:6a:51:11:4c: 29:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0D:75:03:EC:25:8A:3A:3B:15:1D:4A:96:72:4C:C2:F0:B5:52:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d59c820-70d4-370d-a879-a413119ce150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:92:52:92:d7:c1:75:9a:95:34:df:ac:ac:64:c9:df:8c:3e: 3b:0e:52:39:71:39:46:75:d1:5d:18:8d:a7:3f:48:83:2f:51: bd:5a:ab:bf:83:1f:36:2d:8d:b5:3f:38:77:35:0a:c7:9f:30: 85:d0:99:b3:5a:60:f8:11:cf:75:01:23:da:55:3d:80:60:b9: 94:31:7a:ee:f7:04:b9:fc:c6:ec:c4:7c:14:45:3d:7b:78:47: 80:03:f6:b4:30:6a:d0:a0:84:40:cf:2e:1b:0a:ca:59:8a:c4: dc:a3:7a:cd:57:54:99:8d:28:22:e4:64:83:56:76:b5:97:92: f0:38:15:d7:d1:72:86:25:dd:e4:9b:d0:01:22:86:a4:36:eb: a8:a3:ec:f0:bf:32:50:3e:71:f2:8b:6b:27:b7:01:e8:4b:c3: b7:03:76:4b:f1:44:c2:f2:ca:8e:ee:0b:7d:d2:f9:4d:41:62: 4c:10:27:20:b5:2c:6e:c6:a8:0a:6f:b9:2a:0d:cf:48:18:f6: 3b:c8:a1:c6:ec:74:f1:44:e6:10:16:a4:0b:b1:d6:55:6d:87: 9c:b7:55:15:65:7b:e4:b8:93:25:aa:20:a1:85:bd:5c:97:b8: 3f:fb:04:e6:de:c3:c9:2d:b3:88:af:26:ab:c2:32:e9:ae:68: 29:23:77:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTx/0n9C4o24KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmQ2Mjg5ZjktZWM1MC00NTg0LTk5NTQtYTcyZjkwZDE2MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3C+Z9CuZSEvRb+i+QxxfjUx0ngx68DLYXBu +UWUILEqmpp3jX9PREPmqyMrFsrdMoT+N0y+uU+eRGlvYpwiYBoNrM7ojZJh1pk3 7XBREQl8YawvAvgP9vDZbn+FaU/cH9QXTFe8Xl5gRQGAMus4lg/+XJR2TPLcvc7Y 2bM7zx1thsYGH/HUTLfFvOlHbFyPV7xnA8jl3h30m4iQyXoJ4vGJQ1bMqfjzUi/c ap0VSwzlBjaoAm/EW71KNETYHWwqmcH/725AKFYawGx75fUfkVgvFmbjYF80KdkD s3pEltc673MDytw9aBsbuUeYbrGv7vRS6arXYOIU4GpREUwpNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQNdQPsJYo6OxUdSpZyTMLwtVIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGQ1OWM4MjAtNzBkNC0z NzBkLWE4NzktYTQxMzExOWNlMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWSUpLXwXWalTTfrKxkyd+MPjsOUjlxOUZ10V0Yjac/SIMvUb1aq7+D HzYtjbU/OHc1CsefMIXQmbNaYPgRz3UBI9pVPYBguZQxeu73BLn8xuzEfBRFPXt4 R4AD9rQwatCghEDPLhsKylmKxNyjes1XVJmNKCLkZINWdrWXkvA4FdfRcoYl3eSb 0AEihqQ266ij7PC/MlA+cfKLaye3AehLw7cDdkvxRMLyyo7uC33S+U1BYkwQJyC1 LG7GqApvuSoNz0gY9jvIocbsdPFE5hAWpAux1lVth5y3VRVle+S4kyWqIKGFvVyX uD/7BObew8kts4ivJqvCMumuaCkjd9Q= -----END CERTIFICATE-----Generated at Sun May 4 19:31:11 2025 by rpki-client