$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa File: 9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa (raw, json) Hash identifier: fTWmgCeYAfAFGxPbmNkEoeQd/2fdfI0LEPFmmJrqjws= Subject key identifier: C7:44:06:A0:9C:B2:E0:92:1E:FA:34:81:AB:07:E5:C1:27:4D:5C:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850659394FBC0D1ACE5800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.96.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:06:59:39:4f:bc:0d:1a:ce:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=09f77c04-da81-40ec-86ef-6686dbc7293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:22:a6:8d:23:4b:17:cd:ee:a8:29:7e:7a: ec:56:ce:9f:7e:09:f0:8b:06:c6:7d:5d:5a:00:ad: d4:e3:ad:d1:50:39:19:a9:d5:ce:eb:d1:68:e7:07: 8b:fd:fe:fb:12:ee:5f:1c:ea:0d:f2:06:e9:68:e4: 02:9e:e6:29:18:60:ae:b1:f2:df:ab:8e:f5:cd:a1: ac:f7:42:95:68:14:89:b3:b5:86:7d:17:da:bc:f4: 84:f3:d6:3e:b7:64:29:7a:87:15:1a:6f:fb:03:66: 22:c4:09:9b:db:bb:61:b6:53:ed:1e:54:b0:9f:c6: 3a:35:e2:76:e6:32:f7:b1:d9:3c:bf:34:25:07:fd: 81:ae:59:74:73:e2:22:8c:6d:0d:d0:b7:1f:20:f1: 9d:1b:46:e9:de:39:d0:ec:f4:31:14:a8:06:02:ad: 38:a7:59:70:b6:82:19:2d:aa:4f:84:32:de:3b:18: 84:12:78:0f:11:94:06:4d:d5:f1:48:d6:2f:52:c9: ba:2b:d4:be:c1:f7:a8:82:27:1a:3b:61:88:05:84: a2:dd:d8:82:13:c3:a1:fc:92:fe:ff:5b:1f:da:1c: 00:4a:78:1d:4e:b3:d3:e1:63:f7:4a:3a:67:5a:6d: 8d:89:8f:c9:d8:a3:1c:7e:e2:e7:2b:cb:be:8b:f3: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:06:A0:9C:B2:E0:92:1E:FA:34:81:AB:07:E5:C1:27:4D:5C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e5d7555-3ac0-3ef9-bc92-0239365b51ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c8:95:f0:c8:5b:8a:23:6c:30:09:94:9f:fb:94:f0:80:f3: c7:c4:fa:ef:32:97:31:ee:87:c9:29:c6:05:68:6a:47:96:fd: 04:e5:2b:36:a7:25:c5:73:c4:5b:c8:10:ef:2a:6c:19:1e:65: 86:d2:29:e5:52:42:e0:d9:9e:40:7a:7a:80:4e:97:97:0a:69: 98:5a:94:0d:29:50:6d:3a:6b:87:e0:9f:7f:45:12:2a:af:e3: e2:ec:bb:ab:93:6e:54:f3:a1:83:4b:67:a6:d4:3e:d6:43:b5: f1:5d:b9:e2:02:c0:45:ac:bf:3f:59:63:76:25:40:72:89:c5: a0:86:0a:65:ef:da:83:ca:81:24:92:5f:04:40:59:d6:0f:51: 5b:64:4c:a5:98:52:a4:26:6a:4e:1a:ea:67:07:6c:91:a3:70: 1c:25:4e:d7:e0:02:75:71:de:d9:17:8e:7b:17:aa:1b:12:ac: 23:17:ce:f8:99:c4:d4:e8:19:15:83:28:58:a3:ae:e5:12:8d: ed:6d:df:89:4f:1b:5f:05:b7:1b:aa:04:5d:85:6b:32:c2:79: 68:e9:3f:5c:5c:61:8a:82:b9:55:7e:ee:fe:40:6c:22:71:4c: 57:a0:03:10:16:af:b6:35:b3:63:30:c8:84:0d:53:d4:7d:a2: d7:77:e7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQZZOU+8DRrOWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDlmNzdjMDQtZGE4MS00MGVjLTg2ZWYtNjY4NmRiYzcyOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq8ipo0jSxfN7qgpfnrsVs6ffgnwiwbGfV1a AK3U463RUDkZqdXO69Fo5weL/f77Eu5fHOoN8gbpaOQCnuYpGGCusfLfq471zaGs 90KVaBSJs7WGfRfavPSE89Y+t2QpeocVGm/7A2YixAmb27thtlPtHlSwn8Y6NeJ2 5jL3sdk8vzQlB/2Brll0c+IijG0N0LcfIPGdG0bp3jnQ7PQxFKgGAq04p1lwtoIZ LapPhDLeOxiEEngPEZQGTdXxSNYvUsm6K9S+wfeogicaO2GIBYSi3diCE8Oh/JL+ /1sf2hwASngdTrPT4WP3SjpnWm2NiY/J2KMcfuLnK8u+i/PEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdEBqCcsuCSHvo0gasH5cEnTVxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWU1ZDc1NTUtM2FjMC0z ZWY5LWJjOTItMDIzOTM2NWI1MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHIlfDIW4ojbDAJlJ/7lPCA88fE+u8ylzHuh8kpxgVoakeW/QTlKzan JcVzxFvIEO8qbBkeZYbSKeVSQuDZnkB6eoBOl5cKaZhalA0pUG06a4fgn39FEiqv 4+Lsu6uTblTzoYNLZ6bUPtZDtfFdueICwEWsvz9ZY3YlQHKJxaCGCmXv2oPKgSSS XwRAWdYPUVtkTKWYUqQmak4a6mcHbJGjcBwlTtfgAnVx3tkXjnsXqhsSrCMXzviZ xNToGRWDKFijruUSje1t34lPG18FtxuqBF2FazLCeWjpP1xcYYqCuVV+7v5AbCJx TFegAxAWr7Y1s2MwyIQNU9R9otd35+0= -----END CERTIFICATE-----Generated at Sun May 4 18:13:44 2025 by rpki-client