$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa File: aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa (raw, json) Hash identifier: nuV2UjGH7c91GhzrchI78n4PT/8WKErtj5eUV96O1hs= Subject key identifier: 28:F8:C2:53:07:20:1F:79:CB:65:34:49:BD:86:47:CC:AE:11:4B:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78506B2210FD7B3A160E980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.96.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:06:b2:21:0f:d7:b3:a1:60:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3cb6b970-97b3-4d7c-b5ce-2f4623ad6b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:84:6f:54:28:80:eb:54:21:77:61:f3:24: d6:fb:ae:1b:4c:88:3e:ad:a0:a2:53:e7:cb:f9:57: 4d:8d:ad:98:7b:b8:30:e9:dd:d9:c6:8d:f8:d7:13: 79:a2:27:5a:3e:9d:c4:cd:04:99:f0:32:d7:80:6f: 10:15:39:15:03:56:0e:99:12:93:73:20:c4:90:47: 74:cf:79:99:e9:cf:32:0c:37:12:69:c6:8a:85:bc: c1:d9:68:60:ce:9b:b0:4b:d3:6b:a1:79:6e:a7:9d: 40:44:70:0a:3b:5c:35:dc:7d:13:ec:8e:f5:50:49: da:f6:b1:47:2b:ad:be:fd:ac:61:d9:36:2f:a3:c9: 2b:68:bd:20:3a:be:b4:15:e6:ef:55:6b:ea:66:f2: d7:35:0b:6b:56:ff:89:69:a3:80:4b:34:e2:65:1d: fc:ff:53:10:aa:b9:1e:33:a2:1d:90:a2:a6:9b:de: 29:c2:91:f8:22:93:e0:f2:66:eb:8d:49:17:ca:89: f6:8a:c8:92:98:4c:f2:5c:2d:07:3f:f9:e8:35:22: 4d:50:8b:83:58:22:c1:3c:75:18:7c:7a:f3:74:0c: 7c:95:fc:5a:dd:c6:12:a0:fb:39:cf:a3:c0:cd:1d: 6c:43:d4:d3:58:35:5c:00:f6:a0:e9:cb:e4:fc:28: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F8:C2:53:07:20:1F:79:CB:65:34:49:BD:86:47:CC:AE:11:4B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa9d9805-cf2e-3916-9b8e-8a48e6eab4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ac:8d:45:6a:52:25:17:56:f8:df:6a:58:4e:d1:93:4b:ea: f5:d5:7b:10:c9:85:9b:f2:59:1e:b1:c5:a9:e4:25:71:09:53: 4a:ac:88:0a:4a:f7:98:db:2e:b1:c3:47:c7:94:f8:ae:4a:68: 8d:bb:26:99:06:8b:fb:a0:45:85:2b:95:c6:a4:18:56:ee:6b: a5:d6:37:a3:8b:90:9d:72:0e:3f:63:dc:1f:c2:05:1b:07:b7: 1f:4c:16:59:8c:e6:5c:82:36:7c:5f:05:d3:5f:10:ec:62:25: 6a:e8:ad:7f:9d:0d:91:1b:2c:64:b5:6e:f2:7b:46:42:ad:8d: af:90:d5:25:1e:0e:14:e9:1b:f2:e8:b7:70:03:8c:7c:32:67: 16:8f:8d:b2:61:4f:85:81:63:e0:02:79:97:ad:87:3b:30:bb: ce:73:30:46:c8:b0:1c:a6:d9:1c:be:14:8a:eb:98:af:bd:27: 64:55:94:82:7b:2b:b8:fb:25:c6:82:c4:54:41:7a:8b:c8:ed: cc:5b:df:00:f9:70:54:65:c7:31:e0:cd:c1:58:c2:43:2b:40: 3b:df:ef:01:e0:9e:7d:f0:e6:49:2a:86:a0:ad:67:b6:5d:dc: 7c:ce:45:a9:99:a7:29:80:03:c8:ae:2b:98:14:c5:9b:44:67: 4a:2a:3c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQayIQ/Xs6Fg6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2NiNmI5NzAtOTdiMy00ZDdjLWI1Y2UtMmY0NjIzYWQ2YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklKEb1QogOtUIXdh8yTW+64bTIg+raCiU+fL +VdNja2Ye7gw6d3Zxo341xN5oidaPp3EzQSZ8DLXgG8QFTkVA1YOmRKTcyDEkEd0 z3mZ6c8yDDcSacaKhbzB2WhgzpuwS9NroXlup51ARHAKO1w13H0T7I71UEna9rFH K62+/axh2TYvo8kraL0gOr60FebvVWvqZvLXNQtrVv+JaaOASzTiZR38/1MQqrke M6IdkKKmm94pwpH4IpPg8mbrjUkXyon2isiSmEzyXC0HP/noNSJNUIuDWCLBPHUY fHrzdAx8lfxa3cYSoPs5z6PAzR1sQ9TTWDVcAPag6cvk/Ciu3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj4wlMHIB95y2U0Sb2GR8yuEUs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5ZDk4MDUtY2YyZS0z OTE2LTliOGUtOGE0OGU2ZWFiNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSsjUVqUiUXVvjfalhO0ZNL6vXVexDJhZvyWR6xxankJXEJU0qsiApK 95jbLrHDR8eU+K5KaI27JpkGi/ugRYUrlcakGFbua6XWN6OLkJ1yDj9j3B/CBRsH tx9MFlmM5lyCNnxfBdNfEOxiJWrorX+dDZEbLGS1bvJ7RkKtja+Q1SUeDhTpG/Lo t3ADjHwyZxaPjbJhT4WBY+ACeZethzswu85zMEbIsBym2Ry+FIrrmK+9J2RVlIJ7 K7j7JcaCxFRBeovI7cxb3wD5cFRlxzHgzcFYwkMrQDvf7wHgnn3w5kkqhqCtZ7Zd 3HzORamZpymAA8iuK5gUxZtEZ0oqPK8= -----END CERTIFICATE-----Generated at Sun May 4 18:59:57 2025 by rpki-client