$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa File: c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa (raw, json) Hash identifier: cMnJVEqEXWxutFf6cO/PSK3L094MllrZJhzwefhMq+g= Subject key identifier: FD:60:B2:C0:52:44:62:0F:64:02:F9:BA:DC:78:92:EE:1E:2E:C0:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E9BBC350E1BD6AC3F470 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.87.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e9:bb:c3:50:e1:bd:6a:c3:f4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=896035d3-ab06-4a6f-9f09-2bf29495c285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:23:af:2b:c2:a8:00:9d:e0:ef:e9:d1:9d: c8:91:ad:2c:b3:cd:66:4e:4f:e3:59:d4:dc:01:2b: 33:99:00:02:aa:7a:35:64:ab:95:b4:4c:c9:e4:af: 5b:35:20:3d:2c:08:2b:02:05:5b:8e:ff:8c:fb:7b: 0c:2c:4b:e1:1f:b2:7e:dd:20:49:ae:d8:3f:29:6d: 0d:10:15:86:ee:b8:01:53:15:a1:c5:d2:9f:01:3e: 04:8b:20:ba:55:90:43:10:3a:6b:11:65:b9:92:15: c4:eb:46:68:f2:26:9a:82:a8:59:ce:0d:0f:97:bf: 0f:53:96:28:80:45:08:a0:07:0a:89:ac:ac:fb:ac: f6:a7:4a:be:b6:7d:f6:b9:a5:4f:13:f8:ec:d3:8e: 66:48:bf:c4:15:1f:e4:0f:39:d4:79:e1:e2:79:02: 4d:44:81:51:e2:7b:89:c0:62:c2:88:1e:85:22:b4: c4:24:3d:a7:e1:a5:76:c4:c4:e9:c2:de:92:3c:73: b8:a4:83:d6:32:c9:05:71:c7:75:db:b5:40:31:e2: bb:9b:ce:18:7a:28:2a:b3:c0:5b:07:9f:3e:c8:61: 72:38:09:3b:7d:f1:be:df:c1:54:bf:32:43:57:d2: 93:8f:f6:73:08:80:1a:0e:37:c9:bf:86:04:2a:6a: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:B2:C0:52:44:62:0F:64:02:F9:BA:DC:78:92:EE:1E:2E:C0:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2f5c71d-70c0-3d57-b8da-ff25e4aa6fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:71:40:6d:98:c0:97:d0:79:2a:88:1f:ae:d1:f1:44:5b:bf: c6:49:b5:e4:56:b1:61:4f:07:8e:06:9b:57:24:eb:89:0e:0b: d9:30:5e:7a:6e:d4:0c:bb:65:9f:4c:bc:dc:83:fc:f2:2c:a4: a9:c0:34:80:f6:9f:a7:6c:6a:3d:12:83:53:f4:e5:56:c5:03: 03:32:47:69:d1:f1:da:80:f0:44:c2:d1:4c:49:c8:03:b1:ab: 76:99:0f:18:bb:8a:fe:33:2a:59:54:8c:8e:64:74:5f:11:14: 7f:a8:d9:79:7d:8d:69:64:0f:f0:1f:42:62:b5:48:17:53:94: 1a:75:95:2f:fb:e8:f1:06:7e:03:ed:b6:e1:ea:17:22:1b:14: 23:4f:3f:4a:44:e3:ab:12:cd:19:7b:92:98:fe:a9:2f:5c:cb: 39:e3:d4:92:99:ca:44:d1:77:74:d2:3d:b6:75:92:66:bc:c4: 96:20:ba:bf:ad:56:19:74:f1:f9:43:1b:7e:b0:ed:e3:7c:5a: d1:21:f2:fc:b9:e7:47:73:e4:f1:3d:59:81:20:8a:aa:4d:ad: d1:43:b9:61:85:31:d2:56:a7:13:f7:62:0e:d9:09:e7:ba:4a: c9:40:9d:e4:91:b5:0b:48:e7:34:a2:9d:64:8c:fc:1a:1e:ed: 22:46:35:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOm7w1DhvWrD9HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODk2MDM1ZDMtYWIwNi00YTZmLTlmMDktMmJmMjk0OTVjMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1UjryvCqACd4O/p0Z3Ika0ss81mTk/jWdTc ASszmQACqno1ZKuVtEzJ5K9bNSA9LAgrAgVbjv+M+3sMLEvhH7J+3SBJrtg/KW0N EBWG7rgBUxWhxdKfAT4EiyC6VZBDEDprEWW5khXE60Zo8iaagqhZzg0Pl78PU5Yo gEUIoAcKiays+6z2p0q+tn32uaVPE/js045mSL/EFR/kDznUeeHieQJNRIFR4nuJ wGLCiB6FIrTEJD2n4aV2xMTpwt6SPHO4pIPWMskFccd127VAMeK7m84Yeigqs8Bb B58+yGFyOAk7ffG+38FUvzJDV9KTj/ZzCIAaDjfJv4YEKmoeYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1gssBSRGIPZAL5utx4ku4eLsCXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzJmNWM3MWQtNzBjMC0z ZDU3LWI4ZGEtZmYyNWU0YWE2ZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlxQG2YwJfQeSqIH67R8URbv8ZJteRWsWFPB44Gm1ck64kOC9kwXnpu 1Ay7ZZ9MvNyD/PIspKnANID2n6dsaj0Sg1P05VbFAwMyR2nR8dqA8ETC0UxJyAOx q3aZDxi7iv4zKllUjI5kdF8RFH+o2Xl9jWlkD/AfQmK1SBdTlBp1lS/76PEGfgPt tuHqFyIbFCNPP0pE46sSzRl7kpj+qS9cyznj1JKZykTRd3TSPbZ1kma8xJYgur+t Vhl08flDG36w7eN8WtEh8vy550dz5PE9WYEgiqpNrdFDuWGFMdJWpxP3Yg7ZCee6 SslAneSRtQtI5zSinWSM/Boe7SJGNXA= -----END CERTIFICATE-----Generated at Mon May 5 04:23:42 2025 by rpki-client