$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6b0e0da-e0f8-3349-8d10-15ad7a137583.roa File: e6b0e0da-e0f8-3349-8d10-15ad7a137583.roa (raw, json) Hash identifier: /F18/tI4oTQef8MQMRV0X2Zmb+FnS7YXnGyaqUBONHE= Subject key identifier: 35:33:3B:1F:78:33:A0:95:2F:2F:00:FB:A5:D8:26:58:22:52:5F:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB5ECEA9097B2E19663700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6b0e0da-e0f8-3349-8d10-15ad7a137583.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.121.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5e:ce:a9:09:7b:2e:19:66:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cb37eb03-25d5-4e38-8aa1-203561ed4153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:a1:b4:60:8b:93:ab:f1:3a:b8:96:28:e4: ee:ec:b1:85:ac:25:a5:1b:9c:1a:f2:d0:c7:2c:c8: 3f:70:c2:28:af:f0:1b:b2:87:76:94:49:b8:f3:00: 81:17:65:b0:75:1a:92:5c:0c:16:95:e6:5e:ba:f6: 71:bb:e2:11:3b:8b:ec:25:26:da:d3:ff:5d:88:19: e7:cd:8d:86:8d:69:27:b9:ef:5c:15:ec:b2:20:82: 1f:c3:aa:75:64:0d:26:96:a6:7b:00:ba:f3:ce:5c: 4e:db:8e:64:28:80:4e:4d:bb:3f:6e:24:df:28:0e: c7:ea:cb:3e:6f:6c:a5:02:32:c7:72:57:13:88:39: 83:80:97:62:09:bd:85:2f:b9:9c:fa:35:cb:73:42: 78:28:8e:58:62:86:45:e2:e0:bf:a7:e9:71:02:0a: 6e:5c:72:7a:f4:c8:56:f9:a6:21:ec:6e:94:0b:48: 65:66:d6:ad:38:d8:30:74:47:02:e8:a4:00:8d:d9: 38:97:1d:fb:c3:7d:0b:a4:05:15:47:68:69:75:f1: 1e:9e:ed:0f:e9:9a:b8:2f:6b:56:87:3c:2c:ec:92: e2:43:54:0b:e7:d1:e1:e1:b7:cc:dc:b1:79:c7:e1: 90:b9:e3:d5:25:f3:7a:c5:dd:fb:b2:01:5c:b7:da: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:3B:1F:78:33:A0:95:2F:2F:00:FB:A5:D8:26:58:22:52:5F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e6b0e0da-e0f8-3349-8d10-15ad7a137583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4a:73:9f:6b:eb:32:4a:fb:97:14:1d:0b:4e:22:1f:1e:e0: 04:62:9e:a7:07:ac:72:9b:e6:f8:89:2c:80:ec:2e:50:b2:ae: 25:aa:68:79:d8:a1:a2:7a:de:76:e8:d1:87:6f:4d:8d:bc:d7: a1:7d:d2:49:8e:07:93:79:35:1e:d5:ba:6f:cd:19:68:f9:35: 03:49:2d:89:a0:3d:79:b0:d7:3d:dd:64:79:c5:42:48:70:be: df:ac:6f:62:3a:f5:ba:3c:fb:61:2c:b9:f9:a4:b7:64:e5:c5: f0:09:5b:b8:76:cd:47:37:11:fa:5e:58:d7:0f:7e:c0:ac:ba: a7:5b:7e:bf:19:c6:4d:f7:c0:9f:91:7f:e1:82:57:3f:ea:d0: 88:02:56:5f:22:75:54:19:d5:d3:1e:a8:bd:a0:7f:19:8e:e2: 58:6d:c5:8b:13:d8:ee:93:f1:1a:57:8a:ca:a5:e3:eb:64:da: 95:25:37:06:e6:34:8c:7d:bc:55:bf:db:76:51:46:93:77:e6: 81:98:a1:c0:25:0c:a1:23:10:c2:af:3f:fb:fd:7c:7c:50:a9: 6a:9c:b7:23:35:0c:f0:de:76:72:f2:0b:a0:f5:e1:5a:59:a8: dd:0b:af:ca:c8:89:68:bd:6b:ef:c1:d5:6a:70:55:23:8a:d2: c6:e8:e5:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku17OqQl7LhlmNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2IzN2ViMDMtMjVkNS00ZTM4LThhYTEtMjAzNTYxZWQ0MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudahtGCLk6vxOriWKOTu7LGFrCWlG5wa8tDH LMg/cMIor/Absod2lEm48wCBF2WwdRqSXAwWleZeuvZxu+IRO4vsJSba0/9diBnn zY2GjWknue9cFeyyIIIfw6p1ZA0mlqZ7ALrzzlxO245kKIBOTbs/biTfKA7H6ss+ b2ylAjLHclcTiDmDgJdiCb2FL7mc+jXLc0J4KI5YYoZF4uC/p+lxAgpuXHJ69MhW +aYh7G6UC0hlZtatONgwdEcC6KQAjdk4lx37w30LpAUVR2hpdfEenu0P6Zq4L2tW hzws7JLiQ1QL59Hh4bfM3LF5x+GQuePVJfN6xd37sgFct9qzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUzOx94M6CVLy8A+6XYJlgiUl8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTZiMGUwZGEtZTBmOC0z MzQ5LThkMTAtMTVhZDdhMTM3NTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdKc59r6zJK+5cUHQtOIh8e4ARinqcHrHKb5viJLIDsLlCyriWqaHnY oaJ63nbo0YdvTY2816F90kmOB5N5NR7Vum/NGWj5NQNJLYmgPXmw1z3dZHnFQkhw vt+sb2I69bo8+2Esufmkt2TlxfAJW7h2zUc3EfpeWNcPfsCsuqdbfr8Zxk33wJ+R f+GCVz/q0IgCVl8idVQZ1dMeqL2gfxmO4lhtxYsT2O6T8RpXisql4+tk2pUlNwbm NIx9vFW/23ZRRpN35oGYocAlDKEjEMKvP/v9fHxQqWqctyM1DPDednLyC6D14VpZ qN0Lr8rIiWi9a+/B1WpwVSOK0sbo5UU= -----END CERTIFICATE-----Generated at Sun May 4 19:59:37 2025 by rpki-client