$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5ae2ab4-3ac4-30fb-ad57-f54a10fd1efa.roa File: f5ae2ab4-3ac4-30fb-ad57-f54a10fd1efa.roa (raw, json) Hash identifier: hfFZ9RJ0RWDJ3R8SurQ3XSo9ztT64TDGKYmIXKvt0AA= Subject key identifier: 72:93:60:5F:D6:AA:78:B4:AB:3E:5F:99:93:EB:52:25:B3:FA:7F:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAC7081D94D253D53CD780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5ae2ab4-3ac4-30fb-ad57-f54a10fd1efa.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.102.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c7:08:1d:94:d2:53:d5:3c:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=229709f4-98e0-4d14-b1d4-53d3bae9a635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:8b:47:2a:e5:ed:cc:99:28:9e:5f:18:4e: ce:37:af:8f:89:74:ad:bc:ac:2a:37:00:cc:f1:00: cd:41:0e:e0:24:46:1a:32:ab:da:b0:13:fc:c0:1d: fc:a5:63:13:67:44:54:07:d4:29:17:db:4c:bb:65: bd:4f:62:51:7c:09:6f:67:3b:29:a6:25:c9:83:74: 27:45:86:d6:a0:25:0f:b3:45:ab:dc:c9:7a:6d:dd: 79:c9:86:9b:34:c9:eb:f0:3b:c9:19:24:cf:83:72: d7:a9:5e:04:db:af:d3:d7:b3:7b:28:11:ad:96:49: de:56:21:c8:69:e8:5a:d0:20:5c:2e:f2:07:5d:cc: 5b:82:5f:21:90:32:e8:d2:d9:8d:5d:04:4d:33:ce: da:4c:86:5a:ed:c1:77:8f:23:2d:fe:37:fd:4e:1d: 78:c9:94:77:52:6f:5b:84:77:a5:1a:f7:02:23:37: 0c:00:96:b0:0a:62:87:2d:0b:7f:1f:f2:d7:34:3c: 07:31:49:f0:2f:c2:2f:cf:a0:ad:fd:bf:19:15:50: 90:9f:42:25:0c:a8:74:13:03:73:2f:ed:1e:37:11: 74:64:f4:41:ea:6e:50:a6:dc:5a:92:f1:dc:4e:e6: 70:7c:af:e1:6b:f9:0d:3f:09:7d:18:0a:8e:aa:4d: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:93:60:5F:D6:AA:78:B4:AB:3E:5F:99:93:EB:52:25:B3:FA:7F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5ae2ab4-3ac4-30fb-ad57-f54a10fd1efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.102.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a2:f4:2f:df:07:a6:38:ac:09:2e:e9:54:b6:c9:0d:ce:5b: a3:c4:5b:05:81:39:bb:8d:64:58:61:82:15:27:2b:20:7a:b3: ba:0f:b0:ce:7b:68:2b:89:24:9a:4f:a6:21:e6:24:4c:fc:5d: 0d:8b:ac:40:e0:2e:7b:08:93:b5:54:fd:7c:51:30:13:bc:9c: 40:3c:2d:c7:f0:df:f8:e1:79:73:8c:31:7a:13:dc:56:fb:e1: d3:7c:7e:d7:f1:32:ca:1c:03:a3:ca:de:a2:52:d0:3a:35:4f: 6a:25:e1:0c:05:ad:c7:e2:35:e4:bb:da:2d:a3:b3:2e:92:e7: bf:83:04:0f:1e:34:5d:75:22:b8:f5:b4:42:8c:86:ad:90:bf: b1:f8:2b:90:57:1f:e6:16:78:98:26:bc:15:1f:67:ad:e1:f8: 93:60:20:29:80:20:25:80:48:e9:f5:80:9c:d0:31:23:ba:ee: 86:d0:96:e6:a7:11:af:a4:2a:e8:5f:a3:44:02:bd:63:59:64: ff:1b:e7:65:76:63:52:66:48:23:a8:db:36:b1:a5:de:81:a5: bf:ff:48:50:0a:b5:b8:9e:42:e1:9d:88:aa:56:bb:08:6e:a7: 0b:51:c7:9d:63:e5:2e:eb:dd:5a:62:40:40:6e:64:b5:13:32: 0f:f6:f7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuscIHZTSU9U814AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjI5NzA5ZjQtOThlMC00ZDE0LWIxZDQtNTNkM2JhZTlhNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g6LRyrl7cyZKJ5fGE7ON6+PiXStvKwqNwDM 8QDNQQ7gJEYaMqvasBP8wB38pWMTZ0RUB9QpF9tMu2W9T2JRfAlvZzsppiXJg3Qn RYbWoCUPs0Wr3Ml6bd15yYabNMnr8DvJGSTPg3LXqV4E26/T17N7KBGtlkneViHI aeha0CBcLvIHXcxbgl8hkDLo0tmNXQRNM87aTIZa7cF3jyMt/jf9Th14yZR3Um9b hHelGvcCIzcMAJawCmKHLQt/H/LXNDwHMUnwL8Ivz6Ct/b8ZFVCQn0IlDKh0EwNz L+0eNxF0ZPRB6m5QptxakvHcTuZwfK/ha/kNPwl9GAqOqk0TGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKTYF/Wqni0qz5fmZPrUiWz+n8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjVhZTJhYjQtM2FjNC0z MGZiLWFkNTctZjU0YTEwZmQxZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6i9C/fB6Y4rAku6VS2yQ3OW6PEWwWBObuNZFhhghUnKyB6s7oPsM57 aCuJJJpPpiHmJEz8XQ2LrEDgLnsIk7VU/XxRMBO8nEA8Lcfw3/jheXOMMXoT3Fb7 4dN8ftfxMsocA6PK3qJS0Do1T2ol4QwFrcfiNeS72i2jsy6S57+DBA8eNF11Irj1 tEKMhq2Qv7H4K5BXH+YWeJgmvBUfZ63h+JNgICmAICWASOn1gJzQMSO67obQluan Ea+kKuhfo0QCvWNZZP8b52V2Y1JmSCOo2zaxpd6Bpb//SFAKtbieQuGdiKpWuwhu pwtRx51j5S7r3VpiQEBuZLUTMg/296Y= -----END CERTIFICATE-----Generated at Sun May 4 18:18:28 2025 by rpki-client