$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa File: f8c95102-4168-3b2e-95e8-919f3c45fc44.roa (raw, json) Hash identifier: jZq9pMkhMhR1W6I277Cpy7q7VcZ5BLOLgV5ynl0eYho= Subject key identifier: BE:AB:CB:B1:2B:E4:EC:6E:4F:6B:04:E2:4C:3A:82:95:47:86:A4:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499829C4B8402C258AA0E95E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 19527 IP address blocks: 34.2.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c4:b8:40:2c:25:8a:a0:e9:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=ab3d0faf-506f-469c-bd31-0dbea5894d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:2e:84:75:72:49:3b:41:66:b1:91:9a:18: c7:21:b2:34:12:35:9b:fc:00:0a:03:b2:b3:04:9a: d8:8a:ae:c4:68:ea:bd:35:b4:db:33:38:01:fa:36: 37:ba:3e:69:01:24:ad:da:e9:14:f2:44:22:99:b9: 5c:e1:f4:3b:0f:0e:09:80:e4:ac:44:d5:2c:f7:9d: 54:2a:de:13:f4:31:0d:2d:f4:2f:97:0f:64:98:b3: ca:22:0e:80:b9:ba:47:d0:62:ba:f9:5e:4b:26:3e: 9d:6f:96:d1:47:08:72:bf:aa:f9:a3:a0:d6:2e:48: 28:2a:7c:48:59:e6:89:a3:8b:4a:f1:7d:90:8f:6e: 7a:b3:15:18:dc:cb:38:e2:9a:65:6a:9b:d3:05:48: 7a:1f:aa:4f:a9:a6:fc:d1:07:d5:1b:c9:6b:33:83: 2b:82:4e:71:48:7d:7a:68:62:4d:14:b8:70:db:b4: cc:19:fc:b1:a5:21:aa:4c:ec:40:c9:61:d0:33:19: 10:ba:f4:45:59:71:d6:79:66:4c:9f:15:d9:38:60: 34:62:18:12:0f:18:f3:e8:81:57:eb:99:0c:1b:20: 9f:ea:21:a2:a7:d0:1a:c3:23:38:2e:69:b0:5b:b2: 4e:6d:c9:f6:07:57:99:d9:fb:c1:32:22:b3:5c:23: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:CB:B1:2B:E4:EC:6E:4F:6B:04:E2:4C:3A:82:95:47:86:A4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8c95102-4168-3b2e-95e8-919f3c45fc44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c9:9f:73:8d:22:0f:56:01:a7:1a:7b:e0:73:64:d8:14:10: 89:21:b0:5e:d2:c2:c8:19:4c:09:5c:4e:4e:5d:3c:2d:87:fd: fe:4e:1b:69:98:98:67:a8:95:b1:e2:d5:64:66:ad:0a:aa:21: 8e:67:23:99:3d:76:52:ba:bb:2b:0a:f3:20:b2:89:c5:ed:48: 37:d9:e4:52:f7:f0:06:e4:07:a3:57:31:6a:69:32:0c:bb:05: 8f:fe:87:9c:a1:3a:b5:bb:0a:a7:3e:0d:ec:01:d6:f1:7a:12: 1e:7d:55:3d:00:76:5c:26:0b:cb:69:12:86:ac:ce:3f:e2:21: ff:38:4d:42:ca:0e:89:09:32:77:b0:de:bb:4d:9b:6a:09:b4: 7d:6b:58:41:91:02:e3:0d:2c:76:c6:bb:53:72:de:f1:ea:f3: 2f:ba:ad:9e:9f:37:1f:02:e5:32:9a:e2:e3:e0:43:59:1b:d8: 17:f0:8c:34:02:87:b5:7d:ea:44:5f:b5:cb:00:40:22:66:28: 61:81:42:19:e2:a6:6e:17:fd:90:1f:c6:40:87:4e:c6:31:dd: 6b:47:4c:86:40:21:83:b2:38:07:5d:51:7d:b7:95:31:20:bd: 8a:f8:a3:c3:58:ab:b9:c1:45:9b:94:9e:70:c6:7f:d4:57:57: 0d:0d:c8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcS4QCwliqDpXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YWIzZDBmYWYtNTA2Zi00NjljLWJkMzEtMGRiZWE1ODk0ZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB8uhHVySTtBZrGRmhjHIbI0EjWb/AAKA7Kz BJrYiq7EaOq9NbTbMzgB+jY3uj5pASSt2ukU8kQimblc4fQ7Dw4JgOSsRNUs951U Kt4T9DENLfQvlw9kmLPKIg6AubpH0GK6+V5LJj6db5bRRwhyv6r5o6DWLkgoKnxI WeaJo4tK8X2Qj256sxUY3Ms44pplapvTBUh6H6pPqab80QfVG8lrM4Mrgk5xSH16 aGJNFLhw27TMGfyxpSGqTOxAyWHQMxkQuvRFWXHWeWZMnxXZOGA0YhgSDxjz6IFX 65kMGyCf6iGip9AawyM4LmmwW7JObcn2B1eZ2fvBMiKzXCN97QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6ry7Er5OxuT2sE4kw6gpVHhqRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjhjOTUxMDItNDE2OC0z YjJlLTk1ZTgtOTE5ZjNjNDVmYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/Jn3ONIg9WAacae+BzZNgUEIkhsF7SwsgZTAlcTk5dPC2H/f5OG2mY mGeolbHi1WRmrQqqIY5nI5k9dlK6uysK8yCyicXtSDfZ5FL38AbkB6NXMWppMgy7 BY/+h5yhOrW7Cqc+DewB1vF6Eh59VT0AdlwmC8tpEoaszj/iIf84TULKDokJMnew 3rtNm2oJtH1rWEGRAuMNLHbGu1Ny3vHq8y+6rZ6fNx8C5TKa4uPgQ1kb2BfwjDQC h7V96kRftcsAQCJmKGGBQhnipm4X/ZAfxkCHTsYx3WtHTIZAIYOyOAddUX23lTEg vYr4o8NYq7nBRZuUnnDGf9RXVw0NyHc= -----END CERTIFICATE-----Generated at Sun May 4 19:11:03 2025 by rpki-client