$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa File: 0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa (raw, json) Hash identifier: DFIMMI7In/JwFAWoN2lLZVFtq00EntcDJE69EYe7SNA= Subject key identifier: 16:90:CE:41:74:98:6A:6D:FB:79:D4:30:5F:4C:4D:E6:FC:7C:51:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852156D65EDEA5969C5C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:21:56:d6:5e:de:a5:96:9c:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=679b7372-6e82-4694-83d0-9905331b66ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:4a:d5:29:3f:19:74:70:bd:35:3c:d5:b2: 43:68:f5:ec:66:47:04:2e:47:1a:8e:35:fc:19:ce: 24:54:60:5f:6a:71:22:a2:4c:be:8e:c2:d0:7e:2c: b0:63:87:31:8a:ea:0d:a0:d8:42:2e:5a:ba:d8:56: 00:9f:75:14:6d:bd:50:dd:40:69:59:0b:d8:cd:77: 66:39:53:c3:90:3d:32:76:a0:78:00:4d:ec:4c:9b: ee:b3:2e:cb:50:46:6c:26:d3:65:4e:7a:2a:18:24: 8e:c6:07:fa:1c:68:3b:77:7a:63:7c:27:61:af:bd: 26:70:5c:10:c8:7c:a0:5d:31:40:39:c8:8a:36:5b: cd:05:68:0c:c5:83:5d:d4:d5:f9:24:92:b0:4c:96: dd:fd:da:89:16:cd:2a:61:f1:4b:cf:b1:84:5f:b5: a4:84:df:79:5f:e8:5a:ff:98:7d:1c:3a:73:cc:89: e9:d5:6a:76:44:c7:f0:8c:27:76:24:b1:a9:44:1a: 53:f0:a8:b4:4c:4b:ff:41:79:4f:61:66:68:2a:62: 55:b3:d6:bc:ab:84:59:f9:2e:2a:5a:f2:69:5b:0e: 70:57:49:c3:28:67:3b:83:72:89:82:71:65:78:dc: 3c:f2:e3:7d:90:07:f4:a1:cb:1e:fd:ee:94:48:a8: b1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:90:CE:41:74:98:6A:6D:FB:79:D4:30:5F:4C:4D:E6:FC:7C:51:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:49:57:2b:8d:bf:a1:d0:71:89:a3:83:6d:15:51:f9:7b:38: 5f:b4:b5:bf:ba:fe:a9:be:0e:ce:5e:16:b6:64:04:5d:cc:04: b4:2d:77:7a:cd:ca:d2:f1:69:ff:2c:96:26:9b:83:07:94:66: 4c:17:e2:b5:77:11:80:6a:39:d8:db:0b:ff:4e:77:9e:ab:a6: fe:b3:46:37:6a:7b:12:e3:14:4e:56:fd:dc:63:7e:f5:cf:3f: 37:58:01:81:40:ff:d5:60:8c:7e:c1:0f:3b:80:4d:74:35:55: ed:9c:c0:04:70:3f:52:93:a5:2d:8c:1f:c2:8a:6e:99:21:c6: c3:8a:7d:4a:c0:52:0b:0f:63:8a:ab:70:b7:d9:e5:de:8c:c4: 9d:93:09:79:5a:34:7a:f9:92:7d:7e:8c:1c:60:e5:09:ad:a4: 6f:9e:a4:04:29:d3:83:ec:b0:91:e6:fe:b5:0d:0d:51:21:dd: a8:a2:ab:d3:3b:aa:77:a2:43:68:e5:c3:7a:ad:44:ae:9d:af: f4:27:88:a5:bd:07:d4:dd:c9:03:9b:3c:c1:fb:97:79:05:65: e6:ad:1a:33:50:00:58:4b:d8:19:78:fa:db:f3:b2:8c:2d:21: 49:88:a8:f3:fc:e6:cc:5f:32:25:d7:e0:ac:86:ce:e6:fc:5d: a7:be:c1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSFW1l7epZacXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Njc5YjczNzItNmU4Mi00Njk0LTgzZDAtOTkwNTMzMWI2NmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm1K1Sk/GXRwvTU81bJDaPXsZkcELkcajjX8 Gc4kVGBfanEioky+jsLQfiywY4cxiuoNoNhCLlq62FYAn3UUbb1Q3UBpWQvYzXdm OVPDkD0ydqB4AE3sTJvusy7LUEZsJtNlTnoqGCSOxgf6HGg7d3pjfCdhr70mcFwQ yHygXTFAOciKNlvNBWgMxYNd1NX5JJKwTJbd/dqJFs0qYfFLz7GEX7WkhN95X+ha /5h9HDpzzInp1Wp2RMfwjCd2JLGpRBpT8Ki0TEv/QXlPYWZoKmJVs9a8q4RZ+S4q WvJpWw5wV0nDKGc7g3KJgnFleNw88uN9kAf0ocse/e6USKix1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaQzkF0mGpt+3nUMF9MTeb8fFFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGEzYmY0YWEtZDJkNi0z ZThkLTlhNmYtZGRjMjA1ZTVkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIorAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBJVyuNv6HQcYmjg20VUfl7OF+0tb+6/qm+Ds5eFrZkBF3MBLQtd3rN ytLxaf8sliabgweUZkwX4rV3EYBqOdjbC/9Od56rpv6zRjdqexLjFE5W/dxjfvXP PzdYAYFA/9VgjH7BDzuATXQ1Ve2cwARwP1KTpS2MH8KKbpkhxsOKfUrAUgsPY4qr cLfZ5d6MxJ2TCXlaNHr5kn1+jBxg5QmtpG+epAQp04PssJHm/rUNDVEh3aiiq9M7 qneiQ2jlw3qtRK6dr/QniKW9B9TdyQObPMH7l3kFZeatGjNQAFhL2Bl4+tvzsowt IUmIqPP85sxfMiXX4KyGzub8Xae+wfs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:36 2025 by rpki-client