$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa File: 0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa (raw, json) Hash identifier: UN+CBoLlGjkMT3ssFsxVefcZ3VMr+J+Qi8E4XoZPtQA= Subject key identifier: F7:5A:89:A7:B8:AC:F5:FD:A6:1D:C9:58:0B:D3:08:A6:41:27:80:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851CE0A133AFB2BDDD8E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.136.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1c:e0:a1:33:af:b2:bd:dd:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7ff99cd1-c20e-426c-8613-4c5f689a1aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:37:54:a9:6d:ad:3f:43:e6:c4:65:d2:72:14: 52:79:6c:fb:40:82:95:f2:94:eb:42:60:ec:36:ba: 45:7d:1a:1b:53:d8:f7:67:6a:73:07:03:5c:3d:57: c0:27:65:e8:68:f5:28:43:cd:2e:6b:d5:73:7a:3c: 31:a6:e3:ce:0b:31:f8:bb:bf:c6:30:b4:a8:eb:77: 68:5a:3c:7f:35:1e:12:9d:38:80:97:8f:50:37:69: 66:4d:6b:1e:79:b8:4a:54:10:f5:4d:64:6f:d2:13: c0:7f:28:03:4e:b2:31:5c:8b:fc:1b:3e:cd:c7:c7: bc:56:7c:af:31:ff:d5:cf:34:f0:57:8b:32:a3:15: 49:f9:9d:ad:f0:a5:82:8e:6a:59:4f:8a:c3:99:ae: 6e:4a:5d:a5:80:e7:bb:4b:42:c2:2f:25:a5:e5:45: b1:65:05:91:0c:97:f1:e3:d1:f9:63:a4:ae:6b:cb: 50:6f:80:63:87:00:10:17:e0:e5:77:0b:a4:8b:6b: ea:63:04:ac:51:8f:bb:47:a4:f3:c7:83:a6:12:0b: 23:a1:30:43:ff:4a:61:9d:29:dc:98:46:4a:51:52: 46:a2:19:1d:92:1b:34:ae:69:00:30:ae:9d:74:8b: b6:ed:24:29:47:7d:a1:8d:7d:66:73:b4:5b:01:35: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5A:89:A7:B8:AC:F5:FD:A6:1D:C9:58:0B:D3:08:A6:41:27:80:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e80862d-8502-3d3e-8c1c-d0e710c164bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0d:b0:3d:fb:e0:86:fa:0d:41:95:15:cf:7f:c6:78:5a:3d: 48:45:6d:2c:07:b7:4f:15:11:4d:99:e3:4e:69:d6:1d:4e:c0: 1e:f3:a8:b8:cc:a8:59:33:e7:e7:c8:2a:4c:00:92:ea:3d:43: de:f2:5e:d4:b8:d5:3e:78:31:34:54:07:22:b0:ef:f2:3e:8f: a9:d1:1f:81:03:ce:9a:62:29:a1:8c:75:bd:9c:12:18:51:63: a2:01:53:a2:51:08:58:a7:aa:cf:1a:45:d9:ef:91:17:3d:64: 12:02:6d:d5:a5:97:87:81:f2:7a:ea:dc:38:d3:78:b1:a0:75: 19:19:8c:23:57:c9:a5:ce:1a:a6:65:12:8f:4f:91:7d:41:7a: d6:13:e1:53:44:7e:80:2e:5b:e9:34:58:53:a5:a4:8c:b4:59: 22:85:c4:09:93:96:74:10:47:37:ef:b6:47:63:77:e7:39:5d: df:fd:12:d9:94:a4:23:f5:83:74:66:84:74:68:df:90:e1:65: 7b:4f:77:60:d1:a7:67:41:d8:df:2b:b8:55:c7:69:bc:f3:2c: d1:f0:05:fa:3f:5d:57:92:2e:1d:45:e8:a0:84:f4:69:21:5f: 74:7c:d6:48:d8:7b:a5:46:46:a5:70:44:59:61:72:74:f6:e9: 91:06:c3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRzgoTOvsr3djoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2ZmOTljZDEtYzIwZS00MjZjLTg2MTMtNGM1ZjY4OWExYWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjdUqW2tP0PmxGXSchRSeWz7QIKV8pTrQmDs NrpFfRobU9j3Z2pzBwNcPVfAJ2XoaPUoQ80ua9VzejwxpuPOCzH4u7/GMLSo63do Wjx/NR4SnTiAl49QN2lmTWseebhKVBD1TWRv0hPAfygDTrIxXIv8Gz7Nx8e8Vnyv Mf/VzzTwV4syoxVJ+Z2t8KWCjmpZT4rDma5uSl2lgOe7S0LCLyWl5UWxZQWRDJfx 49H5Y6Sua8tQb4BjhwAQF+Dldwuki2vqYwSsUY+7R6Tzx4OmEgsjoTBD/0phnSnc mEZKUVJGohkdkhs0rmkAMK6ddIu27SQpR32hjX1mc7RbATVqUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdaiae4rPX9ph3JWAvTCKZBJ4DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGU4MDg2MmQtODUwMi0z ZDNlLThjMWMtZDBlNzEwYzE2NGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIogAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcNsD374Ib6DUGVFc9/xnhaPUhFbSwHt08VEU2Z405p1h1OwB7zqLjM qFkz5+fIKkwAkuo9Q97yXtS41T54MTRUByKw7/I+j6nRH4EDzppiKaGMdb2cEhhR Y6IBU6JRCFinqs8aRdnvkRc9ZBICbdWll4eB8nrq3DjTeLGgdRkZjCNXyaXOGqZl Eo9PkX1BetYT4VNEfoAuW+k0WFOlpIy0WSKFxAmTlnQQRzfvtkdjd+c5Xd/9EtmU pCP1g3RmhHRo35DhZXtPd2DRp2dB2N8ruFXHabzzLNHwBfo/XVeSLh1F6KCE9Gkh X3R81kjYe6VGRqVwRFlhcnT26ZEGw2k= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:58 2025 by rpki-client