$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1029ae9f-8d03-3bc5-9462-35d623df40dc.roa File: 1029ae9f-8d03-3bc5-9462-35d623df40dc.roa (raw, json) Hash identifier: lW0DqcPP2EubkrZQhpUmm8UP096Maj/xOWwB86QlWuQ= Subject key identifier: C9:CD:45:E6:E7:ED:B6:24:36:73:B0:36:44:1B:1C:A0:68:DC:45:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D2077DD3831EE8098740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1029ae9f-8d03-3bc5-9462-35d623df40dc.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.133.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d2:07:7d:d3:83:1e:e8:09:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9a09a95a-5cd8-467d-a885-3d26529b4300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:41:f6:d1:d1:49:76:df:d6:36:27:aa:fc: 89:a5:6d:57:e4:67:3f:04:e1:70:db:24:41:f2:e5: 73:f3:e3:bd:44:60:08:ac:44:d3:a5:3a:17:b1:56: 8d:eb:f4:b9:0c:2e:da:03:47:0d:ac:03:3b:41:39: e2:35:ae:ca:5b:32:0f:77:1b:1c:df:05:97:24:00: af:c4:64:c0:fa:8b:bf:96:8e:8f:3e:ab:33:73:fc: 19:c9:ec:39:20:7e:79:c5:37:fa:e3:80:c2:81:c9: e8:6f:d6:44:d7:09:64:1c:71:74:2d:93:5b:58:a1: 89:63:70:2b:b5:87:b8:9f:84:9d:71:2a:a6:79:7b: c1:88:3f:43:2e:32:86:b9:d8:1d:c5:12:c9:c4:3e: 76:89:ee:00:b0:eb:47:96:ff:47:50:fe:09:de:7b: 30:5b:16:bf:67:54:bb:94:6f:97:1b:2e:35:cc:4d: 43:ab:bc:57:5d:db:96:33:22:3d:09:db:50:f9:f4: 79:ce:86:68:b2:7d:8c:cf:f9:04:b3:b0:d2:d1:9c: b3:38:f4:e6:fe:7e:81:12:df:2a:61:06:56:46:90: 79:3f:46:3f:87:e5:ad:c3:33:62:77:95:38:a2:56: aa:a7:77:43:cd:bc:2d:6b:e5:10:0e:0f:e7:73:b6: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CD:45:E6:E7:ED:B6:24:36:73:B0:36:44:1B:1C:A0:68:DC:45:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1029ae9f-8d03-3bc5-9462-35d623df40dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f3:6b:1c:59:a9:88:39:77:21:55:4d:1e:2b:d7:18:4e:a7: 87:be:76:32:b2:ba:ea:b9:e9:a1:63:d5:b6:28:3e:24:ef:b5: 71:60:3d:a6:2a:07:8f:ab:15:4b:ed:cd:64:65:41:1d:e9:35: b6:db:a4:bc:90:af:56:01:62:88:ff:6c:da:78:ed:41:90:9a: 4b:48:6d:6f:b2:64:08:30:19:04:1b:33:3a:9b:a9:e8:eb:d3: 02:df:1f:f9:cb:f7:3e:1d:66:fc:ab:ab:df:7f:30:3d:69:85: c0:9b:8a:47:ce:3b:de:34:18:33:cc:98:2c:09:4a:dc:44:9e: ce:a9:b7:21:8e:e3:7c:20:0b:e2:74:b1:a9:0d:a2:5f:d4:bc: 1e:66:f6:10:76:8d:7b:4d:e0:e2:14:d4:4a:2a:4d:85:ea:10: 7c:f3:df:f8:19:2f:f7:11:8c:c7:3c:9b:fc:e6:49:d3:ba:90: c0:29:f0:49:2b:86:a3:4c:86:6c:b4:0f:d5:64:bd:e2:d6:89: 20:ca:9f:98:86:77:1d:f5:d0:82:99:90:3e:b8:84:97:ef:47: 0d:2d:df:86:0f:14:35:a3:8e:75:b6:43:d8:7d:28:14:af:2d: bd:73:03:0b:cc:d7:ed:ef:f5:d0:03:d4:ec:0e:d1:e2:e8:d8: 5c:d8:12:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNIHfdODHugJh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWEwOWE5NWEtNWNkOC00NjdkLWE4ODUtM2QyNjUyOWI0MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbhB9tHRSXbf1jYnqvyJpW1X5Gc/BOFw2yRB 8uVz8+O9RGAIrETTpToXsVaN6/S5DC7aA0cNrAM7QTniNa7KWzIPdxsc3wWXJACv xGTA+ou/lo6PPqszc/wZyew5IH55xTf644DCgcnob9ZE1wlkHHF0LZNbWKGJY3Ar tYe4n4SdcSqmeXvBiD9DLjKGudgdxRLJxD52ie4AsOtHlv9HUP4J3nswWxa/Z1S7 lG+XGy41zE1Dq7xXXduWMyI9CdtQ+fR5zoZosn2Mz/kEs7DS0ZyzOPTm/n6BEt8q YQZWRpB5P0Y/h+WtwzNid5U4olaqp3dDzbwta+UQDg/nc7ZMdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnNRebn7bYkNnOwNkQbHKBo3EWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTAyOWFlOWYtOGQwMy0z YmM1LTk0NjItMzVkNjIzZGY0MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzzaxxZqYg5dyFVTR4r1xhOp4e+djKyuuq56aFj1bYoPiTvtXFgPaYq B4+rFUvtzWRlQR3pNbbbpLyQr1YBYoj/bNp47UGQmktIbW+yZAgwGQQbMzqbqejr 0wLfH/nL9z4dZvyrq99/MD1phcCbikfOO940GDPMmCwJStxEns6ptyGO43wgC+J0 sakNol/UvB5m9hB2jXtN4OIU1EoqTYXqEHzz3/gZL/cRjMc8m/zmSdO6kMAp8Ekr hqNMhmy0D9VkveLWiSDKn5iGdx310IKZkD64hJfvRw0t34YPFDWjjnW2Q9h9KBSv Lb1zAwvM1+3v9dAD1OwO0eLo2FzYEuk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:07 2025 by rpki-client