$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13ea10ca-c075-309f-9f6f-d743b07e4c2a.roa File: 13ea10ca-c075-309f-9f6f-d743b07e4c2a.roa (raw, json) Hash identifier: WGQxVU5Up3JoiP6QWHsrOonfIfG3q6rw1VacNRKXoYU= Subject key identifier: 60:8B:87:14:4B:00:CC:4A:3E:5E:60:32:1B:D8:5D:27:4E:31:48:0F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852FE8796394C5D9A652C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13ea10ca-c075-309f-9f6f-d743b07e4c2a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.122.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2f:e8:79:63:94:c5:d9:a6:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b58307e1-69c8-4755-b368-9a26e9df3936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:49:0b:17:62:0a:75:eb:6d:b4:2a:43:db: 3e:63:6f:ea:99:36:86:02:32:f8:dd:2e:5e:d3:e3: dc:8c:fb:5b:30:14:da:1e:ab:6b:4c:2f:ab:59:48: 67:a3:73:2b:14:52:8a:3e:55:ac:88:ff:15:60:ac: f0:75:7c:31:d9:fc:8d:a2:f6:30:e5:ee:a8:f8:0a: 0d:58:cd:03:27:de:f2:d5:c3:c0:28:e6:a5:7e:09: 5b:bd:6c:c7:00:fa:a4:a2:29:3c:00:47:be:32:76: a3:09:50:30:86:8e:66:9a:a3:1e:04:e4:be:ac:96: c4:a4:cc:00:73:bc:f7:e1:3f:b1:8a:b7:35:cf:23: e1:db:52:5a:1b:d9:66:90:c8:a8:3e:8e:6d:15:42: c7:08:50:a4:f0:72:45:00:01:4c:17:d8:7f:19:a6: 85:d1:e8:bd:b6:57:76:75:78:aa:6f:bb:28:8a:f3: 08:a9:53:05:dc:5c:7e:42:80:be:06:e8:82:4f:c3: d1:97:ac:d6:cf:89:b5:0e:d8:08:55:fc:8a:2a:8b: 26:f1:24:70:fb:4a:e2:0a:69:e0:f3:bf:95:e2:cc: a5:a7:4c:9c:9e:4a:c3:8b:b6:bc:d9:5e:bb:a4:bc: 57:e1:49:d8:d9:6f:80:fb:35:1d:b4:29:1d:54:b9: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:87:14:4B:00:CC:4A:3E:5E:60:32:1B:D8:5D:27:4E:31:48:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/13ea10ca-c075-309f-9f6f-d743b07e4c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f4:78:b5:6b:f6:8e:87:1e:75:09:e6:0e:62:14:bb:b7:7f: 66:35:1a:31:b0:c9:4c:4e:68:8f:c5:72:2c:77:d5:c9:01:28: 9d:59:a3:a6:a5:d2:ac:c1:f6:79:f9:85:61:f3:1a:3d:d3:df: 6f:09:44:ab:5c:b4:5f:30:be:dd:f1:35:f5:13:94:04:63:0a: 62:ac:4f:af:89:1e:f2:ce:4f:f1:6e:6c:68:6f:d7:d5:54:80: 9b:bc:03:31:06:bc:8d:d5:f9:d3:ce:7f:c3:35:e9:53:e2:d7: 4f:5b:30:5a:04:76:84:78:41:0d:f0:b5:bb:af:52:bb:3d:47: 82:7d:79:24:96:2f:a7:8c:92:42:91:21:21:7a:fc:d1:3b:4e: 18:02:46:08:fb:a5:21:e8:2c:50:a3:ee:42:12:9b:f2:33:a7: 7c:50:6a:33:b8:49:29:e3:72:54:65:a4:9a:8e:d2:af:50:0b: 8a:55:2a:02:76:4f:c5:58:4f:17:1c:97:f0:c2:4d:bf:2a:3d: 90:ef:55:9a:3e:90:f6:00:66:3f:2d:31:92:94:7b:3f:7c:21: c9:42:5d:18:9a:b1:55:71:ac:e0:c2:cd:6c:82:98:c8:32:4d: d1:f6:a6:d3:18:25:ad:1b:18:8b:56:15:be:78:e5:ab:e4:42: 24:2e:13:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS/oeWOUxdmmUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjU4MzA3ZTEtNjljOC00NzU1LWIzNjgtOWEyNmU5ZGYzOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OhJCxdiCnXrbbQqQ9s+Y2/qmTaGAjL43S5e 0+PcjPtbMBTaHqtrTC+rWUhno3MrFFKKPlWsiP8VYKzwdXwx2fyNovYw5e6o+AoN WM0DJ97y1cPAKOalfglbvWzHAPqkoik8AEe+MnajCVAwho5mmqMeBOS+rJbEpMwA c7z34T+xirc1zyPh21JaG9lmkMioPo5tFULHCFCk8HJFAAFMF9h/GaaF0ei9tld2 dXiqb7soivMIqVMF3Fx+QoC+BuiCT8PRl6zWz4m1DtgIVfyKKosm8SRw+0riCmng 87+V4sylp0ycnkrDi7a82V67pLxX4UnY2W+A+zUdtCkdVLmCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCLhxRLAMxKPl5gMhvYXSdOMUgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTNlYTEwY2EtYzA3NS0z MDlmLTlmNmYtZDc0M2IwN2U0YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ30eLVr9o6HHnUJ5g5iFLu3f2Y1GjGwyUxOaI/Fcix31ckBKJ1Zo6al 0qzB9nn5hWHzGj3T328JRKtctF8wvt3xNfUTlARjCmKsT6+JHvLOT/FubGhv19VU gJu8AzEGvI3V+dPOf8M16VPi109bMFoEdoR4QQ3wtbuvUrs9R4J9eSSWL6eMkkKR ISF6/NE7ThgCRgj7pSHoLFCj7kISm/Izp3xQajO4SSnjclRlpJqO0q9QC4pVKgJ2 T8VYTxccl/DCTb8qPZDvVZo+kPYAZj8tMZKUez98IclCXRiasVVxrODCzWyCmMgy TdH2ptMYJa0bGItWFb545avkQiQuE+c= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:34 2025 by rpki-client