$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa File: 25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa (raw, json) Hash identifier: l+s1C6tF4Q0tM7rWmpQ7Sov2Lrjgb9sEWJVYp//kdJw= Subject key identifier: CE:88:D7:CB:20:7E:5A:E9:92:D4:43:5D:F2:74:37:75:C3:52:71:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB6D88FCAE166DC9EDB540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.122.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6d:88:fc:ae:16:6d:c9:ed:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=33470d1a-7c87-4f7b-b823-e78950dcdad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:90:9a:51:5b:d9:a2:c4:11:71:f0:1d:a0: 3e:d3:4b:17:1a:16:45:2b:d0:7b:f5:4c:48:18:55: da:27:a6:92:24:0f:a2:8b:0f:cd:ea:53:a6:b7:ea: bf:4f:89:4e:79:2f:44:4f:5a:56:7f:80:ba:69:a0: 9e:32:d2:a7:8e:f2:ef:a7:98:21:49:fe:5b:6b:59: 45:22:ab:e2:1c:1e:d7:fc:b7:ee:d7:7f:9c:c3:26: 68:65:a4:13:ca:e1:b2:63:35:01:61:52:7c:76:56: cb:e4:a4:21:bd:1d:c0:29:c7:5f:f8:bc:b9:49:31: ad:9b:e7:24:cc:f0:c1:84:c7:2e:d4:b7:e5:01:b2: 42:68:e0:a3:a3:6f:d9:ba:4a:e9:bd:a3:98:f1:a0: ad:b5:70:35:af:16:96:b8:32:f0:3f:01:82:58:55: af:ac:25:d5:05:87:93:bd:32:13:6e:88:c8:60:d4: 1e:c2:da:d8:bf:f8:36:59:b0:5e:45:d9:bb:1c:bf: 62:eb:19:82:35:ef:b5:0f:6b:c1:c5:4c:b4:79:3c: b9:64:eb:04:60:ed:f1:68:b4:3b:82:fd:72:47:0d: 2e:68:77:f4:be:54:3c:ba:6b:6f:90:19:39:d5:51: 45:72:5a:8a:b8:c6:5c:8b:24:aa:4b:43:a3:90:2b: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:D7:CB:20:7E:5A:E9:92:D4:43:5D:F2:74:37:75:C3:52:71:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:86:7e:da:e7:00:bb:53:d2:64:86:13:21:95:93:b3:1e:91: 22:36:15:1f:d7:14:19:cf:78:e7:11:75:ab:d7:2c:4f:6f:d5: 91:d0:14:22:a5:65:5c:c2:b2:a0:c7:39:b4:f3:64:6a:91:1f: bd:c9:e1:b5:8f:dc:8e:06:bb:8b:ed:4e:d6:1b:8c:ed:83:7d: e3:7e:90:e6:a1:77:77:b2:53:66:b1:54:19:fe:9c:7c:c6:07: 9b:a3:3b:bf:98:74:95:9f:05:05:1d:40:79:e5:92:c5:1f:2b: 4b:cd:d7:7f:42:df:19:7a:c7:15:79:64:80:0b:6c:5e:21:56: f7:70:e0:72:33:64:4d:aa:8a:aa:54:e8:6a:10:6b:1c:d0:65: 54:b0:44:06:56:87:bb:f2:15:7d:76:9b:d4:ee:8d:a3:14:db: 2a:91:d3:5a:9a:e9:0f:50:03:61:db:b1:5e:c4:23:3e:c6:c1: 38:a1:f6:a4:73:e3:bc:31:d1:c7:dd:07:e5:6c:60:80:bb:a9: 39:fc:c2:89:de:52:75:05:8a:df:d2:d6:a9:79:ce:f4:98:95: 6a:79:18:b2:0a:89:a9:eb:f2:22:7b:45:55:bf:3a:57:87:e2: 8a:06:d7:96:21:ff:f8:a9:13:39:6b:03:a2:41:87:58:b9:c6: f1:6f:01:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku22I/K4WbcnttUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzM0NzBkMWEtN2M4Ny00ZjdiLWI4MjMtZTc4OTUwZGNkYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUGQmlFb2aLEEXHwHaA+00sXGhZFK9B79UxI GFXaJ6aSJA+iiw/N6lOmt+q/T4lOeS9ET1pWf4C6aaCeMtKnjvLvp5ghSf5ba1lF IqviHB7X/Lfu13+cwyZoZaQTyuGyYzUBYVJ8dlbL5KQhvR3AKcdf+Ly5STGtm+ck zPDBhMcu1LflAbJCaOCjo2/ZukrpvaOY8aCttXA1rxaWuDLwPwGCWFWvrCXVBYeT vTITbojIYNQewtrYv/g2WbBeRdm7HL9i6xmCNe+1D2vBxUy0eTy5ZOsEYO3xaLQ7 gv1yRw0uaHf0vlQ8umtvkBk51VFFclqKuMZciySqS0OjkCssCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6I18sgflrpktRDXfJ0N3XDUnE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVlYWE3ZDEtZTNmYS0z NGFjLTkwMWQtZDk1NDk5NTdlNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyGftrnALtT0mSGEyGVk7MekSI2FR/XFBnPeOcRdavXLE9v1ZHQFCKl ZVzCsqDHObTzZGqRH73J4bWP3I4Gu4vtTtYbjO2DfeN+kOahd3eyU2axVBn+nHzG B5ujO7+YdJWfBQUdQHnlksUfK0vN139C3xl6xxV5ZIALbF4hVvdw4HIzZE2qiqpU 6GoQaxzQZVSwRAZWh7vyFX12m9TujaMU2yqR01qa6Q9QA2HbsV7EIz7GwTih9qRz 47wx0cfdB+VsYIC7qTn8woneUnUFit/S1ql5zvSYlWp5GLIKianr8iJ7RVW/OleH 4ooG15Yh//ipEzlrA6JBh1i5xvFvAbk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:15 2025 by rpki-client