$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa File: 2b87b3fc-a358-332f-898e-e06e6bc984fa.roa (raw, json) Hash identifier: VenFKOeQonO5zeBDrV1GwK9rLenWYgFuXbA2LUGpxsI= Subject key identifier: D7:28:53:0C:2D:D2:CA:1C:91:60:E0:D1:7E:E5:22:90:EF:52:08:82 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852E09CE86406F8F848000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.89.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2e:09:ce:86:40:6f:8f:84:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3f0d2969-19f0-400b-b984-aebcca869f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:fe:af:96:36:8a:85:0c:8b:20:af:c2:fa: 9f:af:28:c0:cc:aa:5b:3a:5e:b7:c0:ed:91:4b:a7: 9d:46:a5:1c:00:7e:a1:ca:59:c8:e3:ae:8f:dd:6b: 5a:66:46:b0:04:c9:9c:22:2b:a4:fb:be:ac:f9:8b: 8a:a8:7f:74:96:42:af:81:50:8f:3a:2e:a6:a3:b0: 26:7a:be:53:a5:6e:f1:ce:43:48:f4:c4:63:a7:69: bd:9c:af:db:85:bb:12:91:ba:4f:22:ea:23:67:48: 09:ea:a9:58:91:f6:dd:a5:fd:31:10:62:25:55:67: cc:3d:48:73:e4:1b:15:34:b0:82:7d:83:0a:c8:df: 76:87:72:fa:f8:86:2b:e9:78:a1:f1:ee:31:7a:a1: 25:a0:52:b5:22:00:9e:af:ae:b3:28:4c:fd:3c:91: b1:46:ad:f5:28:62:bf:8a:09:41:7e:f3:12:4c:80: b6:bc:6c:de:0c:4f:03:4e:c4:7f:0d:dd:82:71:c5: 37:00:be:12:92:28:e1:92:8c:2f:23:4b:e0:54:4a: 5d:8e:51:91:f4:91:d2:f2:4e:17:22:59:9f:d1:f2: 9e:45:49:a9:05:53:41:66:0b:b7:2e:5e:85:33:19: e3:ea:9e:04:6d:f0:f5:4a:4c:f8:76:54:7f:82:47: 50:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:53:0C:2D:D2:CA:1C:91:60:E0:D1:7E:E5:22:90:EF:52:08:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b87b3fc-a358-332f-898e-e06e6bc984fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6e:59:ac:20:05:be:fa:93:4e:6a:d6:fc:d4:82:49:80:c8: 0a:16:74:04:08:a2:80:9f:6f:c0:bf:80:e9:e1:74:01:ab:c0: 44:c9:8c:54:72:d7:67:24:81:8c:11:64:dd:f5:ed:97:27:d2: 55:87:d4:d6:6c:2b:21:c4:88:80:24:e2:57:f9:6d:61:23:f2: 72:64:52:69:cd:39:28:06:ee:76:fe:6d:29:56:bd:15:09:e4: d7:75:c3:bb:5e:f3:41:f0:16:88:21:ad:30:97:e1:f0:bc:40: e5:c9:8b:fb:8e:ea:4a:e0:d5:fd:f6:0e:de:28:fb:99:74:46: 3c:dc:b0:46:b4:21:a2:46:39:5f:aa:b1:3c:9f:fd:e1:fd:5a: c5:f5:ce:2d:25:32:70:67:24:63:0a:16:7e:0a:37:1e:d5:3a: a5:fa:a8:9a:80:43:dd:b9:94:bf:4d:16:16:fa:87:ae:36:34: 22:81:61:bb:fd:90:77:f0:bc:41:00:42:18:f2:32:75:65:39: c3:e7:01:7e:f6:3d:43:cc:9e:64:83:38:24:84:c6:2c:f6:7d: fa:fb:aa:a0:9c:86:71:e8:f3:f7:db:e9:c6:6d:fa:e7:5b:89: aa:ee:1f:63:c9:f1:2d:f4:96:38:fd:e0:17:9b:88:8f:78:3d: 9f:ae:49:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS4JzoZAb4+EgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2YwZDI5NjktMTlmMC00MDBiLWI5ODQtYWViY2NhODY5ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vT+r5Y2ioUMiyCvwvqfryjAzKpbOl63wO2R S6edRqUcAH6hylnI466P3WtaZkawBMmcIiuk+76s+YuKqH90lkKvgVCPOi6mo7Am er5TpW7xzkNI9MRjp2m9nK/bhbsSkbpPIuojZ0gJ6qlYkfbdpf0xEGIlVWfMPUhz 5BsVNLCCfYMKyN92h3L6+IYr6Xih8e4xeqEloFK1IgCer66zKEz9PJGxRq31KGK/ iglBfvMSTIC2vGzeDE8DTsR/Dd2CccU3AL4SkijhkowvI0vgVEpdjlGR9JHS8k4X Ilmf0fKeRUmpBVNBZgu3Ll6FMxnj6p4EbfD1Skz4dlR/gkdQBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcoUwwt0sockWDg0X7lIpDvUgiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI4N2IzZmMtYTM1OC0z MzJmLTg5OGUtZTA2ZTZiYzk4NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpuWawgBb76k05q1vzUgkmAyAoWdAQIooCfb8C/gOnhdAGrwETJjFRy 12ckgYwRZN317Zcn0lWH1NZsKyHEiIAk4lf5bWEj8nJkUmnNOSgG7nb+bSlWvRUJ 5Nd1w7te80HwFoghrTCX4fC8QOXJi/uO6krg1f32Dt4o+5l0RjzcsEa0IaJGOV+q sTyf/eH9WsX1zi0lMnBnJGMKFn4KNx7VOqX6qJqAQ925lL9NFhb6h642NCKBYbv9 kHfwvEEAQhjyMnVlOcPnAX72PUPMnmSDOCSExiz2ffr7qqCchnHo8/fb6cZt+udb iaruH2PJ8S30ljj94BebiI94PZ+uScE= -----END CERTIFICATE-----Generated at Sun Jun 15 05:28:46 2025 by rpki-client