$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa File: 33ce8402-8a94-3eab-b082-24afe422f714.roa (raw, json) Hash identifier: pRWK0QDcVcceKX0ORNKhRHL5LCK8K7j5AfUsIn0b+Mg= Subject key identifier: 20:30:0F:B1:4F:D4:94:74:C7:06:DC:CA:D8:71:ED:94:C6:5F:F9:4C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852B6E7B95B92D5FF49300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2b:6e:7b:95:b9:2d:5f:f4:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a9d79934-759f-43d6-99d9-a26fc43690fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:bd:4e:8f:98:29:2e:bd:d7:c0:10:3c:b6: cf:1f:c8:34:eb:dc:ff:4d:d8:2c:4a:88:cc:e0:a0: 34:d6:6f:04:1d:ec:d8:b5:1f:e9:d9:af:a5:e6:b4: 9a:9c:eb:5f:73:d3:db:55:86:fc:0b:b7:33:58:1b: 45:8f:5a:39:65:b2:a8:f0:24:93:99:3a:04:95:18: 75:6e:79:2c:70:d6:d0:66:ac:4f:ee:e1:f1:b4:d0: 8f:9f:33:59:b3:65:1a:73:08:92:58:8f:c6:28:48: a3:42:f9:9b:fa:39:0d:91:07:b8:74:04:de:9f:dd: 81:b3:b8:bd:fd:47:dd:d8:6f:a8:6d:e4:47:1e:16: 30:47:e3:3a:ed:e5:2f:1d:e9:8b:56:bc:04:6b:22: ee:4b:51:d6:b4:9b:7e:e3:45:87:95:f1:78:56:66: 62:fa:df:69:39:e8:02:58:9a:fd:1c:71:d1:00:45: c4:1a:47:81:98:47:71:33:a2:33:7c:fd:b8:87:b1: 76:4f:3f:7b:79:b1:73:84:f5:a8:db:f9:99:4c:86: fd:4b:68:88:7f:06:1c:a4:02:f8:95:ca:ca:e2:cb: 67:fc:d1:8a:d1:3a:a9:44:3c:07:aa:d5:d9:d2:88: 12:f9:f2:11:ee:18:3d:12:a5:18:99:f9:33:49:d0: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:30:0F:B1:4F:D4:94:74:C7:06:DC:CA:D8:71:ED:94:C6:5F:F9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1e:8a:f7:a3:e4:45:23:14:38:df:cb:0b:0c:14:ac:a7:3a: 1c:74:07:3d:64:ec:ba:33:3b:cc:a8:57:87:fd:2c:67:f2:9b: 0a:e9:36:62:21:72:63:2e:c4:f3:82:42:78:80:39:8f:47:81: 0a:94:44:c4:56:60:22:75:de:8b:82:74:b8:fb:b0:07:b1:71: e9:05:41:47:96:44:68:92:80:95:73:92:72:04:78:24:f3:f8: 9d:3d:0b:1a:b3:b7:db:32:11:f3:a4:4e:1d:94:47:3e:d5:9c: a8:e4:06:a7:15:f7:e8:27:56:d3:d5:53:1e:dc:73:dc:18:55: c4:e3:6e:34:c5:f3:f4:9a:a0:66:72:22:18:2e:9a:ca:2a:90: fb:dd:2b:8b:af:ad:49:6d:46:9b:7b:00:f4:22:38:de:77:82: e9:dd:76:01:03:c6:31:91:ed:d0:c6:fe:44:2b:13:1b:96:b5: 58:43:af:f1:30:81:19:6f:c9:50:9a:49:29:fb:53:7c:e0:29: 86:59:fc:7d:dd:be:12:bc:de:09:a0:b6:86:57:44:bf:bd:94: 7f:0a:a8:e7:77:11:a4:32:04:68:0f:be:7f:98:12:07:61:5e: 41:24:a6:fa:e0:a3:1e:fa:05:ec:24:e9:10:9b:e3:dc:e8:1c: 42:49:cb:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhStue5W5LV/0kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTlkNzk5MzQtNzU5Zi00M2Q2LTk5ZDktYTI2ZmM0MzY5MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofe9To+YKS6918AQPLbPH8g069z/TdgsSojM 4KA01m8EHezYtR/p2a+l5rSanOtfc9PbVYb8C7czWBtFj1o5ZbKo8CSTmToElRh1 bnkscNbQZqxP7uHxtNCPnzNZs2UacwiSWI/GKEijQvmb+jkNkQe4dATen92Bs7i9 /Ufd2G+obeRHHhYwR+M67eUvHemLVrwEayLuS1HWtJt+40WHlfF4VmZi+t9pOegC WJr9HHHRAEXEGkeBmEdxM6IzfP24h7F2Tz97ebFzhPWo2/mZTIb9S2iIfwYcpAL4 lcrK4stn/NGK0TqpRDwHqtXZ0ogS+fIR7hg9EqUYmfkzSdCPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAwD7FP1JR0xwbcythx7ZTGX/lMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjZTg0MDItOGE5NC0z ZWFiLWIwODItMjRhZmU0MjJmNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACseivej5EUjFDjfywsMFKynOhx0Bz1k7LozO8yoV4f9LGfymwrpNmIh cmMuxPOCQniAOY9HgQqURMRWYCJ13ouCdLj7sAexcekFQUeWRGiSgJVzknIEeCTz +J09Cxqzt9syEfOkTh2URz7VnKjkBqcV9+gnVtPVUx7cc9wYVcTjbjTF8/SaoGZy IhgumsoqkPvdK4uvrUltRpt7APQiON53gunddgEDxjGR7dDG/kQrExuWtVhDr/Ew gRlvyVCaSSn7U3zgKYZZ/H3dvhK83gmgtoZXRL+9lH8KqOd3EaQyBGgPvn+YEgdh XkEkpvrgox76Bewk6RCb49zoHEJJy7Y= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:01 2025 by rpki-client