$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34854961-434b-3420-af11-4a72e2decf72.roa File: 34854961-434b-3420-af11-4a72e2decf72.roa (raw, json) Hash identifier: /cOSwh8N/6HMgvF/Q6xEauHKQj4f3FDiexiidYzKM/o= Subject key identifier: 91:EE:39:70:F3:79:B2:99:22:C8:F6:E1:BA:EA:15:C0:C7:CF:E9:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852E540E836150EB60BD80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34854961-434b-3420-af11-4a72e2decf72.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.131.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2e:54:0e:83:61:50:eb:60:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7acda2bc-0d6f-41c0-bbe9-22bfe9d8976c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:95:40:d1:c8:0f:5e:30:3e:da:e4:51:8b: 7a:a4:99:cf:8b:20:eb:7c:5f:27:d3:89:c7:f2:99: b8:be:20:0c:ad:aa:e7:89:f8:59:80:0b:fe:18:cd: 70:14:98:ec:c7:89:8d:f6:c5:0c:6c:34:e4:84:54: 25:06:5d:ca:2e:45:3e:8c:2f:1a:cd:a9:65:29:9d: 12:c8:02:56:ab:20:48:e8:b8:d0:13:a9:85:f1:77: 2b:da:cb:10:da:61:4d:88:9e:02:4a:7d:b5:55:c3: ad:2b:41:7b:87:f9:db:9b:50:2a:04:40:72:08:df: 22:2b:01:43:7a:3e:3f:6e:b5:5f:ab:5a:80:13:03: 50:0f:c6:73:38:fc:73:0f:0d:b2:42:bf:73:75:1e: 05:91:15:47:bb:2e:af:06:3e:67:63:fc:9b:c3:a0: fe:f3:f1:e0:5a:2d:0c:16:9b:fb:d7:40:fc:88:4f: 9e:ee:21:f7:e9:18:6b:bb:16:25:5d:82:d9:88:6b: 47:ea:5a:54:e1:7c:7d:0f:aa:bd:e4:c7:82:13:64: 32:6b:04:e5:ce:25:be:5f:92:52:e0:b3:09:de:87: 28:23:38:94:67:c1:11:b0:64:8b:7b:7a:78:d9:a2: c0:c8:ee:97:0d:d8:d5:c3:a6:4b:d8:f9:a9:c3:20: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EE:39:70:F3:79:B2:99:22:C8:F6:E1:BA:EA:15:C0:C7:CF:E9:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34854961-434b-3420-af11-4a72e2decf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7c:18:eb:88:e4:14:d0:3b:e8:80:df:de:c7:ba:f6:b0:be: b1:a0:4a:ad:25:b2:67:2d:40:9e:35:58:e9:b2:a5:4a:47:f0: 24:66:83:8d:85:45:7f:3d:55:b6:3e:00:15:ae:50:b7:a7:35: 91:af:28:ad:52:85:77:9c:49:75:ab:56:71:9e:04:6f:44:da: 17:22:6d:d4:32:90:3d:93:18:37:42:4b:81:e5:03:be:50:89: a6:b4:6a:c8:19:4c:7a:29:c4:51:fb:19:0f:55:aa:ad:a6:5b: 72:dd:16:ed:2f:a9:7f:a3:4e:ac:3d:e0:07:07:e8:04:1a:9e: 99:47:d8:02:d9:d8:61:0a:1e:73:12:64:a4:c2:ec:06:6b:aa: 46:fe:a9:b7:fe:84:32:1f:22:6b:b1:93:44:39:e8:2e:19:f6: 3f:be:d9:19:8e:ac:54:0c:5b:ad:8b:1d:9b:9f:25:1f:77:25: dd:da:0a:2d:ba:49:e6:f8:ba:9f:7e:52:d0:d6:1b:f0:2d:9e: 57:9c:da:be:c2:fe:bb:c3:07:b6:ee:73:14:b6:e6:4f:5e:89: 09:de:fd:80:ff:54:c7:01:00:2e:c8:8c:7d:f1:da:61:b0:8f: 70:fa:68:21:5a:93:5b:e8:f5:d8:74:a5:5d:28:e8:bd:46:38: 7a:b4:3b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS5UDoNhUOtgvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2FjZGEyYmMtMGQ2Zi00MWMwLWJiZTktMjJiZmU5ZDg5NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSuVQNHID14wPtrkUYt6pJnPiyDrfF8n04nH 8pm4viAMrarnifhZgAv+GM1wFJjsx4mN9sUMbDTkhFQlBl3KLkU+jC8azallKZ0S yAJWqyBI6LjQE6mF8Xcr2ssQ2mFNiJ4CSn21VcOtK0F7h/nbm1AqBEByCN8iKwFD ej4/brVfq1qAEwNQD8ZzOPxzDw2yQr9zdR4FkRVHuy6vBj5nY/ybw6D+8/HgWi0M Fpv710D8iE+e7iH36RhruxYlXYLZiGtH6lpU4Xx9D6q95MeCE2QyawTlziW+X5JS 4LMJ3ocoIziUZ8ERsGSLe3p42aLAyO6XDdjVw6ZL2PmpwyAo4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHuOXDzebKZIsj24brqFcDHz+lVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzQ4NTQ5NjEtNDM0Yi0z NDIwLWFmMTEtNGE3MmUyZGVjZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh8GOuI5BTQO+iA397HuvawvrGgSq0lsmctQJ41WOmypUpH8CRmg42F RX89VbY+ABWuULenNZGvKK1ShXecSXWrVnGeBG9E2hcibdQykD2TGDdCS4HlA75Q iaa0asgZTHopxFH7GQ9Vqq2mW3LdFu0vqX+jTqw94AcH6AQanplH2ALZ2GEKHnMS ZKTC7AZrqkb+qbf+hDIfImuxk0Q56C4Z9j++2RmOrFQMW62LHZufJR93Jd3aCi26 Seb4up9+UtDWG/Atnlec2r7C/rvDB7bucxS25k9eiQne/YD/VMcBAC7IjH3x2mGw j3D6aCFak1vo9dh0pV0o6L1GOHq0O6c= -----END CERTIFICATE-----Generated at Sun Jun 15 17:44:14 2025 by rpki-client