$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c070ff-9c6f-3f8f-b527-bc5ae3d29ac1.roa File: 35c070ff-9c6f-3f8f-b527-bc5ae3d29ac1.roa (raw, json) Hash identifier: AIgCNxKWUiWLsJyNv/i7MV1pIX+nXp4P2KzH5izJ6WY= Subject key identifier: D8:B7:2A:A3:67:81:E9:5F:EB:FA:FF:CB:FD:B9:5F:1D:41:47:AA:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784ED9A2EC9ED7E7A5275B8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c070ff-9c6f-3f8f-b527-bc5ae3d29ac1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ed:9a:2e:c9:ed:7e:7a:52:75:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=99652bc5-02d6-4eac-b0b4-219fa7d741c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:f6:b8:00:ea:b3:d8:2d:0b:82:e8:e7:c1: de:06:cf:62:0d:6a:2f:58:1f:d0:9a:c0:e4:61:80: 1c:a6:cc:1c:e7:a7:78:7f:eb:61:16:e4:3d:44:b9: 41:c5:ae:6b:c9:e0:50:1b:cb:8e:46:e9:62:d2:95: 34:40:92:b9:e5:d1:58:1e:f3:c1:0c:35:f0:33:21: a0:e2:c1:c7:0b:6f:ff:65:3e:39:af:40:b7:b1:a3: a0:d5:e0:11:96:0c:13:5a:5f:08:ef:5e:05:71:4d: b1:1c:81:77:47:d6:55:eb:e2:50:1d:95:2e:01:36: 36:ff:55:ed:62:6c:05:2f:27:97:c3:43:4a:d1:66: e6:67:92:8d:80:ef:55:6d:93:ea:5e:83:f7:7c:07: a1:a2:ea:57:b8:46:5e:35:a2:bb:a8:ee:a2:38:81: 4c:c5:b8:49:63:42:bf:a3:7f:fd:db:1a:5a:63:8a: 08:b4:50:9e:27:44:d7:2c:b2:d0:ca:21:b2:8a:03: 36:8d:da:47:f2:f3:f1:a4:b4:ce:6d:f9:0d:5e:da: af:a1:78:34:55:47:75:1a:df:4d:57:9b:3f:67:ed: e7:ac:75:16:ce:47:81:74:fa:31:20:8f:41:9a:37: 86:02:4a:7b:1f:71:f6:84:5f:2a:26:77:b8:82:05: a1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:2A:A3:67:81:E9:5F:EB:FA:FF:CB:FD:B9:5F:1D:41:47:AA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c070ff-9c6f-3f8f-b527-bc5ae3d29ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:41:81:75:e5:2e:49:b4:ed:0f:48:0c:3d:da:a3:f4:f3:d9: 66:a2:19:0b:7b:0b:e6:a3:f0:ef:a9:58:20:d7:ee:b2:4f:86: a8:03:57:5f:6e:22:af:2c:4d:c5:cb:e7:d1:26:11:19:53:38: 04:a3:9e:fd:93:40:1d:b7:e8:12:0e:55:a5:ff:30:d1:f1:25: 38:c2:26:65:9d:07:9e:64:46:8c:aa:d4:01:84:08:97:41:a4: 69:87:94:0f:2c:0e:94:3a:d9:f1:98:49:d5:9a:a3:34:ab:78: 28:59:16:02:5a:17:71:49:90:dd:db:f3:e9:db:86:64:4a:1d: 3b:38:b4:06:38:d1:1b:a9:e0:5e:33:cf:f6:10:61:21:97:87: 09:fc:33:f4:bd:a8:38:22:dd:8c:26:e9:96:3c:c9:c3:47:de: d1:0b:98:1a:b7:e2:43:05:d1:44:f3:b4:1a:e4:18:9b:10:97: cc:78:d1:12:37:ff:7b:12:78:8f:f2:dc:22:0a:68:04:7f:0a: 22:b7:52:2d:85:ec:88:e0:7f:39:01:70:09:75:89:17:e5:7d: 7b:6c:67:c2:5d:03:80:d7:6a:e7:63:17:64:d5:42:bb:a6:e0: 40:4c:2a:5c:fd:71:05:47:41:cd:c5:03:85:3e:8f:24:b6:b9: 88:bd:21:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO2aLsntfnpSdbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTk2NTJiYzUtMDJkNi00ZWFjLWIwYjQtMjE5ZmE3ZDc0MWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY32uADqs9gtC4Lo58HeBs9iDWovWB/QmsDk YYAcpswc56d4f+thFuQ9RLlBxa5ryeBQG8uORuli0pU0QJK55dFYHvPBDDXwMyGg 4sHHC2//ZT45r0C3saOg1eARlgwTWl8I714FcU2xHIF3R9ZV6+JQHZUuATY2/1Xt YmwFLyeXw0NK0WbmZ5KNgO9VbZPqXoP3fAehoupXuEZeNaK7qO6iOIFMxbhJY0K/ o3/92xpaY4oItFCeJ0TXLLLQyiGyigM2jdpH8vPxpLTObfkNXtqvoXg0VUd1Gt9N V5s/Z+3nrHUWzkeBdPoxII9BmjeGAkp7H3H2hF8qJne4ggWhpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi3KqNngelf6/r/y/25Xx1BR6rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVjMDcwZmYtOWM2Zi0z ZjhmLWI1MjctYmM1YWUzZDI5YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5BgXXlLkm07Q9IDD3ao/Tz2WaiGQt7C+aj8O+pWCDX7rJPhqgDV19u Iq8sTcXL59EmERlTOASjnv2TQB236BIOVaX/MNHxJTjCJmWdB55kRoyq1AGECJdB pGmHlA8sDpQ62fGYSdWaozSreChZFgJaF3FJkN3b8+nbhmRKHTs4tAY40Rup4F4z z/YQYSGXhwn8M/S9qDgi3Ywm6ZY8ycNH3tELmBq34kMF0UTztBrkGJsQl8x40RI3 /3sSeI/y3CIKaAR/CiK3Ui2F7IjgfzkBcAl1iRflfXtsZ8JdA4DXaudjF2TVQrum 4EBMKlz9cQVHQc3FA4U+jyS2uYi9Ifg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:09 2025 by rpki-client