$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a01d371-aa74-3e24-ac59-c55952438899.roa File: 3a01d371-aa74-3e24-ac59-c55952438899.roa (raw, json) Hash identifier: RgTez0oUc3TLzj1F+g02ybZ7eMDpD/dZSnyTjx54gHU= Subject key identifier: 5C:45:6A:D7:99:3F:CC:E7:CD:CB:CF:87:A8:0F:25:44:FC:D0:F9:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F486DF3FCA00D53F1A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a01d371-aa74-3e24-ac59-c55952438899.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.131.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f4:86:df:3f:ca:00:d5:3f:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=29d9a84c-2a52-43db-8dfe-4e7cd4e8aca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d5:cd:ef:e5:b5:ec:79:b1:9c:26:a3:64:a1: 88:e8:d8:b3:b8:51:44:99:a2:48:5b:ea:89:c3:c7: b5:f0:9b:d5:04:5a:c0:5e:99:1e:5d:ef:69:54:0a: 46:01:52:f4:ae:e4:99:15:ec:5e:32:80:71:30:f0: 9b:a3:e2:4a:57:31:b5:42:7f:75:07:09:c0:2b:02: 3b:91:1e:b5:0f:5b:0f:80:63:86:b1:73:9e:54:2c: 2e:fe:d4:de:64:a7:6b:44:d8:50:ba:2f:7a:dc:93: 31:21:88:23:f1:20:94:53:b9:5f:4d:fc:4c:be:80: 49:13:fb:78:47:7c:0d:31:56:fc:bb:f0:4e:8d:3f: 67:28:35:2f:28:9e:79:3c:c1:55:9e:4a:80:00:62: 0d:e9:86:69:e2:42:e1:21:bc:7f:96:3d:29:4c:63: b1:0e:70:05:45:f7:53:c2:44:d8:0c:eb:9a:a2:f6: c5:d5:d7:5f:3c:9b:1b:3c:02:50:72:26:ab:9b:4c: f4:f2:1a:43:14:96:d5:7d:9c:4b:d5:d9:3d:22:38: be:32:16:23:7b:66:bc:ca:bc:d4:83:34:b5:bd:76: f7:52:ca:d9:8f:00:a5:19:b5:26:c9:ae:a1:d1:04: be:e1:ed:37:bf:6f:62:fe:04:2c:4f:f9:a6:2a:50: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:6A:D7:99:3F:CC:E7:CD:CB:CF:87:A8:0F:25:44:FC:D0:F9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a01d371-aa74-3e24-ac59-c55952438899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3c:93:aa:ba:73:d6:bc:36:c0:16:f6:87:36:e8:1e:7e:82: 7a:81:fa:22:67:fd:0e:1c:f9:54:63:f7:4e:23:0b:58:5b:f6: 92:63:64:7b:b0:3f:e2:0c:64:c6:44:82:58:86:9b:6f:da:a1: 31:76:03:a3:c6:87:17:24:34:d4:d5:fc:40:91:3e:5a:0d:c1: f6:0f:56:e6:71:d7:7e:ab:91:cd:68:a6:8c:e7:56:0c:23:81: 3f:6d:e8:a0:e2:ad:ea:0c:e0:fb:77:0e:71:a5:a9:4a:84:2b: 51:99:80:00:09:0a:c0:41:72:8a:98:07:51:c8:58:da:86:b8: 06:00:ca:18:18:c0:08:6b:cd:3c:ad:03:0a:dc:43:e7:76:a9: 92:c3:ff:41:28:c0:a3:e6:6c:36:b7:f1:01:da:12:c6:6f:b8: b8:09:6d:59:8d:7d:e4:e4:c0:6a:66:59:f5:33:d9:7e:aa:91: 2d:82:dd:97:79:d7:4c:73:99:12:8a:8b:b5:5d:6a:92:d3:4e: cc:11:32:00:41:da:ec:d5:04:09:d1:42:fc:b1:93:4e:2f:6e: b2:bb:f9:51:56:bc:70:8a:f6:64:69:d6:b7:71:97:51:41:bd: 30:a4:ed:ad:e6:cb:a0:75:4b:19:69:40:b8:9b:e8:2e:9c:7b: b5:4a:f4:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPSG3z/KANU/GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjlkOWE4NGMtMmE1Mi00M2RiLThkZmUtNGU3Y2Q0ZThhY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tXN7+W17HmxnCajZKGI6NizuFFEmaJIW+qJ w8e18JvVBFrAXpkeXe9pVApGAVL0ruSZFexeMoBxMPCbo+JKVzG1Qn91BwnAKwI7 kR61D1sPgGOGsXOeVCwu/tTeZKdrRNhQui963JMxIYgj8SCUU7lfTfxMvoBJE/t4 R3wNMVb8u/BOjT9nKDUvKJ55PMFVnkqAAGIN6YZp4kLhIbx/lj0pTGOxDnAFRfdT wkTYDOuaovbF1ddfPJsbPAJQciarm0z08hpDFJbVfZxL1dk9Iji+MhYje2a8yrzU gzS1vXb3UsrZjwClGbUmya6h0QS+4e03v29i/gQsT/mmKlBWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxFateZP8znzcvPh6gPJUT80Pk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2EwMWQzNzEtYWE3NC0z ZTI0LWFjNTktYzU1OTUyNDM4ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE8k6q6c9a8NsAW9oc26B5+gnqB+iJn/Q4c+VRj904jC1hb9pJjZHuw P+IMZMZEgliGm2/aoTF2A6PGhxckNNTV/ECRPloNwfYPVuZx136rkc1opoznVgwj gT9t6KDireoM4Pt3DnGlqUqEK1GZgAAJCsBBcoqYB1HIWNqGuAYAyhgYwAhrzTyt AwrcQ+d2qZLD/0EowKPmbDa38QHaEsZvuLgJbVmNfeTkwGpmWfUz2X6qkS2C3Zd5 10xzmRKKi7VdapLTTswRMgBB2uzVBAnRQvyxk04vbrK7+VFWvHCK9mRp1rdxl1FB vTCk7a3my6B1SxlpQLib6C6ce7VK9P0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:37 2025 by rpki-client