$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e8b3f-5f47-3267-968b-9857928a98d5.roa File: 420e8b3f-5f47-3267-968b-9857928a98d5.roa (raw, json) Hash identifier: 5Y1EETcU8/SwDurBNlmqSoE2n/c7hI8Lcja2bLQDMu8= Subject key identifier: F2:B0:42:03:3C:47:8A:02:27:6D:FC:4A:4F:D0:2F:26:25:99:18:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78519DA7A569B996A99C6E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e8b3f-5f47-3267-968b-9857928a98d5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.145.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:19:da:7a:56:9b:99:6a:99:c6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f068e743-f336-4598-a96f-f1421383a351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:60:66:1c:ec:0d:c7:13:94:c9:d6:ad:61: c7:7a:9a:b6:7f:f5:18:54:5b:9a:13:29:5b:e2:ad: e6:f6:c6:f8:69:9d:f3:c0:8d:d7:16:42:c7:ec:f4: a4:ab:1a:ab:a7:04:46:53:3f:32:b8:2e:f9:4c:6a: c4:33:8e:7c:0c:0e:69:75:c7:51:34:1a:60:23:96: 07:63:f5:51:46:49:b1:6a:14:6b:01:d0:67:6a:39: c0:fd:15:a6:93:3d:ea:97:6f:54:29:3e:5b:94:00: 33:71:c9:f3:3e:3d:c4:d6:2d:bf:a8:5d:be:22:45: 51:8f:73:45:c9:0a:cf:d2:80:d6:47:1b:d9:ce:44: 0a:9a:2c:db:c9:23:7c:2a:62:12:25:c8:e9:c9:6a: fb:62:9b:24:b8:37:83:bf:25:d2:08:c0:72:b8:e8: 1b:99:43:9e:90:f4:e3:08:c5:bf:a3:5a:34:4d:d2: 69:eb:81:90:24:ca:60:5a:c5:3a:01:df:0a:8f:24: 44:2d:ef:2e:c8:e3:4d:55:2b:b6:b9:3c:cf:d0:c7: 81:01:6b:05:d4:0c:fd:8c:2f:18:d3:ff:69:67:66: a1:90:62:30:4b:c5:8a:c0:ee:70:bb:df:88:7f:26: 10:6c:eb:79:7e:86:97:5e:c0:df:d0:ba:52:3f:08: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B0:42:03:3C:47:8A:02:27:6D:FC:4A:4F:D0:2F:26:25:99:18:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e8b3f-5f47-3267-968b-9857928a98d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:90:6c:7f:f6:b5:6e:ce:35:c7:07:18:b7:47:7e:13:d0:bb: b3:fc:9b:96:52:df:a2:33:1a:0a:99:c0:6c:6a:5c:9b:97:72: 69:4a:1a:d1:e2:07:7f:e4:d5:29:a7:5f:b8:49:59:d5:74:f5: 6a:fc:4c:56:6c:1d:6a:7f:40:62:0c:79:c4:6b:d7:b4:c8:94: f1:b6:45:5e:0a:39:ce:db:f9:ff:75:ae:04:c3:ca:fb:6c:cb: c8:ee:13:5a:0c:fa:8b:a3:f1:17:20:13:89:36:54:a2:75:71: 68:94:9d:0c:df:17:62:ca:7a:f0:0a:5e:34:48:08:ee:f2:30: 16:12:ae:72:f2:99:0b:7f:76:b2:8d:2e:28:c6:34:a5:42:49: af:66:26:20:45:3b:a8:9f:e8:de:44:56:4f:42:de:da:5c:71: a8:b4:ae:f2:5d:f1:89:f8:71:40:91:44:a1:93:86:5d:01:fc: 74:1b:9a:18:25:c9:63:70:a8:b3:5d:f5:cb:f1:a7:ce:42:08: c0:64:91:dc:f7:3b:95:85:ab:a4:df:45:04:9a:e7:fb:0a:4e: 3c:43:f3:55:93:05:c4:6c:32:18:a1:67:9a:06:62:16:ed:cc: 6b:0c:64:ee:93:11:55:74:53:de:85:dc:92:d0:eb:a2:0d:cb: f2:73:39:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRnaelabmWqZxuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjA2OGU3NDMtZjMzNi00NTk4LWE5NmYtZjE0MjEzODNhMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x9gZhzsDccTlMnWrWHHepq2f/UYVFuaEylb 4q3m9sb4aZ3zwI3XFkLH7PSkqxqrpwRGUz8yuC75TGrEM458DA5pdcdRNBpgI5YH Y/VRRkmxahRrAdBnajnA/RWmkz3ql29UKT5blAAzccnzPj3E1i2/qF2+IkVRj3NF yQrP0oDWRxvZzkQKmizbySN8KmISJcjpyWr7YpskuDeDvyXSCMByuOgbmUOekPTj CMW/o1o0TdJp64GQJMpgWsU6Ad8KjyRELe8uyONNVSu2uTzP0MeBAWsF1Az9jC8Y 0/9pZ2ahkGIwS8WKwO5wu9+IfyYQbOt5foaXXsDf0LpSPwjB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKwQgM8R4oCJ238Sk/QLyYlmRhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIwZThiM2YtNWY0Ny0z MjY3LTk2OGItOTg1NzkyOGE5OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSQbH/2tW7ONccHGLdHfhPQu7P8m5ZS36IzGgqZwGxqXJuXcmlKGtHi B3/k1SmnX7hJWdV09Wr8TFZsHWp/QGIMecRr17TIlPG2RV4KOc7b+f91rgTDyvts y8juE1oM+ouj8RcgE4k2VKJ1cWiUnQzfF2LKevAKXjRICO7yMBYSrnLymQt/drKN LijGNKVCSa9mJiBFO6if6N5EVk9C3tpccai0rvJd8Yn4cUCRRKGThl0B/HQbmhgl yWNwqLNd9cvxp85CCMBkkdz3O5WFq6TfRQSa5/sKTjxD81WTBcRsMhihZ5oGYhbt zGsMZO6TEVV0U96F3JLQ66INy/JzOcg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:42 2025 by rpki-client