$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa File: 464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa (raw, json) Hash identifier: ieYiWqyIkP7nKHzxq7ZMUl6Y9+p8kBTPnf3apVnlOvc= Subject key identifier: C8:D0:29:3B:23:39:1E:B7:32:D5:3D:5F:DC:7F:00:88:EE:A4:A4:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D4BDEF8ECC996D099700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d4:bd:ef:8e:cc:99:6d:09:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ab43129f-2cc8-4f36-a1ea-3b6ef3e8bda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:a0:83:95:6c:0c:24:ae:05:8b:b3:0e:ec: 9b:74:35:7c:e2:dd:65:ca:a1:6c:84:1c:a3:e8:4e: 6d:e8:07:7e:90:2e:ab:59:cc:cd:69:b3:5b:94:e3: c7:9e:37:fc:bd:ef:f1:e7:7d:05:14:9d:44:6d:dd: 1f:b4:8f:60:af:9a:3b:4f:4f:4e:b6:66:5d:1d:aa: 4a:e2:65:14:16:9f:e7:99:91:3f:2e:d9:c9:aa:30: f0:9a:a3:3b:89:f5:4e:74:ee:11:76:29:2e:82:60: 61:0f:c5:7c:e8:27:b5:a4:ab:1a:e8:29:89:16:12: f7:82:3a:4b:32:59:6a:0b:a2:5c:43:2c:52:21:e1: 14:be:06:81:60:89:27:23:f8:b0:db:fa:bf:5f:c2: 7d:97:b1:94:60:50:d6:10:7a:fd:86:52:4b:3a:e6: 4c:e5:70:8a:3a:96:6e:5e:93:ea:ec:ca:f9:b1:5a: 8e:89:ea:81:ac:fb:07:1e:96:39:5f:f6:ee:00:c9: a8:4c:0e:8b:b2:0a:f5:55:84:83:1b:1e:c1:b2:3e: 32:4d:21:a2:90:28:90:da:e6:c3:b9:9f:3a:28:ad: 87:39:c5:d9:6c:01:ec:45:b2:cb:8d:5f:2f:be:3c: b5:c2:65:7c:51:eb:74:99:19:cc:53:19:c0:7c:e7: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:29:3B:23:39:1E:B7:32:D5:3D:5F:DC:7F:00:88:EE:A4:A4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/464cc12f-b45f-349d-8e5d-e63e5bde2cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:50:a3:dd:8d:a6:5e:37:76:13:62:8e:d3:9d:8d:f8:d6:17: d8:0f:67:f3:74:0c:cf:13:5e:3c:4e:32:37:cc:6a:bd:78:77: 3e:40:10:53:8e:3d:74:a6:ff:4a:e7:5c:47:b1:df:55:dc:a8: a3:5a:e6:d9:4e:ef:ac:cf:a3:0c:a0:2a:a3:69:53:04:cc:0d: 30:c7:07:81:9d:dc:0c:c6:23:d2:aa:16:5c:27:c7:ef:d5:14: 41:b3:a0:b8:8c:81:51:c4:e0:7d:40:e5:50:1c:04:9f:d7:bc: e3:7c:ea:04:fd:23:3c:86:9c:a9:f9:54:f5:ba:f1:8c:e6:77: fb:26:4d:e8:c1:e9:bb:88:64:ab:d2:c8:5a:b9:43:75:72:d4: 96:72:49:4c:1c:e9:b1:50:2e:d4:62:a5:df:6f:15:74:a7:29: 63:e3:16:38:25:30:6d:85:b3:b6:f7:01:c9:a6:f8:02:fc:b0: 59:d6:f8:b3:54:01:66:17:ed:56:2f:08:53:30:a5:45:42:5c: 64:4c:e0:ca:1a:d2:85:5b:4d:9d:4a:4e:1b:aa:51:48:09:e1: 98:50:d7:66:75:81:18:70:b3:51:f2:87:5f:a0:26:5e:b1:65: 1d:65:3c:5f:13:7b:5b:be:b5:4e:65:d1:37:a9:b0:c4:9a:dc: 4b:db:de:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNS9747MmW0JlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWI0MzEyOWYtMmNjOC00ZjM2LWExZWEtM2I2ZWYzZThiZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxugg5VsDCSuBYuzDuybdDV84t1lyqFshByj 6E5t6Ad+kC6rWczNabNblOPHnjf8ve/x530FFJ1Ebd0ftI9gr5o7T09OtmZdHapK 4mUUFp/nmZE/LtnJqjDwmqM7ifVOdO4RdikugmBhD8V86Ce1pKsa6CmJFhL3gjpL MllqC6JcQyxSIeEUvgaBYIknI/iw2/q/X8J9l7GUYFDWEHr9hlJLOuZM5XCKOpZu XpPq7Mr5sVqOieqBrPsHHpY5X/buAMmoTA6Lsgr1VYSDGx7Bsj4yTSGikCiQ2ubD uZ86KK2HOcXZbAHsRbLLjV8vvjy1wmV8Uet0mRnMUxnAfOdjHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjQKTsjOR63MtU9X9x/AIjupKQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDY0Y2MxMmYtYjQ1Zi0z NDlkLThlNWQtZTYzZTViZGUyY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNQo92Npl43dhNijtOdjfjWF9gPZ/N0DM8TXjxOMjfMar14dz5AEFOO PXSm/0rnXEex31XcqKNa5tlO76zPowygKqNpUwTMDTDHB4Gd3AzGI9KqFlwnx+/V FEGzoLiMgVHE4H1A5VAcBJ/XvON86gT9IzyGnKn5VPW68Yzmd/smTejB6buIZKvS yFq5Q3Vy1JZySUwc6bFQLtRipd9vFXSnKWPjFjglMG2Fs7b3Acmm+AL8sFnW+LNU AWYX7VYvCFMwpUVCXGRM4Moa0oVbTZ1KThuqUUgJ4ZhQ12Z1gRhws1Hyh1+gJl6x ZR1lPF8Te1u+tU5l0TepsMSa3Evb3pE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:52 2025 by rpki-client