$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa File: 585aab71-22e8-39eb-861f-fec76f1605ea.roa (raw, json) Hash identifier: tE+XMbr1Qmj5haOYNfs9HIYwBcBXBECvocGYciXbSQA= Subject key identifier: C1:E7:7A:8F:59:0E:B9:42:E7:92:F1:AD:F8:A7:9C:64:54:CB:03:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785128CCEB1934AEFF35E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.133.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:12:8c:ce:b1:93:4a:ef:f3:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=da73c900-0186-4c89-8cef-31fb5881216f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:06:6c:99:a9:a7:dc:5c:b2:7e:e9:24:f8: c0:74:f4:df:0a:14:a8:28:36:e1:00:43:14:20:26: d1:45:c1:a8:e5:e1:28:c1:1c:69:ed:5f:ac:30:e8: be:11:25:19:be:99:ca:74:fd:0f:86:95:b2:de:52: 60:ca:7a:30:00:27:c8:7b:76:00:94:9f:a0:34:0c: 6a:79:e0:be:ab:cd:b1:ba:fe:90:4a:8f:d2:76:f8: 36:04:c8:09:bb:82:21:cc:db:4f:77:c4:d7:79:0a: 3e:ce:c5:f2:6a:9d:92:2b:62:f7:e4:09:eb:c4:8c: 27:76:cb:26:00:b6:15:22:0b:f5:83:84:98:cf:4c: 9a:aa:02:4f:7b:1a:32:d7:e5:83:2c:ee:a0:4c:67: cf:96:5a:b4:4f:f0:6e:39:95:4c:93:96:12:93:d1: 97:05:af:58:7e:6b:70:46:28:86:9b:36:8c:d3:d4: ca:a2:42:70:29:24:eb:bc:77:1d:e6:2e:bd:c6:7b: f5:cc:ad:85:8d:28:39:bb:81:ba:36:6c:9e:15:4f: 1c:da:56:13:9a:c0:52:54:fa:c4:71:ef:ef:c5:4c: 0a:8d:b2:7a:9d:8a:c1:dd:9e:36:c2:9b:f8:66:71: 34:c9:0a:1e:a8:d6:09:82:ea:55:a1:ff:3e:df:53: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E7:7A:8F:59:0E:B9:42:E7:92:F1:AD:F8:A7:9C:64:54:CB:03:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/585aab71-22e8-39eb-861f-fec76f1605ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fc:7a:0a:54:65:7b:61:f5:6b:fd:b8:cf:28:b1:8d:7b:8b: 74:9f:5a:8f:64:70:da:1c:73:9c:84:08:a9:22:57:c5:5b:49: 84:b9:f1:0b:63:8e:bf:be:c1:d2:e5:04:23:c7:ac:87:f1:03: 1a:25:da:c0:8e:80:55:14:03:63:eb:24:e0:ab:2c:52:40:42: 84:de:15:da:40:a5:86:4c:35:6b:cb:af:52:dc:12:ee:9e:b4: 4c:fe:70:b6:ac:6d:e0:de:e0:1c:f9:a2:73:d7:db:30:41:d3: 5e:1c:01:2a:61:56:12:42:99:11:7e:e0:e7:18:7e:e6:69:35: ef:7e:89:02:80:0d:85:b8:a3:4f:bb:73:9b:65:68:02:89:69: e7:7a:f1:1b:46:65:58:e1:27:3a:34:72:20:7d:94:cf:a4:cb: ad:e6:a7:2e:92:47:43:12:c7:96:f3:5c:a7:b4:c9:2d:d1:9e: 0e:ea:7a:19:0e:23:ee:36:e1:49:cf:75:06:24:c2:45:aa:3e: 81:1e:8b:d3:3b:29:64:ca:e1:56:a1:6f:6c:50:b2:56:0a:17: e6:c8:f4:23:96:4b:3c:be:72:8a:4d:60:c3:40:09:a2:23:25: 2c:b9:3e:2e:6a:10:47:74:51:1e:28:0b:32:79:b2:77:a4:d5: 5e:a7:2a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRKMzrGTSu/zXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGE3M2M5MDAtMDE4Ni00Yzg5LThjZWYtMzFmYjU4ODEyMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkowGbJmpp9xcsn7pJPjAdPTfChSoKDbhAEMU ICbRRcGo5eEowRxp7V+sMOi+ESUZvpnKdP0PhpWy3lJgynowACfIe3YAlJ+gNAxq eeC+q82xuv6QSo/Sdvg2BMgJu4IhzNtPd8TXeQo+zsXyap2SK2L35AnrxIwndssm ALYVIgv1g4SYz0yaqgJPexoy1+WDLO6gTGfPllq0T/BuOZVMk5YSk9GXBa9Yfmtw RiiGmzaM09TKokJwKSTrvHcd5i69xnv1zK2FjSg5u4G6NmyeFU8c2lYTmsBSVPrE ce/vxUwKjbJ6nYrB3Z42wpv4ZnE0yQoeqNYJgupVof8+31P9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHneo9ZDrlC55LxrfinnGRUywOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg1YWFiNzEtMjJlOC0z OWViLTg2MWYtZmVjNzZmMTYwNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID8egpUZXth9Wv9uM8osY17i3SfWo9kcNocc5yECKkiV8VbSYS58Qtj jr++wdLlBCPHrIfxAxol2sCOgFUUA2PrJOCrLFJAQoTeFdpApYZMNWvLr1LcEu6e tEz+cLasbeDe4Bz5onPX2zBB014cASphVhJCmRF+4OcYfuZpNe9+iQKADYW4o0+7 c5tlaAKJaed68RtGZVjhJzo0ciB9lM+ky63mpy6SR0MSx5bzXKe0yS3Rng7qehkO I+424UnPdQYkwkWqPoEei9M7KWTK4Vahb2xQslYKF+bI9COWSzy+copNYMNACaIj JSy5Pi5qEEd0UR4oCzJ5snek1V6nKpk= -----END CERTIFICATE-----Generated at Sun Jun 15 05:26:07 2025 by rpki-client