$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e45a06e-df6a-32e6-9c21-72a92aba7a65.roa File: 5e45a06e-df6a-32e6-9c21-72a92aba7a65.roa (raw, json) Hash identifier: Haj6TWkGqOt438NWOIVrCOQMA/Y+ejpPqPSjqu0OHTQ= Subject key identifier: 5E:3C:F1:CC:AB:ED:B3:8B:F0:FE:C7:14:E2:C3:3F:6A:1B:44:AD:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C77214474932AAE702C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e45a06e-df6a-32e6-9c21-72a92aba7a65.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.136.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c7:72:14:47:49:32:aa:e7:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=32d22933-b2c4-431d-a26f-b12fc4c4d74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:c9:cb:52:d5:ba:e1:43:88:33:84:e6:66: 1f:65:f2:98:5f:ce:cd:c7:07:07:e6:79:8d:9a:96: fb:f2:b7:e7:17:1f:b5:cb:b1:e6:d7:5e:cd:35:70: c7:3d:3e:97:b0:d9:d3:00:10:1a:80:d1:8a:82:43: a8:34:ab:4c:31:29:6b:9e:95:ae:70:da:2c:d4:d0: 2e:f0:8a:47:27:5d:a5:5b:cb:fb:d3:3e:7f:c0:83: 5a:c6:51:55:e1:b5:26:13:11:35:fc:ad:5d:a4:17: 80:ab:fe:e2:69:bd:9f:74:9b:b6:2b:61:3b:10:8c: e2:dd:53:42:93:17:56:cf:0c:ba:e3:39:c1:2a:aa: 5b:42:dc:16:81:bd:1f:fb:d3:f3:5c:b1:b7:09:69: 04:2f:35:35:ae:19:b4:d3:5f:74:de:6e:01:57:c2: b8:10:6c:56:6d:7b:ab:55:7a:9d:e0:de:fb:45:07: bc:ab:ea:2c:e7:49:3a:e8:8c:c0:e1:02:f9:bc:fd: 64:88:0c:11:50:64:a3:2b:56:ec:de:d1:da:1c:5b: 19:18:62:70:15:84:37:02:34:26:ae:ff:25:19:07: cb:b3:0a:15:9a:5d:c4:da:2a:da:19:2f:db:a0:27: 2a:49:57:93:17:30:04:a8:e0:96:88:3f:a3:c9:00: 06:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3C:F1:CC:AB:ED:B3:8B:F0:FE:C7:14:E2:C3:3F:6A:1B:44:AD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e45a06e-df6a-32e6-9c21-72a92aba7a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:76:d3:9e:88:94:68:89:bc:40:47:76:3b:42:fb:6d:c0: 70:68:34:6a:63:dd:ed:80:6a:1b:62:91:cc:43:94:71:70:2c: b1:9b:40:44:be:b6:a5:3b:f4:e3:38:6b:0f:11:fb:ef:bd:f3: 26:1c:ec:40:04:d2:be:7b:4e:97:76:27:7e:b0:a1:56:49:c2: 39:39:67:3e:61:49:66:08:77:62:f3:bb:5f:03:66:cb:22:22: 44:a3:18:91:4e:8b:1f:9c:28:3b:3f:a0:59:01:cb:ea:79:93: 4d:67:6d:5a:3c:ae:db:52:0b:54:bc:02:09:e8:03:8c:05:5f: dd:bb:5f:de:01:dc:02:79:1c:f8:a6:a0:7b:16:06:70:eb:28: d9:cd:52:e3:3b:20:dc:e1:37:41:49:5d:7e:8d:74:11:8b:b9: 81:a5:fb:35:cb:76:6a:84:5a:f9:52:15:50:6c:b5:5e:e2:0b: 96:63:00:f6:55:f5:f0:f7:c4:de:78:88:87:3d:8c:ad:21:c8: d1:1f:f4:7f:b1:11:c4:77:4d:7d:c5:f0:f7:1e:4d:70:b8:a0: d3:23:81:40:3f:a8:98:bc:7f:66:dd:04:92:46:aa:fb:1f:8b: 88:52:a5:7b:a6:27:14:c5:85:76:83:b9:3e:4d:e3:a6:a0:17: db:9b:a3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMdyFEdJMqrnAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzJkMjI5MzMtYjJjNC00MzFkLWEyNmYtYjEyZmM0YzRkNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFvJy1LVuuFDiDOE5mYfZfKYX87NxwcH5nmN mpb78rfnFx+1y7Hm117NNXDHPT6XsNnTABAagNGKgkOoNKtMMSlrnpWucNos1NAu 8IpHJ12lW8v70z5/wINaxlFV4bUmExE1/K1dpBeAq/7iab2fdJu2K2E7EIzi3VNC kxdWzwy64znBKqpbQtwWgb0f+9PzXLG3CWkELzU1rhm001903m4BV8K4EGxWbXur VXqd4N77RQe8q+os50k66IzA4QL5vP1kiAwRUGSjK1bs3tHaHFsZGGJwFYQ3AjQm rv8lGQfLswoVml3E2iraGS/boCcqSVeTFzAEqOCWiD+jyQAGgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF488cyr7bOL8P7HFOLDP2obRK3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWU0NWEwNmUtZGY2YS0z MmU2LTljMjEtNzJhOTJhYmE3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTfdtOeiJRoibxAR3Y7QvttwHBoNGpj3e2AahtikcxDlHFwLLGbQES+ tqU79OM4aw8R+++98yYc7EAE0r57Tpd2J36woVZJwjk5Zz5hSWYId2Lzu18DZssi IkSjGJFOix+cKDs/oFkBy+p5k01nbVo8rttSC1S8AgnoA4wFX927X94B3AJ5HPim oHsWBnDrKNnNUuM7INzhN0FJXX6NdBGLuYGl+zXLdmqEWvlSFVBstV7iC5ZjAPZV 9fD3xN54iIc9jK0hyNEf9H+xEcR3TX3F8PceTXC4oNMjgUA/qJi8f2bdBJJGqvsf i4hSpXumJxTFhXaDuT5N46agF9ubo00= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:04 2025 by rpki-client