$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa File: 633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa (raw, json) Hash identifier: 4nlvl/s7hUQjA7AIfXqE4rmh6lH8uLY2wocqBN1nlBo= Subject key identifier: 9C:BD:20:F6:8B:FC:EF:FA:74:E2:DD:12:C7:91:24:29:A2:5C:12:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB5F7C2B2B0B58A0A66400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.119.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:7c:2b:2b:0b:58:a0:a6:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c288473e-baf4-4322-bd79-8672ceed02ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:8d:3a:da:cd:6e:08:a0:bf:9b:ed:8c:4e: 0e:63:33:33:3c:94:d1:5f:3a:cf:cc:6c:fc:55:fe: fe:51:ed:91:c0:80:d3:00:ab:64:53:05:9b:11:fb: be:56:ce:de:6e:c9:9a:29:a0:08:cc:53:d8:ce:af: 6b:9a:d8:bd:3e:38:3b:29:85:25:34:6b:19:e3:67: 46:22:65:3c:b9:2a:1b:30:fd:91:73:11:70:68:4b: 38:e4:40:c5:df:e8:2e:a6:5d:ad:6a:30:75:98:1c: 20:df:a6:2d:c3:2d:ac:fe:ee:bc:1d:09:73:25:f8: 6e:9c:8c:ca:8e:9c:69:bd:10:fc:44:87:79:c7:a3: bc:dd:1d:85:a1:58:ba:c6:1e:4e:dd:38:9d:bb:6c: 3a:da:88:32:14:fb:f9:cf:fd:3d:ab:ca:77:07:67: ac:39:c2:e0:f5:65:6d:92:32:2e:45:3e:30:06:36: dc:68:4f:0e:05:49:ca:a0:61:b3:66:90:6a:25:3c: 83:f9:28:49:1e:23:8e:ad:51:c1:0d:85:e4:a1:d6: 03:40:cc:dd:b3:18:5f:bf:a8:df:86:b8:21:a4:99: 5d:ec:1a:db:b9:90:85:ea:15:01:7f:4f:eb:d2:da: c0:9c:52:3e:42:22:f3:47:92:a5:43:17:53:91:17: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BD:20:F6:8B:FC:EF:FA:74:E2:DD:12:C7:91:24:29:A2:5C:12:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/633d7c5c-10a1-35f5-982a-7c5e4c9ec07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c1:cf:4a:2f:0e:c4:1c:b0:05:a9:36:6f:e6:b8:43:3b:45: c7:d4:09:0b:a9:a9:40:f1:cf:ce:d5:ce:98:42:50:9b:af:75: e3:4a:c8:1c:c7:9b:2e:c4:5c:95:3c:63:3b:ba:fb:ae:69:d2: e1:df:1c:80:a5:6a:dc:60:29:9f:90:29:cb:5a:4b:2d:c1:1b: 9d:0a:63:2c:52:6e:a8:d6:58:94:c8:a9:30:6d:61:9b:0d:8a: e4:17:71:6e:b8:38:e1:64:b5:de:0a:b8:5b:ed:ab:3b:a8:f0: bb:b4:3d:f3:ee:7e:24:93:08:dc:8d:78:e5:97:00:91:45:57: 3a:6f:b3:c8:0b:5f:8b:24:44:11:b0:fa:ba:ca:f5:6b:33:6f: 04:8b:6d:af:01:da:b8:1e:21:de:11:d2:51:04:4a:da:0d:01: 37:2d:5e:ce:92:4f:53:6f:e7:4f:e2:fa:89:aa:a2:29:d8:9b: cd:38:bf:2e:cb:b8:b3:dc:a8:31:e1:0b:35:b9:c8:ea:c5:85: 57:8e:24:84:45:b5:1c:a7:b3:b3:fb:5c:32:83:ed:d0:1a:a3: 17:44:fe:40:97:ff:a5:97:17:1b:b7:46:9c:73:d0:f1:83:d1: 61:14:c7:3a:45:6c:d4:4c:ac:61:e5:a9:d1:f9:5c:bc:c0:bf: 89:47:72:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku198KysLWKCmZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzI4ODQ3M2UtYmFmNC00MzIyLWJkNzktODY3MmNlZWQwMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEiNOtrNbgigv5vtjE4OYzMzPJTRXzrPzGz8 Vf7+Ue2RwIDTAKtkUwWbEfu+Vs7ebsmaKaAIzFPYzq9rmti9Pjg7KYUlNGsZ42dG ImU8uSobMP2RcxFwaEs45EDF3+gupl2tajB1mBwg36Ytwy2s/u68HQlzJfhunIzK jpxpvRD8RId5x6O83R2FoVi6xh5O3Tidu2w62ogyFPv5z/09q8p3B2esOcLg9WVt kjIuRT4wBjbcaE8OBUnKoGGzZpBqJTyD+ShJHiOOrVHBDYXkodYDQMzdsxhfv6jf hrghpJld7BrbuZCF6hUBf0/r0trAnFI+QiLzR5KlQxdTkRfLMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy9IPaL/O/6dOLdEseRJCmiXBJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjMzZDdjNWMtMTBhMS0z NWY1LTk4MmEtN2M1ZTRjOWVjMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIndQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALBz0ovDsQcsAWpNm/muEM7RcfUCQupqUDxz87VzphCUJuvdeNKyBzH my7EXJU8Yzu6+65p0uHfHIClatxgKZ+QKctaSy3BG50KYyxSbqjWWJTIqTBtYZsN iuQXcW64OOFktd4KuFvtqzuo8Lu0PfPufiSTCNyNeOWXAJFFVzpvs8gLX4skRBGw +rrK9WszbwSLba8B2rgeId4R0lEEStoNATctXs6ST1Nv50/i+omqoinYm804vy7L uLPcqDHhCzW5yOrFhVeOJIRFtRyns7P7XDKD7dAaoxdE/kCX/6WXFxu3Rpxz0PGD 0WEUxzpFbNRMrGHlqdH5XLzAv4lHcnU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:21 2025 by rpki-client