$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66553471-c756-387e-aba1-c9c674c9468a.roa File: 66553471-c756-387e-aba1-c9c674c9468a.roa (raw, json) Hash identifier: Ws2qJb2XT87qxbcr68/4RvCZfnW68lgEuJqItzywok8= Subject key identifier: B2:2F:4D:C6:DA:E6:E2:B0:87:A6:80:10:60:0B:59:DC:FD:F7:EA:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E7125C73D0E12967DD40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66553471-c756-387e-aba1-c9c674c9468a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.126.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e7:12:5c:73:d0:e1:29:67:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a42b877b-e544-421b-b06d-42ee51d897a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:38:02:7a:09:c8:f5:16:a9:e9:32:ef:10: 2f:8a:db:fa:54:43:e3:ab:de:3f:3f:fb:4d:4d:3a: d9:6f:86:e2:ac:b8:f6:79:85:9d:79:f0:c2:7c:83: 13:74:19:9e:b3:d0:ff:a2:e3:e8:ee:23:53:f2:d9: 95:18:45:5e:20:d3:e4:69:f0:34:e7:00:ba:f8:85: 6e:03:e3:b1:a6:b6:84:f8:a8:80:3c:db:8f:d0:4e: 9e:36:de:46:60:6e:31:a3:27:a6:c1:69:ff:35:96: 75:0e:58:ca:d4:16:0f:d7:43:b3:20:b2:66:2b:5c: a6:e0:53:e9:99:5d:66:e1:03:21:08:91:16:c0:5a: 27:5f:e3:ba:5c:38:36:8c:10:a5:9f:e1:94:f2:e8: f1:3f:03:db:38:53:c3:63:d5:2b:40:1d:d1:17:79: a2:cb:af:b6:26:7b:01:7d:6d:cb:61:fe:c6:5a:6a: 7c:47:a8:85:e8:a7:4e:50:c9:fc:5a:49:59:c3:23: b1:20:b9:0c:4d:ae:0f:c5:9e:d9:0f:23:ee:57:37: 93:53:48:42:18:32:ab:b7:8f:41:ee:75:a5:fd:83: bd:c8:30:63:be:ad:7d:16:ee:58:dc:cf:bc:9c:68: f2:a3:de:23:59:1d:b1:ec:aa:1b:f1:29:67:f1:31: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2F:4D:C6:DA:E6:E2:B0:87:A6:80:10:60:0B:59:DC:FD:F7:EA:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/66553471-c756-387e-aba1-c9c674c9468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.126.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d4:d4:66:53:9c:41:ec:2e:a1:f5:22:c4:75:33:80:82:c1: 97:60:9f:1d:13:12:96:db:e2:82:a1:d3:7f:38:9f:2f:bc:84: 79:cc:39:53:b8:d8:27:c8:f9:87:ca:44:04:af:0a:f8:81:cf: 8f:20:59:73:f7:1b:f2:40:52:25:2e:dc:ac:62:9c:b2:e9:ee: bf:3f:92:13:f3:96:d4:ac:24:ca:9b:15:68:c5:c7:89:62:03: 39:e3:f9:9a:44:10:b1:ed:d1:ed:18:0d:d6:76:2d:4d:93:ef: 0a:65:62:9b:c2:4a:bd:29:f3:0b:9a:94:a2:de:4c:08:a6:e6: fb:a4:6b:23:b5:17:d6:c9:7a:34:30:41:7d:bd:87:28:69:06: 48:a5:69:9a:4a:d1:d3:9c:00:16:12:1e:9c:55:ca:04:82:95: 2d:75:9e:94:f4:1d:55:d1:be:02:24:54:b5:5e:fd:d1:fc:89: e1:8f:08:f3:fe:ce:9a:2d:df:1c:52:75:89:98:34:2c:f9:32: 4c:cb:00:c4:f9:fe:db:cc:a5:5a:b9:20:47:3c:d7:9d:17:df: c3:f2:ae:d4:55:48:79:ea:e3:19:00:e7:4d:2d:b6:56:42:c1: 34:e9:11:e1:ea:f3:da:0c:24:24:ec:62:53:4c:98:07:16:19: 5b:96:4e:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOcSXHPQ4Sln3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTQyYjg3N2ItZTU0NC00MjFiLWIwNmQtNDJlZTUxZDg5N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAA4AnoJyPUWqeky7xAvitv6VEPjq94/P/tN TTrZb4birLj2eYWdefDCfIMTdBmes9D/ouPo7iNT8tmVGEVeINPkafA05wC6+IVu A+OxpraE+KiAPNuP0E6eNt5GYG4xoyemwWn/NZZ1DljK1BYP10OzILJmK1ym4FPp mV1m4QMhCJEWwFonX+O6XDg2jBCln+GU8ujxPwPbOFPDY9UrQB3RF3miy6+2JnsB fW3LYf7GWmp8R6iF6KdOUMn8WklZwyOxILkMTa4PxZ7ZDyPuVzeTU0hCGDKrt49B 7nWl/YO9yDBjvq19Fu5Y3M+8nGjyo94jWR2x7Kob8Sln8THGPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIvTcba5uKwh6aAEGALWdz99+oKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY1NTM0NzEtYzc1Ni0z ODdlLWFiYTEtYzljNjc0Yzk0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXU1GZTnEHsLqH1IsR1M4CCwZdgnx0TEpbb4oKh0384ny+8hHnMOVO4 2CfI+YfKRASvCviBz48gWXP3G/JAUiUu3KxinLLp7r8/khPzltSsJMqbFWjFx4li Aznj+ZpEELHt0e0YDdZ2LU2T7wplYpvCSr0p8wualKLeTAim5vukayO1F9bJejQw QX29hyhpBkilaZpK0dOcABYSHpxVygSClS11npT0HVXRvgIkVLVe/dH8ieGPCPP+ zpot3xxSdYmYNCz5MkzLAMT5/tvMpVq5IEc8150X38PyrtRVSHnq4xkA500ttlZC wTTpEeHq89oMJCTsYlNMmAcWGVuWTh8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:00:33 2025 by rpki-client