$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa File: 6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa (raw, json) Hash identifier: K+WQeNLgLZL37xzXgk9tpPJ3uMQikp4moNKtl3SFWAU= Subject key identifier: 1D:32:E1:3F:2D:17:C3:05:62:13:25:56:74:22:A8:23:35:F9:76:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78533C0F3D3E836F4489800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.86.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:33:c0:f3:d3:e8:36:f4:48:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=28a5366f-5273-47ed-a5f9-9fb825b3d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:03:3b:3f:48:e2:3a:66:8e:2b:32:8f:1c: 94:4b:78:d0:d9:a5:c3:a5:6e:ef:6b:1e:cc:5b:48: a6:ae:1a:df:97:6d:cd:39:62:db:11:a7:99:9d:59: ca:61:ba:db:3e:da:b2:33:34:6a:2e:11:19:de:1f: dd:86:76:67:9c:0c:fd:e4:31:c5:57:e7:cb:20:ee: f3:18:ac:ce:68:2a:c7:c8:f1:c7:a8:cd:86:94:a3: be:09:32:73:a5:ef:cf:fe:32:c1:64:70:07:3c:09: d8:16:2f:39:d9:98:ea:2c:45:d1:8d:64:87:a0:d2: 6d:9a:90:06:5f:b6:31:3e:43:8c:d5:3d:77:03:2b: ec:81:b1:2b:c3:5c:eb:bc:04:aa:56:2b:4f:0a:55: 4d:17:e6:26:f3:88:0d:42:04:6c:bd:a2:04:af:2c: 46:af:51:0b:73:e6:9f:da:79:25:11:e2:dd:57:84: bb:06:d4:ee:bd:62:0c:55:09:67:ed:d8:49:61:d1: 6c:60:f3:cc:fe:20:25:69:cb:2a:e2:c5:21:71:77: 96:00:55:6f:31:6b:70:07:f5:ff:3d:38:99:85:ea: 05:03:2e:9f:99:ef:f0:5f:ad:63:04:af:8b:6e:24: 5d:68:e9:67:23:3e:7b:e5:ec:59:c6:a3:70:00:95: 46:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:E1:3F:2D:17:C3:05:62:13:25:56:74:22:A8:23:35:F9:76:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6eb2aa43-d4cb-3348-bd15-e5e6805fdfdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cd:66:23:74:82:4c:9a:91:2b:4e:28:d6:e6:3b:27:c3:19: 7d:ce:d7:d9:42:8d:ee:dd:02:bf:71:a6:76:f4:db:2b:03:ae: b2:83:b0:45:05:34:a3:75:c5:f2:89:62:5a:28:90:b0:bd:fd: 04:cd:f5:4f:0b:c8:11:63:25:51:95:b7:3d:d5:21:32:fd:10: 55:e0:8e:c4:82:71:95:e5:f9:1b:57:0c:95:17:77:fb:89:91: fb:8b:37:ae:fb:cb:39:11:cd:23:db:e1:91:59:97:f1:e4:1c: e3:31:85:d4:9e:c1:e7:1b:fb:a6:c4:3b:7f:d5:12:f2:3a:5a: 35:a4:5c:25:d0:90:56:3b:66:40:a9:3a:09:e2:c4:23:16:e2: d0:4d:1b:1d:32:b7:b1:a7:1e:4c:47:9d:4d:c3:34:96:36:0d: 30:f6:97:40:9b:9a:2f:f6:49:d5:c9:de:80:0e:5b:9f:9c:d2: 7e:bc:0b:da:f2:0d:78:7c:75:98:1f:f2:41:02:26:92:0f:f1: e8:dd:9c:8c:e0:5d:6c:5e:ae:4e:b0:ac:e2:91:4f:ad:37:e8: 63:7a:7d:23:10:15:8e:33:be:9a:e4:70:9c:63:7d:6d:cc:19: 9c:e7:18:11:9e:8e:02:fd:90:12:e3:e0:43:65:5a:2a:a6:0b: 77:ec:90:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTPA89PoNvRImAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjhhNTM2NmYtNTI3My00N2VkLWE1ZjktOWZiODI1YjNkODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDMDOz9I4jpmjisyjxyUS3jQ2aXDpW7vax7M W0imrhrfl23NOWLbEaeZnVnKYbrbPtqyMzRqLhEZ3h/dhnZnnAz95DHFV+fLIO7z GKzOaCrHyPHHqM2GlKO+CTJzpe/P/jLBZHAHPAnYFi852ZjqLEXRjWSHoNJtmpAG X7YxPkOM1T13AyvsgbErw1zrvASqVitPClVNF+Ym84gNQgRsvaIEryxGr1ELc+af 2nklEeLdV4S7BtTuvWIMVQln7dhJYdFsYPPM/iAlacsq4sUhcXeWAFVvMWtwB/X/ PTiZheoFAy6fme/wX61jBK+LbiRdaOlnIz575exZxqNwAJVGoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0y4T8tF8MFYhMlVnQiqCM1+XZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmViMmFhNDMtZDRjYi0z MzQ4LWJkMTUtZTVlNjgwNWZkZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnNZiN0gkyakStOKNbmOyfDGX3O19lCje7dAr9xpnb02ysDrrKDsEUF NKN1xfKJYlookLC9/QTN9U8LyBFjJVGVtz3VITL9EFXgjsSCcZXl+RtXDJUXd/uJ kfuLN677yzkRzSPb4ZFZl/HkHOMxhdSewecb+6bEO3/VEvI6WjWkXCXQkFY7ZkCp OgnixCMW4tBNGx0yt7GnHkxHnU3DNJY2DTD2l0Cbmi/2SdXJ3oAOW5+c0n68C9ry DXh8dZgf8kECJpIP8ejdnIzgXWxerk6wrOKRT6036GN6fSMQFY4zvprkcJxjfW3M GZznGBGejgL9kBLj4ENlWiqmC3fskHc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:42 2025 by rpki-client