$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa File: 808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa (raw, json) Hash identifier: zmEyrzLvtxBNHRFo0dpD3ARz48dAfLQZv5PEuJ+hVkA= Subject key identifier: 1B:8C:EB:83:84:58:66:36:50:6F:00:41:38:B0:EB:A9:1C:5D:59:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D6185E2C9A0B8A4BDF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.139.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d6:18:5e:2c:9a:0b:8a:4b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e0e98a07-98fd-46dd-8ba3-e26f67e54b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:ea:eb:40:16:57:00:48:14:2f:4a:2f:11: 9d:a2:89:ed:ac:21:12:ba:4a:b0:3a:74:85:50:b8: 2b:e2:2e:08:2d:da:85:70:8f:85:6c:7d:a2:ff:27: 22:b3:64:37:ac:a1:58:03:05:28:b7:a2:27:0c:22: e0:0b:4d:73:2b:5c:5e:9c:f7:22:c3:77:59:03:de: f8:4a:6e:11:8d:4f:ed:e3:13:72:61:5f:21:4c:bb: 8d:c8:87:de:43:b7:77:5a:d7:03:51:1b:ca:6f:48: fb:c8:9c:cc:27:3d:b9:fc:ce:3a:9f:0c:76:3b:f0: cb:bf:48:b9:a8:47:ee:10:c6:a5:eb:fc:a3:87:27: 3d:a7:29:2d:e7:b4:32:92:cc:28:02:3f:b8:b0:5a: 72:f4:35:fd:d9:65:fe:8c:1b:45:ff:a1:d8:ba:c4: 70:95:99:0b:9c:00:c0:60:74:61:e0:39:6a:85:5b: 85:56:ca:f3:08:ee:b7:fc:41:43:97:c1:24:06:64: 27:41:70:d9:2c:c2:a1:de:cf:5f:f2:3e:6c:c9:48: d3:25:32:4b:84:eb:7b:29:e6:3a:05:13:f7:d5:83: c8:82:ab:c5:3a:ef:d3:19:35:80:28:ac:46:63:9e: 8e:59:d3:5d:48:72:8c:50:d9:e4:41:b9:9a:01:bb: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8C:EB:83:84:58:66:36:50:6F:00:41:38:B0:EB:A9:1C:5D:59:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/808abbc6-a1a5-3db7-96f1-3b6aaa9d2f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:02:e5:1a:b3:46:a0:37:08:c9:b3:91:37:8c:b6:8f:60:35: 88:d1:fd:40:54:ec:4c:39:11:dd:7c:5a:30:12:c8:68:de:bf: 1c:db:23:52:98:13:76:7e:8c:d6:7d:f8:ab:21:7d:1e:ac:31: 71:58:7b:5d:2e:6d:d8:77:18:d5:41:7f:3c:fd:50:b7:66:34: 15:53:65:48:70:8e:00:7a:e1:33:8f:a9:e2:d2:51:61:f4:02: c7:16:6d:82:b4:ab:af:65:3a:4c:e2:bb:d1:80:36:10:d6:1e: 52:d4:04:9b:f1:c4:e5:bd:98:3d:48:63:44:04:c2:a1:09:41: b1:d5:69:3b:44:cb:78:ed:fe:22:c8:37:49:b4:eb:a4:0e:b5: a6:19:98:2e:15:0b:96:f6:26:e2:13:e1:e6:64:8c:51:c7:83: fe:40:92:1f:40:ce:dd:86:f0:1d:62:9f:ed:39:f8:2a:b7:ef: ee:53:b9:df:62:07:c7:36:6d:d4:62:02:ce:d8:74:9b:0d:b5: e3:40:ce:85:45:9a:12:f6:a5:37:87:da:d9:56:41:9c:8c:7f: fc:df:86:1e:76:af:26:16:c2:e4:c0:34:69:c9:5a:ce:9e:70: d2:4a:82:e9:ef:8f:48:69:3b:da:c6:0e:74:5d:98:93:f3:58: 64:0b:b7:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNYYXiyaC4pL3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTBlOThhMDctOThmZC00NmRkLThiYTMtZTI2ZjY3ZTU0YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpzq60AWVwBIFC9KLxGdoontrCESukqwOnSF ULgr4i4ILdqFcI+FbH2i/ycis2Q3rKFYAwUot6InDCLgC01zK1xenPciw3dZA974 Sm4RjU/t4xNyYV8hTLuNyIfeQ7d3WtcDURvKb0j7yJzMJz25/M46nwx2O/DLv0i5 qEfuEMal6/yjhyc9pykt57QykswoAj+4sFpy9DX92WX+jBtF/6HYusRwlZkLnADA YHRh4DlqhVuFVsrzCO63/EFDl8EkBmQnQXDZLMKh3s9f8j5syUjTJTJLhOt7KeY6 BRP31YPIgqvFOu/TGTWAKKxGY56OWdNdSHKMUNnkQbmaAbu29QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuM64OEWGY2UG8AQTiw66kcXVnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODA4YWJiYzYtYTFhNS0z ZGI3LTk2ZjEtM2I2YWFhOWQyZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIouwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkC5RqzRqA3CMmzkTeMto9gNYjR/UBU7Ew5Ed18WjASyGjevxzbI1KY E3Z+jNZ9+KshfR6sMXFYe10ubdh3GNVBfzz9ULdmNBVTZUhwjgB64TOPqeLSUWH0 AscWbYK0q69lOkziu9GANhDWHlLUBJvxxOW9mD1IY0QEwqEJQbHVaTtEy3jt/iLI N0m066QOtaYZmC4VC5b2JuIT4eZkjFHHg/5Akh9Azt2G8B1in+05+Cq37+5Tud9i B8c2bdRiAs7YdJsNteNAzoVFmhL2pTeH2tlWQZyMf/zfhh52ryYWwuTANGnJWs6e cNJKgunvj0hpO9rGDnRdmJPzWGQLt9Q= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:13 2025 by rpki-client