$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/845cc24f-dd0f-3859-9b7b-fc2808a86061.roa File: 845cc24f-dd0f-3859-9b7b-fc2808a86061.roa (raw, json) Hash identifier: JaQ6ec2tIL3ecVoX+zaPHZSTZEihiWv2hmCGSiPeIao= Subject key identifier: 38:8C:0C:1B:94:15:0F:09:37:62:06:45:48:DF:35:DA:37:7A:B0:92 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785099AF57DB31D7D1B0A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/845cc24f-dd0f-3859-9b7b-fc2808a86061.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.76.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:09:9a:f5:7d:b3:1d:7d:1b:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b9979b6c-f6cf-43cb-bd76-1f5955e0c59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:f5:3b:d2:9a:3c:b2:6c:a6:42:3f:19:ab: ad:9a:6b:06:ec:ec:9b:d6:30:a8:2e:56:f9:4a:a0: e1:5c:fb:00:75:21:22:64:5f:0d:25:46:57:ad:17: 6d:10:b9:08:1e:e4:c7:42:98:76:dc:e2:0a:ee:49: 24:df:fa:4c:69:6b:c0:d2:44:02:62:db:00:ae:c8: 04:a0:21:4a:81:41:52:2e:7b:a6:83:7d:94:3e:28: e4:66:a2:38:72:fc:0f:ad:bf:71:d6:a3:1f:ea:34: df:b3:22:95:4c:fb:8e:0e:b0:b1:6f:4e:d3:ca:6e: 7e:8c:e9:d2:9a:3f:10:dd:ac:c7:bc:a0:c1:23:e9: 26:08:2a:12:44:25:3d:b4:99:6e:b0:b7:56:ed:96: 7a:bb:ae:f3:db:9f:c5:0b:a2:bd:53:d0:b2:db:6d: de:e0:c6:18:09:7e:db:27:02:ca:bd:ae:22:81:55: 2f:a1:2b:ca:41:f1:71:f9:c8:90:78:e3:50:22:b1: e7:1f:08:ca:0a:64:89:1f:ce:3b:bc:14:11:5a:6e: 0f:b0:f8:7a:ce:f8:27:38:c4:8b:57:ae:1f:26:3a: d6:ad:dd:9b:af:df:e2:55:1c:2d:7d:55:90:ad:a4: 72:9b:c5:12:96:36:05:a2:05:9d:e2:f9:a9:56:b2: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8C:0C:1B:94:15:0F:09:37:62:06:45:48:DF:35:DA:37:7A:B0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/845cc24f-dd0f-3859-9b7b-fc2808a86061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:12:f8:0b:30:58:30:48:4b:95:40:05:0f:77:10:a6:5a:2e: 58:5a:4f:51:6c:e1:8d:42:f9:00:c6:9e:3f:ab:b4:ff:fa:b6: 5c:51:4f:dc:23:10:e8:d9:6a:11:66:06:db:80:ce:ab:66:07: cc:c3:15:c6:9e:ce:22:28:04:8f:9b:82:ac:a6:5c:28:20:86: 8e:9c:b4:28:29:31:07:e6:f3:74:a0:b1:65:0b:43:43:62:1f: 9e:65:9a:94:03:89:a8:92:db:74:bd:9c:fd:01:8c:d1:da:b5: 6b:b2:34:43:06:95:e0:c3:a1:4d:99:78:be:00:3e:a4:3d:05: 59:2d:59:5b:c8:7d:2b:f5:93:82:bd:86:e6:7d:b0:3f:fd:0a: 8b:cd:15:35:e9:ec:c4:6e:b4:38:c4:87:28:49:62:3f:40:3a: 2d:e0:2d:5d:f0:83:a0:28:9c:bc:0e:ce:53:b9:df:2b:df:6e: b7:ba:14:45:f4:08:34:17:58:88:ef:30:0f:1a:8a:76:a5:4e: b7:d6:88:e2:f9:be:61:ba:9d:be:1b:d2:55:67:e8:5c:fe:a1: e3:91:26:23:5e:f1:d7:0e:cf:4f:0c:40:41:7d:5a:1d:e7:71: 46:6b:25:08:f4:04:c2:52:59:fe:df:2a:29:88:fa:7a:d0:e7: 24:de:61:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQma9X2zHX0bCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Yjk5NzliNmMtZjZjZi00M2NiLWJkNzYtMWY1OTU1ZTBjNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriP1O9KaPLJspkI/GautmmsG7Oyb1jCoLlb5 SqDhXPsAdSEiZF8NJUZXrRdtELkIHuTHQph23OIK7kkk3/pMaWvA0kQCYtsArsgE oCFKgUFSLnumg32UPijkZqI4cvwPrb9x1qMf6jTfsyKVTPuODrCxb07Tym5+jOnS mj8Q3azHvKDBI+kmCCoSRCU9tJlusLdW7ZZ6u67z25/FC6K9U9Cy223e4MYYCX7b JwLKva4igVUvoSvKQfFx+ciQeONQIrHnHwjKCmSJH847vBQRWm4PsPh6zvgnOMSL V64fJjrWrd2br9/iVRwtfVWQraRym8USljYFogWd4vmpVrLanQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiMDBuUFQ8JN2IGRUjfNdo3erCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODQ1Y2MyNGYtZGQwZi0z ODU5LTliN2ItZmMyODA4YTg2MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoS+AswWDBIS5VABQ93EKZaLlhaT1Fs4Y1C+QDGnj+rtP/6tlxRT9wj EOjZahFmBtuAzqtmB8zDFcaeziIoBI+bgqymXCggho6ctCgpMQfm83SgsWULQ0Ni H55lmpQDiaiS23S9nP0BjNHatWuyNEMGleDDoU2ZeL4APqQ9BVktWVvIfSv1k4K9 huZ9sD/9CovNFTXp7MRutDjEhyhJYj9AOi3gLV3wg6AonLwOzlO53yvfbre6FEX0 CDQXWIjvMA8ainalTrfWiOL5vmG6nb4b0lVn6Fz+oeORJiNe8dcOz08MQEF9Wh3n cUZrJQj0BMJSWf7fKimI+nrQ5yTeYS4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:48 2025 by rpki-client