$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84ef1eb5-ea86-37a5-b5bf-7ce241a75153.roa File: 84ef1eb5-ea86-37a5-b5bf-7ce241a75153.roa (raw, json) Hash identifier: BzqSlMCF+BvuzRGv2/QpNrLuYXUSi+vUK8sl6HOmkzk= Subject key identifier: 43:74:E6:29:3A:D5:B7:BF:5F:C7:B1:CF:0D:B0:DC:36:1B:39:06:42 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F30ADCCEA04EAA6E1DC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84ef1eb5-ea86-37a5-b5bf-7ce241a75153.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.147.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f3:0a:dc:ce:a0:4e:aa:6e:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f6a5025f-449a-4158-8718-6ed1459ab6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:91:04:2d:47:20:42:8e:f0:4a:21:1e:8b: 7b:be:cb:5d:4c:2d:4e:dc:e6:b4:9e:9a:c6:14:33: 3a:9c:6b:7a:26:71:41:4f:67:b6:06:99:92:09:0f: ae:f0:9c:58:f1:99:13:b7:db:c1:4c:2a:cd:48:6d: 72:d3:61:d1:f8:96:6e:23:24:59:e9:e8:57:98:3a: 99:bd:32:1b:e9:67:f5:37:23:03:53:9a:af:76:dd: 12:9e:e9:a7:8e:08:bd:b7:03:59:03:98:f2:90:09: c1:fd:95:90:f0:51:22:2c:43:8a:18:ce:0f:a7:73: 88:c5:65:ad:3d:0b:24:ad:73:25:4a:e4:84:70:c8: 9b:31:a8:14:1b:e2:69:9b:4d:0c:d2:a5:97:8e:c1: f2:70:1a:2b:7e:90:31:17:01:69:67:2d:f0:95:d6: fe:71:d4:0a:6d:38:99:34:22:21:10:b0:72:b1:65: 23:12:47:9f:3e:f8:f0:25:30:3d:64:20:69:07:0e: 9e:e0:ee:87:06:f9:be:aa:17:2d:15:d5:a8:e1:7e: 5b:5e:4c:04:65:8b:a8:10:06:09:ed:d7:c3:71:ad: 12:c5:5e:41:a4:de:b8:a3:d7:15:52:3d:db:84:d4: c1:c5:04:99:38:32:e2:55:66:22:a3:20:41:bb:83: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:74:E6:29:3A:D5:B7:BF:5F:C7:B1:CF:0D:B0:DC:36:1B:39:06:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84ef1eb5-ea86-37a5-b5bf-7ce241a75153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ce:eb:eb:6c:76:7f:10:30:5c:49:f1:0c:59:af:c6:65:d5: 83:d9:12:25:fd:8d:85:f4:6f:e4:13:1f:a7:c2:11:16:e4:a9: f8:32:62:1e:21:d0:04:7e:0e:14:8a:00:90:32:3b:c7:db:38: ae:e8:99:4e:3a:16:01:1e:0d:a7:88:a2:7a:92:10:dc:85:57: 32:ad:10:62:df:c4:f2:60:a2:ac:3a:30:eb:c7:6b:64:d0:52: f2:19:0a:c0:2b:6b:5f:e6:da:62:1f:57:c1:df:de:43:59:07: c7:a4:c2:ba:99:24:bd:c5:a2:ed:85:fa:d9:12:c2:af:c6:b0: 5a:7d:fa:68:46:dd:9a:4e:00:97:37:8c:c7:c5:8a:c0:2e:23: d7:5e:2c:96:c6:5b:7b:50:ec:0b:ca:aa:a6:c2:b7:2e:3b:90: f8:3d:77:dd:9a:ad:39:bc:44:4c:40:7c:8f:77:46:cc:0a:bc: 47:e0:bf:e7:49:51:be:94:42:17:71:09:4c:ce:e6:f6:5d:d4: b3:60:7b:41:ed:bc:6d:52:c8:54:46:10:66:67:31:d7:e6:cc: c9:d2:5d:90:7f:d0:b4:6c:a9:59:30:b4:d9:e3:0f:bb:56:ec: 04:51:33:44:4f:f2:fd:82:5a:c8:00:0c:94:fd:c6:d5:be:88: 66:1f:fc:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPMK3M6gTqpuHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjZhNTAyNWYtNDQ5YS00MTU4LTg3MTgtNmVkMTQ1OWFiNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6iRBC1HIEKO8EohHot7vstdTC1O3Oa0nprG FDM6nGt6JnFBT2e2BpmSCQ+u8JxY8ZkTt9vBTCrNSG1y02HR+JZuIyRZ6ehXmDqZ vTIb6Wf1NyMDU5qvdt0Snumnjgi9twNZA5jykAnB/ZWQ8FEiLEOKGM4Pp3OIxWWt PQskrXMlSuSEcMibMagUG+Jpm00M0qWXjsHycBorfpAxFwFpZy3wldb+cdQKbTiZ NCIhELBysWUjEkefPvjwJTA9ZCBpBw6e4O6HBvm+qhctFdWo4X5bXkwEZYuoEAYJ 7dfDca0SxV5BpN64o9cVUj3bhNTBxQSZODLiVWYioyBBu4PtCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN05ik61be/X8exzw2w3DYbOQZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODRlZjFlYjUtZWE4Ni0z N2E1LWI1YmYtN2NlMjQxYTc1MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXO6+tsdn8QMFxJ8QxZr8Zl1YPZEiX9jYX0b+QTH6fCERbkqfgyYh4h 0AR+DhSKAJAyO8fbOK7omU46FgEeDaeIonqSENyFVzKtEGLfxPJgoqw6MOvHa2TQ UvIZCsAra1/m2mIfV8Hf3kNZB8ekwrqZJL3Fou2F+tkSwq/GsFp9+mhG3ZpOAJc3 jMfFisAuI9deLJbGW3tQ7AvKqqbCty47kPg9d92arTm8RExAfI93RswKvEfgv+dJ Ub6UQhdxCUzO5vZd1LNge0HtvG1SyFRGEGZnMdfmzMnSXZB/0LRsqVkwtNnjD7tW 7ARRM0RP8v2CWsgADJT9xtW+iGYf/MM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:37 2025 by rpki-client