$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa File: 86bed144-128f-3b1b-8d74-51dbbfc5c638.roa (raw, json) Hash identifier: Cwb86g4ZrYpxZvF9gELmG2lf6NoAn59NNeZ6mEPQuyQ= Subject key identifier: D8:8D:E6:BE:CE:79:45:68:10:BB:19:C4:04:CA:A0:6C:E2:27:BC:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78505A399EC91EC9BB5E380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.134.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:05:a3:99:ec:91:ec:9b:b5:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b6b60c98-30d9-4d3e-9105-9688b371f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:81:d7:26:05:47:10:61:fe:55:30:bf:b5: 96:22:12:4d:db:90:04:e2:29:86:9c:ae:77:49:ec: 84:43:90:9c:b2:cc:7d:c8:b3:2f:ce:90:2d:fa:ca: 4b:bc:74:88:b9:5e:2c:f4:66:da:50:5e:c2:e0:61: 69:1e:71:17:76:14:2a:d4:82:98:57:a3:84:62:49: bb:70:9b:14:21:26:19:40:63:c0:02:7c:22:d4:58: 24:aa:47:91:dc:ca:e7:ec:4d:de:f5:80:cf:22:d5: e7:8d:53:bd:1a:5a:ae:87:17:97:3b:77:a7:05:a3: ec:a7:49:d0:bf:c4:26:7f:65:4f:51:ae:e5:bd:f0: 75:8e:dd:81:37:d6:aa:39:99:f7:4e:a9:cc:92:43: 2a:b1:75:8a:a2:20:7a:c9:71:1c:62:0e:d1:45:ab: 71:c2:2b:cd:f7:a9:85:5f:be:6d:27:d2:a8:30:e4: 15:88:4d:62:ea:02:2e:d5:4f:32:8c:9d:48:f0:82: d2:81:54:06:dc:2f:31:9c:e4:f8:41:70:ec:7d:78: 52:3a:72:49:bd:12:ef:03:e4:ce:37:af:97:c8:8d: 2f:94:4c:8b:3c:58:a5:c9:c5:cb:ac:48:85:f8:1c: a5:87:e0:36:0e:93:df:56:bd:90:b0:55:89:a5:18: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:E6:BE:CE:79:45:68:10:BB:19:C4:04:CA:A0:6C:E2:27:BC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:46:9d:61:77:3a:dc:be:79:7c:3e:99:65:ee:9c:76:b2:7b: 1a:59:9e:fb:ae:3c:0e:57:dd:71:9d:6d:d1:d8:00:d1:d1:37: 9d:13:72:5e:50:a8:36:dd:b6:f2:08:ad:fd:83:a2:b6:5e:2f: bb:44:a6:dc:73:a1:bf:19:b9:e8:b1:a8:52:c5:13:97:1f:68: f2:12:ba:bd:fd:5b:08:68:a0:60:a8:db:fe:9c:5c:bd:26:48: 53:76:b1:47:f3:9c:a2:5c:2d:5d:57:f9:1b:7b:8d:22:61:67: ed:99:ce:c2:eb:d1:3a:97:c8:93:d4:75:35:05:4e:1f:f1:f3: f2:0e:78:29:94:52:4a:a3:2d:d3:e7:8a:5f:da:17:1a:ce:0f: 7f:71:57:fc:e7:95:28:e3:28:01:78:e4:3c:ba:aa:04:34:c0: c0:18:56:2d:e2:6d:44:db:44:f1:6c:f5:b7:15:98:4a:1a:c1: 69:12:8a:5e:ed:ae:b8:54:b6:cb:b5:9a:d5:0f:05:d5:1c:12: 28:05:8b:fc:86:82:11:d5:07:41:c4:09:f8:60:03:53:9d:4b: f9:6b:b2:3c:82:28:44:bc:c5:30:eb:70:4c:3e:39:0b:07:0a: a4:0e:69:02:24:dc:b6:8a:76:56:20:9b:9f:33:7e:06:42:63: 21:e0:1c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQWjmeyR7Ju144AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjZiNjBjOTgtMzBkOS00ZDNlLTkxMDUtOTY4OGIzNzFmMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyiB1yYFRxBh/lUwv7WWIhJN25AE4imGnK53 SeyEQ5Ccssx9yLMvzpAt+spLvHSIuV4s9GbaUF7C4GFpHnEXdhQq1IKYV6OEYkm7 cJsUISYZQGPAAnwi1FgkqkeR3Mrn7E3e9YDPItXnjVO9GlquhxeXO3enBaPsp0nQ v8Qmf2VPUa7lvfB1jt2BN9aqOZn3TqnMkkMqsXWKoiB6yXEcYg7RRatxwivN96mF X75tJ9KoMOQViE1i6gIu1U8yjJ1I8ILSgVQG3C8xnOT4QXDsfXhSOnJJvRLvA+TO N6+XyI0vlEyLPFilycXLrEiF+Bylh+A2DpPfVr2QsFWJpRiGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiN5r7OeUVoELsZxATKoGziJ7yvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZiZWQxNDQtMTI4Zi0z YjFiLThkNzQtNTFkYmJmYzVjNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxGnWF3Oty+eXw+mWXunHayexpZnvuuPA5X3XGdbdHYANHRN50Tcl5Q qDbdtvIIrf2DorZeL7tEptxzob8ZueixqFLFE5cfaPISur39WwhooGCo2/6cXL0m SFN2sUfznKJcLV1X+Rt7jSJhZ+2ZzsLr0TqXyJPUdTUFTh/x8/IOeCmUUkqjLdPn il/aFxrOD39xV/znlSjjKAF45Dy6qgQ0wMAYVi3ibUTbRPFs9bcVmEoawWkSil7t rrhUtsu1mtUPBdUcEigFi/yGghHVB0HECfhgA1OdS/lrsjyCKES8xTDrcEw+OQsH CqQOaQIk3LaKdlYgm58zfgZCYyHgHI0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:53 2025 by rpki-client