$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa File: 87659ecb-cb7f-3140-a600-f402730776af.roa (raw, json) Hash identifier: znA2Lz0dSHcGVBUj9B+jklE8tbKJ0qY3yZ8WfwNzek8= Subject key identifier: 9D:1B:D7:89:6A:AC:2A:CB:15:8D:81:79:80:6C:70:39:8E:87:72:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB747A88D42CF1B3419200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.108.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:74:7a:88:d4:2c:f1:b3:41:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=02bbfa18-5427-426e-bd63-d54bd2a0fa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:d9:f0:06:a6:6c:61:06:ab:a4:1f:87:a5: 0c:50:0d:33:49:8a:ce:5c:34:9a:3e:1a:a3:34:c8: c8:16:52:44:d9:03:aa:43:cb:98:31:81:ba:e2:28: 5d:e0:a4:b7:59:62:8a:1d:14:1c:d9:74:3c:a0:41: d2:23:ba:7c:c1:fa:85:50:f6:1d:70:fd:67:b5:8b: aa:e8:ce:fe:17:3e:8e:ae:21:88:78:73:75:e9:37: f3:80:b6:f1:e0:ac:fe:60:f2:26:04:8b:05:ea:0b: 63:bd:21:ab:1f:fa:6a:a6:89:00:43:2a:5f:46:2a: 85:fe:11:1b:d1:b1:cc:49:09:bb:42:4d:4d:57:e8: d0:f4:bd:bf:f9:51:d0:b3:5c:f7:19:12:e9:23:63: b6:7e:ed:59:dc:d2:5f:5a:2a:e0:56:fe:d6:59:e8: 28:1e:57:0b:27:36:87:83:1c:4c:31:e4:45:f1:f5: 56:6e:07:4c:32:9b:22:6f:0a:cf:84:8d:cf:32:1e: 0d:1f:bc:69:a0:27:ce:cc:f6:23:ec:c4:91:d7:f0: c8:5d:e3:15:4f:fa:68:0f:7d:be:d7:4b:6b:ee:94: 08:9b:f1:b7:ac:f9:35:e6:f1:36:9b:59:7b:91:c8: f7:39:ee:4d:1e:92:de:f2:a6:df:af:ea:84:c9:1d: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1B:D7:89:6A:AC:2A:CB:15:8D:81:79:80:6C:70:39:8E:87:72:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/87659ecb-cb7f-3140-a600-f402730776af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:63:09:91:dc:87:97:73:76:15:03:49:12:dd:e1:e3:a3:49: bc:69:d6:c4:4f:67:3e:b3:e9:8b:12:01:01:69:ab:f5:fc:0e: 17:79:e4:5a:cb:23:e5:0f:39:7a:03:12:00:ae:9b:d3:56:d7: c2:67:6c:11:80:7b:a5:76:82:50:31:ff:89:2c:0e:21:97:7d: 36:f2:73:64:04:00:b9:b3:67:68:fb:f3:fe:0d:91:a0:96:8e: 52:97:50:81:b1:38:a1:f0:a3:fd:02:0c:da:8e:a8:ba:d6:56: 6a:42:54:a3:2c:c5:7e:1f:fa:f9:b1:24:5d:66:4c:fe:d9:d2: ae:42:a3:81:20:56:39:2d:f0:69:87:cd:d4:df:47:72:5f:b4: 48:14:b8:7c:c8:4d:48:53:6f:ba:45:9f:dc:42:93:fd:8e:07: f7:9d:11:95:0f:31:d4:89:63:a7:70:d8:4b:a1:8d:fe:98:91: bc:43:07:c5:84:1a:81:d9:84:67:fa:55:38:91:cc:d3:59:58: ae:70:32:57:41:7d:9d:18:f1:4c:ac:4f:9d:8e:d8:b8:40:b7: 5b:07:79:8c:80:d1:d2:9a:89:16:e9:44:71:51:82:0e:de:77: 5b:af:bd:a3:48:4d:1a:90:c7:d3:b7:c8:c3:ea:0a:fa:37:fb: 5a:7a:9e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3R6iNQs8bNBkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDJiYmZhMTgtNTQyNy00MjZlLWJkNjMtZDU0YmQyYTBmYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxPZ8AambGEGq6Qfh6UMUA0zSYrOXDSaPhqj NMjIFlJE2QOqQ8uYMYG64ihd4KS3WWKKHRQc2XQ8oEHSI7p8wfqFUPYdcP1ntYuq 6M7+Fz6OriGIeHN16TfzgLbx4Kz+YPImBIsF6gtjvSGrH/pqpokAQypfRiqF/hEb 0bHMSQm7Qk1NV+jQ9L2/+VHQs1z3GRLpI2O2fu1Z3NJfWirgVv7WWegoHlcLJzaH gxxMMeRF8fVWbgdMMpsibwrPhI3PMh4NH7xpoCfOzPYj7MSR1/DIXeMVT/poD32+ 10tr7pQIm/G3rPk15vE2m1l7kcj3Oe5NHpLe8qbfr+qEyR0hJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0b14lqrCrLFY2BeYBscDmOh3IKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODc2NTllY2ItY2I3Zi0z MTQwLWE2MDAtZjQwMjczMDc3NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENjCZHch5dzdhUDSRLd4eOjSbxp1sRPZz6z6YsSAQFpq/X8Dhd55FrL I+UPOXoDEgCum9NW18JnbBGAe6V2glAx/4ksDiGXfTbyc2QEALmzZ2j78/4NkaCW jlKXUIGxOKHwo/0CDNqOqLrWVmpCVKMsxX4f+vmxJF1mTP7Z0q5Co4EgVjkt8GmH zdTfR3JftEgUuHzITUhTb7pFn9xCk/2OB/edEZUPMdSJY6dw2Euhjf6YkbxDB8WE GoHZhGf6VTiRzNNZWK5wMldBfZ0Y8UysT52O2LhAt1sHeYyA0dKaiRbpRHFRgg7e d1uvvaNITRqQx9O3yMPqCvo3+1p6nv8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:03 2025 by rpki-client