$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab26f46-62d3-3e13-a413-c0e0e0173683.roa File: 8ab26f46-62d3-3e13-a413-c0e0e0173683.roa (raw, json) Hash identifier: HBnJdziYZDpVkwoKz4fen1vjAol6Yf6KiX6vphmoe2E= Subject key identifier: C9:5D:73:3F:6F:48:34:DB:4C:B4:5A:AC:1F:1C:4F:EB:87:AF:FB:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584972799E308FC13D69EA3E43E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab26f46-62d3-3e13-a413-c0e0e0173683.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 396982 IP address blocks: 34.13.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:9e:30:8f:c1:3d:69:ea:3e:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=3993f697-5b80-4e7e-9392-d08b38b387bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:39:3a:4a:e4:9a:42:ee:e2:43:cd:a8:b6: 41:b7:30:b5:c4:e8:9b:2f:c3:c0:b2:b8:9c:97:24: af:1c:98:2e:92:1f:cd:08:15:d1:65:53:b0:bf:ca: 4a:9f:66:5f:25:77:fa:a9:b2:7a:ca:6e:34:b6:3c: c4:95:a6:cb:36:d8:ce:16:61:5a:ec:50:4d:46:0b: f8:2a:0f:cc:f9:ff:54:a6:85:7e:9d:36:0a:1e:96: b4:db:9e:d6:67:5d:c1:05:64:58:77:35:48:f0:81: 4e:6e:1f:f4:b0:14:77:12:8d:09:5e:05:d0:d9:c4: 01:86:e9:b6:97:55:95:d4:85:e0:99:b1:b0:7a:d5: 2a:b0:72:cf:d1:40:f4:e1:1b:37:fb:85:0a:88:ad: a4:20:c0:d1:bd:53:24:dc:99:78:4b:cc:27:19:27: f6:a9:41:1d:3f:2b:33:4a:f1:9f:a9:c0:46:0b:e3: 2a:e8:5e:1b:86:84:6e:91:fb:a3:e4:b6:05:e1:91: ef:0b:e9:5e:44:f8:d6:03:53:18:a1:18:5b:7e:77: e5:cc:64:94:b7:1b:29:4b:1b:30:b7:f3:19:7e:6c: 65:4b:39:c4:41:1d:98:34:cb:a3:64:91:bd:cb:e6: ef:3c:bb:e2:f2:06:3a:ab:4a:c4:21:5b:20:f3:11: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5D:73:3F:6F:48:34:DB:4C:B4:5A:AC:1F:1C:4F:EB:87:AF:FB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ab26f46-62d3-3e13-a413-c0e0e0173683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ac:c1:93:60:4f:92:e2:13:4a:3c:c0:25:19:1c:84:a8:ff: ed:0f:78:69:90:c9:48:5e:03:0e:0d:1f:5f:aa:b8:2c:78:eb: a7:be:54:c7:94:7d:de:f6:c5:bd:2f:d7:f8:2d:7a:16:9a:7c: 23:b5:fa:94:9f:79:86:9b:89:2d:9d:d8:0d:bb:3c:f6:c5:41: 16:9f:df:f0:e4:b5:50:e5:6f:a1:03:ce:c2:62:46:e1:26:75: 21:56:93:99:48:71:92:10:59:07:c9:6a:97:ed:a2:65:95:b3: 68:2d:dc:71:b7:d6:42:62:a1:a9:e8:aa:cf:b4:93:c1:91:12: d3:b2:5f:76:20:39:41:2f:e3:ae:cf:14:1a:43:b2:2c:05:93: 31:1a:b8:88:37:75:29:a3:f1:1c:78:77:62:35:37:9e:10:3b: b3:6b:30:47:07:7c:6b:f2:58:52:7a:11:fa:8e:8f:a8:35:e3: 59:77:e5:c2:4d:20:27:e6:16:17:9f:97:5b:a9:2f:30:32:e4: b6:e5:6c:64:fc:86:1a:d6:7f:a0:1c:11:d9:84:a9:dd:c4:bc: f6:a1:57:e0:5b:06:49:2b:74:ef:e6:b1:24:65:33:38:77:75: 6e:e5:19:86:67:f7:45:a6:5f:e7:05:95:bb:24:b5:ea:18:bf: 72:a7:a8:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeZ4wj8E9aeo+Q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk Mzk5M2Y2OTctNWI4MC00ZTdlLTkzOTItZDA4YjM4YjM4N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPM5OkrkmkLu4kPNqLZBtzC1xOibL8PAsric lySvHJgukh/NCBXRZVOwv8pKn2ZfJXf6qbJ6ym40tjzElabLNtjOFmFa7FBNRgv4 Kg/M+f9UpoV+nTYKHpa0257WZ13BBWRYdzVI8IFObh/0sBR3Eo0JXgXQ2cQBhum2 l1WV1IXgmbGwetUqsHLP0UD04Rs3+4UKiK2kIMDRvVMk3Jl4S8wnGSf2qUEdPysz SvGfqcBGC+Mq6F4bhoRukfuj5LYF4ZHvC+leRPjWA1MYoRhbfnflzGSUtxspSxsw t/MZfmxlSznEQR2YNMujZJG9y+bvPLvi8gY6q0rEIVsg8xHtWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMldcz9vSDTbTLRarB8cT+uHr/v/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGFiMjZmNDYtNjJkMy0z ZTEzLWE0MTMtYzBlMGUwMTczNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIg1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqswZNgT5LiE0o8wCUZHISo/+0PeGmQyUheAw4NH1+quCx466e+VMeU fd72xb0v1/gtehaafCO1+pSfeYabiS2d2A27PPbFQRaf3/DktVDlb6EDzsJiRuEm dSFWk5lIcZIQWQfJapftomWVs2gt3HG31kJioanoqs+0k8GREtOyX3YgOUEv467P FBpDsiwFkzEauIg3dSmj8Rx4d2I1N54QO7NrMEcHfGvyWFJ6EfqOj6g141l35cJN ICfmFhefl1upLzAy5LblbGT8hhrWf6AcEdmEqd3EvPahV+BbBkkrdO/msSRlMzh3 dW7lGYZn90WmX+cFlbskteoYv3KnqKA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:06 2025 by rpki-client