$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b646765-db39-3a6d-8f6b-dda0b260cb64.roa File: 8b646765-db39-3a6d-8f6b-dda0b260cb64.roa (raw, json) Hash identifier: THA9EIkXYtZ7Ina5e5DvPKJ5r6ATcihy6/5DiH/bZIg= Subject key identifier: F3:2D:21:41:11:F4:7B:FF:01:B3:0C:8F:19:27:67:8A:7B:52:C1:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853223D4EF470D36B617E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b646765-db39-3a6d-8f6b-dda0b260cb64.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.141.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:32:23:d4:ef:47:0d:36:b6:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b444ea7b-de5a-4184-8f24-6b158aaba407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:3d:c0:6b:30:a1:cc:78:00:2e:7d:b8:73: ad:21:cc:86:4f:dd:02:64:64:73:fd:b3:9f:3b:51: cd:f8:e0:fa:72:82:ec:4f:bb:5e:ef:36:bd:9f:38: 5b:11:c9:17:76:21:49:c6:47:76:16:e6:6c:51:52: 85:1e:3d:31:e4:81:0d:b0:6f:0f:e1:4e:19:3c:6a: 30:e1:de:32:05:b1:67:ca:82:13:82:cb:57:4e:49: 25:75:85:f5:04:b2:0b:7f:be:3d:09:1c:fe:e3:61: 65:bc:de:6b:d1:0e:ae:8a:6e:dd:2d:48:22:cc:a9: f5:34:6f:af:b9:ee:28:94:57:df:26:34:27:46:bd: 8e:9d:1a:0e:5e:25:58:a2:27:f7:e8:f7:1c:2a:29: a9:00:ef:85:04:52:7e:03:63:80:da:b7:05:7b:76: a8:64:ec:67:d4:59:1e:b5:5f:bb:e8:5c:5a:27:ea: 40:ba:7c:75:b7:22:e1:2f:20:f5:f2:36:ae:88:98: 9b:e0:82:a5:59:11:b7:43:a0:86:7b:7b:ac:81:ea: aa:78:40:01:06:5f:e7:be:29:d3:86:46:72:8f:73: c1:c8:08:4c:45:57:a2:47:83:3d:2e:57:7e:df:7e: 2f:64:90:dc:85:94:b2:db:17:11:82:48:8b:0c:ed: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2D:21:41:11:F4:7B:FF:01:B3:0C:8F:19:27:67:8A:7B:52:C1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b646765-db39-3a6d-8f6b-dda0b260cb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2d:6c:ce:4e:4d:53:63:9c:42:47:41:4f:27:13:46:e8:35: 7c:89:c2:3f:27:ee:b4:20:8d:1f:84:35:8a:c9:76:27:30:18: 4f:2b:09:df:07:93:aa:93:21:34:b9:91:5b:fe:93:87:57:c7: 3a:2b:76:e2:c0:64:44:2a:54:bc:54:70:ba:25:be:5a:5c:6a: 35:e9:03:af:2c:31:dc:e4:73:cc:bb:38:20:8b:16:76:f3:61: 11:e3:9f:a9:a2:d3:4f:d8:49:06:ac:5e:c3:9b:b5:32:3a:4d: db:d1:93:dc:a1:6f:67:63:49:fb:42:95:07:87:8a:55:a8:70: 8b:80:db:81:3c:1e:7f:92:54:52:d0:c2:92:bc:2b:c3:ec:0f: b3:70:f3:bc:87:50:ac:ac:5a:4e:be:8b:e8:6d:c8:f6:3e:8f: 3b:8b:29:9e:3a:d8:a1:f3:e1:f2:78:f3:8a:0c:21:e0:a1:4f: 8b:ca:68:55:24:40:00:be:6c:43:a8:bf:b1:5f:41:63:b1:e7: d8:b4:6a:5d:11:19:08:29:27:36:b7:c9:c1:e8:43:f4:c5:de: fc:85:21:53:b2:3c:a9:4f:40:2d:62:aa:09:e7:97:ee:dc:42: dd:c2:f2:1a:c4:17:8f:d8:6e:be:1f:0c:0c:ce:2f:e3:51:71: a8:3c:23:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTIj1O9HDTa2F+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjQ0NGVhN2ItZGU1YS00MTg0LThmMjQtNmIxNThhYWJhNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTw9wGswocx4AC59uHOtIcyGT90CZGRz/bOf O1HN+OD6coLsT7te7za9nzhbEckXdiFJxkd2FuZsUVKFHj0x5IENsG8P4U4ZPGow 4d4yBbFnyoITgstXTkkldYX1BLILf749CRz+42FlvN5r0Q6uim7dLUgizKn1NG+v ue4olFffJjQnRr2OnRoOXiVYoif36PccKimpAO+FBFJ+A2OA2rcFe3aoZOxn1Fke tV+76FxaJ+pAunx1tyLhLyD18jauiJib4IKlWRG3Q6CGe3usgeqqeEABBl/nvinT hkZyj3PByAhMRVeiR4M9Lld+334vZJDchZSy2xcRgkiLDO1LTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMtIUER9Hv/AbMMjxknZ4p7UsEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGI2NDY3NjUtZGIzOS0z YTZkLThmNmItZGRhMGIyNjBjYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMtbM5OTVNjnEJHQU8nE0boNXyJwj8n7rQgjR+ENYrJdicwGE8rCd8H k6qTITS5kVv+k4dXxzorduLAZEQqVLxUcLolvlpcajXpA68sMdzkc8y7OCCLFnbz YRHjn6mi00/YSQasXsObtTI6TdvRk9yhb2djSftClQeHilWocIuA24E8Hn+SVFLQ wpK8K8PsD7Nw87yHUKysWk6+i+htyPY+jzuLKZ462KHz4fJ484oMIeChT4vKaFUk QAC+bEOov7FfQWOx59i0al0RGQgpJza3ycHoQ/TF3vyFIVOyPKlPQC1iqgnnl+7c Qt3C8hrEF4/Ybr4fDAzOL+NRcag8I8E= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:50 2025 by rpki-client