$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa File: 8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa (raw, json) Hash identifier: 7Sai9LxJyLRSN1hkgSuPGBOjsHej4AD1j/XOwH6cp9c= Subject key identifier: 09:C0:79:2C:34:5F:5D:3C:25:5F:4C:AB:80:67:72:A6:0B:2F:E1:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853B9B91FC666118CC9400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3b:9b:91:fc:66:61:18:cc:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=66d3dfb9-9cf7-44c4-8b75-704bbf93e285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:b6:48:24:ca:09:ee:3f:75:07:24:77:51: 53:33:5b:12:1b:2b:e1:fd:15:24:3f:91:b7:67:74: ad:90:b1:fe:ae:75:a7:62:f4:3d:16:48:f3:63:e1: 11:34:83:c6:cd:39:a9:0b:78:bd:98:ee:c1:7b:e3: 98:95:91:65:ed:72:32:c1:a2:ca:a2:6d:ee:96:e0: 89:24:a7:02:b4:31:e7:22:67:62:0d:14:c4:fb:93: 76:3a:dc:18:73:85:e0:73:f6:a7:bc:20:96:51:7c: 15:12:f2:00:f6:d2:1b:d1:28:50:9b:0c:17:e1:d2: 7c:f4:bc:03:0a:8b:58:de:0d:7f:19:f0:52:4b:ec: 37:30:a9:ff:e7:88:11:60:f5:fe:57:43:e7:da:fc: fa:e6:f7:15:66:ed:12:0b:c5:cb:24:53:e2:9b:29: e9:cd:39:d0:44:7e:44:bd:48:33:bb:78:fd:f8:f8: 3b:81:8e:0a:43:d0:6e:87:e2:04:5c:06:05:9d:55: 1f:4b:df:c4:80:3f:9f:22:ed:d6:3f:7f:ad:96:42: 03:20:a7:0c:58:08:8b:2a:93:e9:99:83:3d:4d:33: 3a:96:82:1b:c5:07:6e:15:d6:ad:d3:c4:39:07:b9: ad:0a:78:a9:5d:7e:67:24:bc:4a:5d:c7:e5:c5:e2: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:79:2C:34:5F:5D:3C:25:5F:4C:AB:80:67:72:A6:0B:2F:E1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e1:73:bb:45:24:56:87:f4:fe:64:88:4d:20:de:f9:af:bc: 4b:c3:a7:ac:6e:f2:28:dd:1a:ac:01:20:7a:02:be:72:87:65: b5:6a:ea:b3:d3:5e:5c:c1:5d:9b:2a:14:53:41:31:6b:b3:3a: 81:4b:64:a6:fa:47:de:0f:90:9e:8b:b7:64:15:38:f4:69:20: ec:f2:07:88:08:c8:4f:8c:4d:a2:95:90:cf:51:3b:e3:9e:c1: a5:88:e7:36:80:13:be:30:8e:18:7a:8d:7c:c5:fd:35:1e:ff: f7:e5:2e:27:87:8d:e5:72:af:b3:00:b6:7b:d0:a8:e9:20:db: ed:a2:54:f0:0f:50:98:75:db:d7:fb:90:4e:22:84:5b:39:80: 0c:ab:cf:d0:9d:2f:c4:72:58:27:08:db:c9:27:e3:9a:78:5a: e4:ee:4c:bf:c3:bc:78:dd:4f:de:fa:c9:a0:c2:3d:ba:c8:f9: d1:0d:ec:b8:42:4c:fc:2c:48:1b:bd:68:57:8c:ac:cd:ef:d6: f7:83:a4:dd:78:93:36:5d:7c:ac:6d:78:15:84:42:59:b1:e1: 9e:40:09:bb:58:43:62:a1:cf:e1:6a:7f:4a:76:d7:64:aa:77: e9:24:9f:a6:3d:83:fa:8e:f6:08:18:5f:1d:62:69:39:2b:33: 65:64:b7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTubkfxmYRjMlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjZkM2RmYjktOWNmNy00NGM0LThiNzUtNzA0YmJmOTNlMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUi2SCTKCe4/dQckd1FTM1sSGyvh/RUkP5G3 Z3StkLH+rnWnYvQ9FkjzY+ERNIPGzTmpC3i9mO7Be+OYlZFl7XIywaLKom3uluCJ JKcCtDHnImdiDRTE+5N2OtwYc4Xgc/anvCCWUXwVEvIA9tIb0ShQmwwX4dJ89LwD CotY3g1/GfBSS+w3MKn/54gRYPX+V0Pn2vz65vcVZu0SC8XLJFPimynpzTnQRH5E vUgzu3j9+Pg7gY4KQ9Buh+IEXAYFnVUfS9/EgD+fIu3WP3+tlkIDIKcMWAiLKpPp mYM9TTM6loIbxQduFdat08Q5B7mtCnipXX5nJLxKXcflxeLc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnAeSw0X108JV9Mq4BncqYLL+EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGM0ZGM2YWMtNmQyOS0z YTBhLWIyY2YtYTJmMTllZDk5NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjhc7tFJFaH9P5kiE0g3vmvvEvDp6xu8ijdGqwBIHoCvnKHZbVq6rPT XlzBXZsqFFNBMWuzOoFLZKb6R94PkJ6Lt2QVOPRpIOzyB4gIyE+MTaKVkM9RO+Oe waWI5zaAE74wjhh6jXzF/TUe//flLieHjeVyr7MAtnvQqOkg2+2iVPAPUJh129f7 kE4ihFs5gAyrz9CdL8RyWCcI28kn45p4WuTuTL/DvHjdT976yaDCPbrI+dEN7LhC TPwsSBu9aFeMrM3v1veDpN14kzZdfKxteBWEQlmx4Z5ACbtYQ2Khz+Fqf0p212Sq d+kkn6Y9g/qO9ggYXx1iaTkrM2Vkt3k= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:16 2025 by rpki-client