$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa File: 8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa (raw, json) Hash identifier: muyBl4day+1I40N/WrH57rNu+d9bysJjuLCtxKi+rZ4= Subject key identifier: 0A:0E:98:F8:FD:A6:A8:86:B5:C6:7B:AA:0C:19:6E:C7:37:92:D9:23 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F37FEFA576E36D044270 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f3:7f:ef:a5:76:e3:6d:04:42:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3e8529b7-a679-49af-a1f5-99c77ac27f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:4d:83:7a:3d:ab:0c:41:23:46:cb:4b:1c: e6:0c:97:ca:6b:97:ae:c9:6b:de:af:47:04:11:8a: 17:ee:7f:37:38:29:b0:7c:94:98:03:b1:53:fb:75: 9b:ce:33:27:c3:42:fe:c5:3f:08:a8:6f:c8:62:38: e6:86:9f:27:92:61:79:9a:c8:b9:56:aa:7a:18:99: f0:19:52:cd:72:ea:58:99:19:3f:a1:32:4d:6e:75: 9d:67:36:07:3f:59:d6:b8:e4:ac:97:c3:c6:9d:56: 21:ff:13:df:f4:df:b3:c9:b0:fb:b8:06:9c:19:70: 6b:77:b6:20:88:59:df:04:9a:8b:c6:6f:03:5d:27: 79:cf:2e:24:7c:e5:b3:00:6c:a2:77:6c:3c:1c:5f: 8a:65:82:68:5d:0a:2d:3f:b0:98:8c:28:b0:39:87: bd:94:5d:2a:a3:e6:4a:ab:4f:e9:fd:12:a6:fc:97: 64:3e:86:5d:bd:02:e5:eb:c2:5a:ea:9e:bd:a1:6f: dc:02:97:73:a4:38:cb:fd:1e:e2:e1:bf:5c:28:e0: 96:73:13:06:5d:7e:40:2d:d1:79:18:e5:91:77:d0: b5:88:b6:93:8d:3d:c9:64:1e:c8:5f:e6:f8:00:19: fa:a5:c2:2c:f2:2a:2e:5c:3e:c1:07:c2:48:50:b6: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0E:98:F8:FD:A6:A8:86:B5:C6:7B:AA:0C:19:6E:C7:37:92:D9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a6:86:04:fd:7f:93:a2:14:d8:8c:53:65:cc:dd:a3:8a:fb: 62:75:69:be:07:41:b7:c3:77:f5:28:a7:de:74:62:22:17:64: 0c:ca:62:d8:2d:8e:ab:22:db:c7:4f:80:99:45:c8:c9:80:bb: 48:e4:87:88:a7:aa:75:62:08:af:d0:13:5d:2e:51:0f:e7:46: c2:27:5f:f6:b6:c8:12:d8:06:61:de:e7:89:27:79:c9:ec:54: 01:c6:df:45:56:d9:67:08:39:70:a4:b7:bf:7a:58:ee:9a:a2: 2b:9b:1e:21:3d:cc:a2:34:e5:9f:3e:99:c8:37:7c:e9:dc:20: 19:ef:47:dc:c9:ae:e9:36:c8:bc:dd:4d:9a:0d:8a:b1:6b:46: 5f:22:b3:6b:75:4a:a3:9e:9a:6b:79:12:89:5f:dc:7f:c8:e1: 26:90:79:27:49:ca:3d:b6:69:7c:3c:0e:9e:4f:29:8e:33:cd: 1b:8c:e2:75:9e:a7:3c:0d:dd:e2:cd:25:8b:7c:ae:2c:6c:72: 00:97:56:fd:35:71:47:25:01:c5:2e:b6:bf:e4:b4:5f:98:f8: 7a:4f:9d:cb:df:ec:c2:84:91:b1:32:b0:9a:f5:ec:d6:a7:31: 49:d0:d4:bc:0a:8c:52:d0:42:6d:e2:9e:9e:c1:25:ca:dc:49: af:6d:08:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPN/76V2420EQnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2U4NTI5YjctYTY3OS00OWFmLWExZjUtOTljNzdhYzI3ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnBNg3o9qwxBI0bLSxzmDJfKa5euyWver0cE EYoX7n83OCmwfJSYA7FT+3WbzjMnw0L+xT8IqG/IYjjmhp8nkmF5msi5Vqp6GJnw GVLNcupYmRk/oTJNbnWdZzYHP1nWuOSsl8PGnVYh/xPf9N+zybD7uAacGXBrd7Yg iFnfBJqLxm8DXSd5zy4kfOWzAGyid2w8HF+KZYJoXQotP7CYjCiwOYe9lF0qo+ZK q0/p/RKm/JdkPoZdvQLl68Ja6p69oW/cApdzpDjL/R7i4b9cKOCWcxMGXX5ALdF5 GOWRd9C1iLaTjT3JZB7IX+b4ABn6pcIs8iouXD7BB8JIULbsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoOmPj9pqiGtcZ7qgwZbsc3ktkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGQ4YTVjMWUtNTA2NS0z M2E4LTljYzYtZDMwY2YzODFhOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6mhgT9f5OiFNiMU2XM3aOK+2J1ab4HQbfDd/Uop950YiIXZAzKYtgt jqsi28dPgJlFyMmAu0jkh4inqnViCK/QE10uUQ/nRsInX/a2yBLYBmHe54knecns VAHG30VW2WcIOXCkt796WO6aoiubHiE9zKI05Z8+mcg3fOncIBnvR9zJruk2yLzd TZoNirFrRl8is2t1SqOemmt5Eolf3H/I4SaQeSdJyj22aXw8Dp5PKY4zzRuM4nWe pzwN3eLNJYt8rixscgCXVv01cUclAcUutr/ktF+Y+HpPncvf7MKEkbEysJr17Nan MUnQ1LwKjFLQQm3inp7BJcrcSa9tCEk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:58 2025 by rpki-client