$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eba4e07-eb75-3bb6-b74c-cf1a296035c5.roa File: 8eba4e07-eb75-3bb6-b74c-cf1a296035c5.roa (raw, json) Hash identifier: KAMqObnJD8cei5lRqEBrfEJFAdxz0VnfRYiPs1hfwP4= Subject key identifier: 35:9F:A1:91:42:1D:D5:E6:75:53:8F:EF:77:32:E5:71:B1:AE:F1:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78531C9DA4BA0ADA7EADC40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eba4e07-eb75-3bb6-b74c-cf1a296035c5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.86.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:31:c9:da:4b:a0:ad:a7:ea:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=337ff450-cd59-4593-a301-310ae5d329b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e4:c2:ac:04:5d:d7:bf:93:89:bf:f2:45:bb: 08:9f:69:0b:35:77:e8:19:de:d0:34:ad:e2:ea:62: 4e:31:d3:85:c3:16:7a:99:0a:5e:8d:b8:88:b0:d7: 2f:8f:90:75:7d:92:73:88:cf:ba:d6:6d:18:01:9a: bf:1f:67:85:4c:3d:9c:49:08:fe:96:3c:17:af:c0: 5d:3c:0e:5b:a0:67:30:ff:b7:5b:a2:10:43:d8:93: fd:56:1e:8c:5d:a7:61:c2:40:56:0a:cd:fc:f4:75: b9:79:5a:9c:3d:76:91:f8:2f:1f:88:e6:04:b9:95: 17:ca:0e:f2:d6:39:91:80:64:78:34:a9:74:33:74: e8:44:b1:9e:76:7d:23:1c:d6:b7:4d:05:28:1f:97: d7:a7:8d:29:4c:3d:dd:f2:a2:19:eb:e3:0f:e1:33: 99:47:1d:7d:ca:53:a5:70:58:89:10:54:82:a3:e6: 40:03:0c:91:f2:3f:59:b8:b4:a6:07:9b:f2:50:c1: 90:43:1c:cf:3b:d6:8f:7a:6c:c0:94:ab:51:2a:03: 65:7f:f2:38:d4:a0:8f:8b:68:80:fb:56:63:ea:cc: 1a:19:5b:29:bc:78:bf:78:af:f1:38:ba:02:92:6d: 80:c0:dc:dc:37:5d:f5:b5:6d:80:05:a9:20:93:d8: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:A1:91:42:1D:D5:E6:75:53:8F:EF:77:32:E5:71:B1:AE:F1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eba4e07-eb75-3bb6-b74c-cf1a296035c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:88:16:1f:85:c4:1d:f9:84:81:30:e0:1a:17:e0:f3:33:d9: fa:04:24:2d:f2:7c:38:4f:c6:f4:5a:57:90:1f:d6:8a:a1:45: 7b:7b:76:a3:17:cb:c2:7f:f8:79:a8:18:1b:61:8a:ba:f9:1d: 96:bf:b6:89:8d:e4:c0:be:69:3d:04:08:b2:5d:5b:ed:ac:9d: 96:b7:01:43:34:06:8d:aa:af:11:f3:bd:23:12:56:67:ad:f2: 9f:45:ac:8e:c7:ec:b0:09:f0:e1:8e:5a:fd:d2:8e:35:19:ee: f9:27:0b:5b:c5:5b:61:6c:04:66:e9:c4:47:32:a4:03:75:48: 86:ef:db:93:1f:6e:23:04:ca:8f:a0:bc:39:c0:cb:a5:ae:ff: 18:19:b2:42:69:8e:59:69:1c:10:33:95:59:fd:c8:5a:a1:e9: a4:71:a9:3d:d2:63:d9:83:f0:c1:c4:9a:d9:2b:89:19:bd:4a: 75:d5:3c:dc:09:84:a2:07:74:ad:ef:98:5b:c5:52:82:20:49: 77:88:22:84:c8:32:93:e5:c7:52:6e:44:0d:9b:3d:73:ea:95: 68:eb:10:a8:4d:bf:1a:87:45:fc:06:3d:7c:b5:91:1b:c3:61: cd:cd:f2:d0:14:b0:c6:a6:a8:65:c8:16:10:c0:82:00:ba:48: d3:35:53:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTHJ2kugrafq3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzM3ZmY0NTAtY2Q1OS00NTkzLWEzMDEtMzEwYWU1ZDMyOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeTCrARd17+Tib/yRbsIn2kLNXfoGd7QNK3i 6mJOMdOFwxZ6mQpejbiIsNcvj5B1fZJziM+61m0YAZq/H2eFTD2cSQj+ljwXr8Bd PA5boGcw/7dbohBD2JP9Vh6MXadhwkBWCs389HW5eVqcPXaR+C8fiOYEuZUXyg7y 1jmRgGR4NKl0M3ToRLGedn0jHNa3TQUoH5fXp40pTD3d8qIZ6+MP4TOZRx19ylOl cFiJEFSCo+ZAAwyR8j9ZuLSmB5vyUMGQQxzPO9aPemzAlKtRKgNlf/I41KCPi2iA +1Zj6swaGVspvHi/eK/xOLoCkm2AwNzcN131tW2ABakgk9gjtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWfoZFCHdXmdVOP73cy5XGxrvF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGViYTRlMDctZWI3NS0z YmI2LWI3NGMtY2YxYTI5NjAzNWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6IFh+FxB35hIEw4BoX4PMz2foEJC3yfDhPxvRaV5Af1oqhRXt7dqMX y8J/+HmoGBthirr5HZa/tomN5MC+aT0ECLJdW+2snZa3AUM0Bo2qrxHzvSMSVmet 8p9FrI7H7LAJ8OGOWv3SjjUZ7vknC1vFW2FsBGbpxEcypAN1SIbv25MfbiMEyo+g vDnAy6Wu/xgZskJpjllpHBAzlVn9yFqh6aRxqT3SY9mD8MHEmtkriRm9SnXVPNwJ hKIHdK3vmFvFUoIgSXeIIoTIMpPlx1JuRA2bPXPqlWjrEKhNvxqHRfwGPXy1kRvD Yc3N8tAUsMamqGXIFhDAggC6SNM1U6s= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:58 2025 by rpki-client