$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99640c9b-303a-3c89-981c-f6f6d3ae8069.roa File: 99640c9b-303a-3c89-981c-f6f6d3ae8069.roa (raw, json) Hash identifier: RX0wr0g1jMtu+gwl0jiE0JI64oELAj0hD9/gj1pC9Ck= Subject key identifier: DF:EE:E6:9D:87:8E:D2:2A:8A:CB:EA:50:3B:D9:C8:19:DE:C2:3F:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FB153E27A140655F9280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99640c9b-303a-3c89-981c-f6f6d3ae8069.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.125.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fb:15:3e:27:a1:40:65:5f:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0da1ee55-4c8b-44c0-bbf2-79f9e0859884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:90:4d:71:3c:a5:79:09:63:73:ef:bf:bd: 27:1c:7c:04:14:ad:d9:ef:b9:48:91:5d:13:ad:a8: 07:18:17:5c:f1:3d:49:3c:f6:08:6a:76:38:9a:58: 1c:fd:57:37:61:b6:2f:55:60:27:5d:20:b5:2d:cf: 2a:e0:58:ae:d7:2d:15:2c:6b:90:fb:9b:6d:29:34: 14:a5:f6:fd:48:28:1e:5d:c8:c9:e7:d2:a2:39:a9: 0a:a8:ee:48:2e:0b:ea:79:9d:42:d2:bb:c7:01:de: 2a:8f:70:5d:66:c2:50:61:6e:c8:70:bd:13:26:9d: 96:8f:8f:37:e6:a2:8f:a8:59:fe:24:03:7c:0a:53: b2:1f:b7:ce:fd:71:63:ff:6d:8c:71:a0:a6:a3:3d: fd:23:2c:0f:6b:32:dd:9f:56:38:a5:33:53:b3:d2: 36:cb:7b:33:27:3f:bd:3a:2a:53:e7:27:da:dd:78: fe:b9:f2:dc:76:5a:16:ad:78:69:1a:ec:cb:15:77: e4:8e:04:71:33:37:37:6a:00:ab:cb:9d:30:40:88: 13:88:6b:38:a9:7b:37:01:8f:bc:8b:0d:3b:df:2c: 9b:c3:86:b6:87:b1:4c:fd:f6:59:c8:95:43:08:da: 89:b6:22:8f:93:25:7d:ae:d6:41:76:7c:ae:64:e1: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EE:E6:9D:87:8E:D2:2A:8A:CB:EA:50:3B:D9:C8:19:DE:C2:3F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99640c9b-303a-3c89-981c-f6f6d3ae8069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:52:90:a3:20:c6:06:87:7c:c6:50:f1:d7:43:0f:88:cf:e8: 24:27:a0:40:51:d0:e4:dc:d9:a8:16:9c:97:c6:a5:14:0c:e0: 68:46:2c:f4:e7:02:4f:ee:40:af:03:63:f4:eb:09:f0:c7:72: f3:dc:12:41:9a:d0:28:e6:0b:c2:b9:06:a7:ea:0c:40:6d:ac: 1a:65:5a:a9:92:35:98:a6:cb:af:f6:0a:31:cf:dc:09:bd:3c: 18:54:5d:c2:ce:9b:15:dd:aa:d1:a9:d6:16:cd:46:65:73:2e: a7:bb:1c:c9:8f:99:03:75:23:34:0b:2c:b3:f2:d2:f4:8e:1e: 53:24:90:37:5e:8f:31:53:a6:79:ed:d8:a6:11:27:ad:21:df: 5c:3d:02:7f:90:ee:46:0b:d4:ea:2f:e8:bb:62:7b:b2:1a:0c: f4:a4:fc:84:02:e2:39:cf:06:27:c6:8f:bd:c3:41:51:86:ed: ed:26:2b:64:b4:1f:71:2b:4e:7a:f6:41:8f:b6:4c:27:80:01: 70:62:2a:79:65:b3:c1:50:2d:c3:b0:50:d4:c7:b0:da:9e:58: 11:4a:03:42:43:9e:dd:b8:09:e3:0b:9d:fd:60:f2:74:12:84: 87:90:36:9d:6c:e8:5a:d7:49:5a:fa:5a:71:43:d3:5b:04:f1: d5:e7:94:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPsVPiehQGVfkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGRhMWVlNTUtNGM4Yi00NGMwLWJiZjItNzlmOWUwODU5ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2qQTXE8pXkJY3Pvv70nHHwEFK3Z77lIkV0T ragHGBdc8T1JPPYIanY4mlgc/Vc3YbYvVWAnXSC1Lc8q4Fiu1y0VLGuQ+5ttKTQU pfb9SCgeXcjJ59KiOakKqO5ILgvqeZ1C0rvHAd4qj3BdZsJQYW7IcL0TJp2Wj483 5qKPqFn+JAN8ClOyH7fO/XFj/22McaCmoz39IywPazLdn1Y4pTNTs9I2y3szJz+9 OipT5yfa3Xj+ufLcdloWrXhpGuzLFXfkjgRxMzc3agCry50wQIgTiGs4qXs3AY+8 iw073yybw4a2h7FM/fZZyJVDCNqJtiKPkyV9rtZBdnyuZOEEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/u5p2HjtIqisvqUDvZyBnewj/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk2NDBjOWItMzAzYS0z Yzg5LTk4MWMtZjZmNmQzYWU4MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9SkKMgxgaHfMZQ8ddDD4jP6CQnoEBR0OTc2agWnJfGpRQM4GhGLPTn Ak/uQK8DY/TrCfDHcvPcEkGa0CjmC8K5BqfqDEBtrBplWqmSNZimy6/2CjHP3Am9 PBhUXcLOmxXdqtGp1hbNRmVzLqe7HMmPmQN1IzQLLLPy0vSOHlMkkDdejzFTpnnt 2KYRJ60h31w9An+Q7kYL1Oov6Ltie7IaDPSk/IQC4jnPBifGj73DQVGG7e0mK2S0 H3ErTnr2QY+2TCeAAXBiKnlls8FQLcOwUNTHsNqeWBFKA0JDnt24CeMLnf1g8nQS hIeQNp1s6FrXSVr6WnFD01sE8dXnlEY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:53 2025 by rpki-client