$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa File: 9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa (raw, json) Hash identifier: hd4OfO8OaPY6EZ0qonA1nKmaamju1eDeJ6SUvKbEKCo= Subject key identifier: 02:DB:8C:C4:8F:9E:7D:2A:14:7B:2B:1F:53:23:AE:E1:45:AB:91:72 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EE07B8F74E21E97BB980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.66.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ee:07:b8:f7:4e:21:e9:7b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6d3f3389-4c48-41ec-8c4b-80a4c9b5a9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1f:70:9f:be:aa:0e:fd:3c:2d:fc:9e:70:83: 45:a7:7a:6c:75:fb:fa:82:ae:69:7d:10:a2:31:5f: c6:09:7f:0f:0f:6d:b4:ee:53:9a:d4:b6:d5:d7:46: 45:c5:b7:4f:b8:5a:34:00:b3:5d:b3:56:99:ef:c2: f9:f1:bb:fa:c8:f9:5f:35:66:1f:5e:21:37:e8:bd: dd:4d:b9:16:e0:ed:ba:09:c7:49:bb:ee:bd:b3:2f: 66:8f:8a:0e:66:0e:7e:21:09:96:27:b1:b7:bc:c9: 77:80:3b:2b:b5:75:6c:07:3a:7f:b0:69:84:3a:56: dd:03:63:54:b9:08:20:40:a6:41:c6:58:75:08:cf: 61:6a:e3:55:a3:95:1d:3e:ff:cb:bd:5a:ca:1d:51: b2:6a:e8:fe:50:a7:14:98:d6:77:b1:6f:a3:15:45: 96:fe:1a:25:7a:28:f9:8a:a5:6e:c2:15:3b:a8:c5: c7:b2:99:a1:ea:b2:36:c8:81:d3:2d:08:f8:6f:0b: cd:de:d2:2f:e1:d5:be:b5:6a:ea:6d:ba:21:97:77: 7e:14:10:d8:ee:24:f7:9a:74:99:ae:be:9a:96:3b: 6e:31:3a:4f:be:e0:e7:4a:74:51:7a:ed:5c:80:d8: dc:7e:c9:b0:e6:c4:d8:e8:53:99:38:07:b9:2e:a6: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:8C:C4:8F:9E:7D:2A:14:7B:2B:1F:53:23:AE:E1:45:AB:91:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e2cdccc-7f11-34da-bc64-1a4d2973ecb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:85:45:f7:9a:66:53:97:b5:3d:ac:26:f6:ab:fc:9c:28:6f: 24:a8:8c:27:35:f9:43:4b:f2:aa:fd:b7:4e:fa:6d:e0:5d:8e: e3:59:41:6e:1b:b9:33:1a:ea:71:23:8a:e0:f1:d9:da:9b:b5: a8:7a:49:db:66:c1:04:df:ba:20:91:ae:41:65:ba:dc:d5:66: 27:6f:d5:03:0c:bd:d4:df:a2:32:6c:9d:b8:fa:90:90:af:7c: 98:48:d7:59:12:88:86:39:6d:90:b1:39:f5:1d:27:b4:13:3d: b6:4a:65:d4:68:ee:f2:bc:c5:7b:29:01:ab:05:0d:78:c2:80: 2f:08:8d:dc:32:2c:bd:34:2f:b8:c2:79:25:4c:b4:dc:33:12: 39:f5:d1:0a:ce:37:cf:e2:f4:b5:e8:43:81:8b:f0:10:42:cf: e4:28:90:c7:1f:e2:ec:be:f7:96:74:b0:e1:68:8e:15:5a:1e: d1:a2:5c:ed:60:65:80:15:d8:07:f1:36:0b:98:a3:b0:11:96: da:c8:c3:fd:69:2b:d5:63:a6:c7:88:b0:94:03:ad:55:1b:57: 36:84:04:53:73:dc:7d:12:63:63:fc:60:aa:d3:83:d3:ce:43: af:9d:59:b9:00:ec:43:13:61:36:87:4b:34:7e:e2:e6:9d:ef: a9:4e:43:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO4HuPdOIel7uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmQzZjMzODktNGM0OC00MWVjLThjNGItODBhNGM5YjVhOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R9wn76qDv08LfyecINFp3psdfv6gq5pfRCi MV/GCX8PD2207lOa1LbV10ZFxbdPuFo0ALNds1aZ78L58bv6yPlfNWYfXiE36L3d TbkW4O26CcdJu+69sy9mj4oOZg5+IQmWJ7G3vMl3gDsrtXVsBzp/sGmEOlbdA2NU uQggQKZBxlh1CM9hauNVo5UdPv/LvVrKHVGyauj+UKcUmNZ3sW+jFUWW/holeij5 iqVuwhU7qMXHspmh6rI2yIHTLQj4bwvN3tIv4dW+tWrqbbohl3d+FBDY7iT3mnSZ rr6aljtuMTpPvuDnSnRReu1cgNjcfsmw5sTY6FOZOAe5LqZd9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALbjMSPnn0qFHsrH1MjruFFq5FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWUyY2RjY2MtN2YxMS0z NGRhLWJjNjQtMWE0ZDI5NzNlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKFRfeaZlOXtT2sJvar/JwobySojCc1+UNL8qr9t076beBdjuNZQW4b uTMa6nEjiuDx2dqbtah6SdtmwQTfuiCRrkFlutzVZidv1QMMvdTfojJsnbj6kJCv fJhI11kSiIY5bZCxOfUdJ7QTPbZKZdRo7vK8xXspAasFDXjCgC8IjdwyLL00L7jC eSVMtNwzEjn10QrON8/i9LXoQ4GL8BBCz+QokMcf4uy+95Z0sOFojhVaHtGiXO1g ZYAV2AfxNguYo7ARltrIw/1pK9VjpseIsJQDrVUbVzaEBFNz3H0SY2P8YKrTg9PO Q6+dWbkA7EMTYTaHSzR+4uad76lOQ70= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:19 2025 by rpki-client