$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f4ceb36-67c7-397c-95e2-dd9feb2ef50e.roa File: 9f4ceb36-67c7-397c-95e2-dd9feb2ef50e.roa (raw, json) Hash identifier: 7igvpfs9eqirajUu/PDvXPmqCGVOzgyC6pS6mZABBIM= Subject key identifier: B9:66:E8:8B:EB:24:72:6B:B8:C8:B0:AB:AE:90:05:C3:30:CC:80:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D6CBC0530C19EE32B8A8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f4ceb36-67c7-397c-95e2-dd9feb2ef50e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.147.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d6:cb:c0:53:0c:19:ee:32:b8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ae7e21d8-a33b-41cd-a79c-4e6ae5516058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7d:f1:91:b0:f7:48:30:4d:04:83:4e:9a:f1: 94:79:7b:00:98:98:f8:e1:d2:62:ad:5c:b5:80:28: 7e:01:5e:97:32:6d:3b:08:ea:7c:71:c8:6b:ab:62: c9:6e:29:c8:a7:15:1b:86:9d:88:d8:9c:29:78:96: 5f:b3:33:e0:4e:0d:ee:39:82:b2:66:13:8a:a9:6f: 01:9d:9b:08:4e:cd:2d:aa:53:d9:48:a6:21:33:73: 8f:b2:dc:47:3e:3b:17:91:2c:31:fb:6c:d7:f8:f5: 96:f8:ad:73:c2:fd:f7:e9:96:15:19:84:dc:03:48: 93:39:14:94:9d:05:68:ca:e9:ba:35:c5:0d:7e:98: 91:50:5b:6d:78:20:32:6d:e6:9e:21:93:be:30:cc: 48:29:ba:ba:3a:16:0d:0a:8a:1c:f0:32:a4:40:75: 95:34:5b:33:0e:1e:53:2b:d7:4e:35:e6:a4:a0:db: b2:15:81:66:f1:e7:b8:ae:8c:fe:13:59:76:f3:ff: 2a:ea:06:7c:38:09:ff:07:e1:9c:2e:69:f5:98:85: e2:8c:be:69:e7:28:fa:7a:04:96:b4:ca:b7:bb:59: ff:aa:63:d0:05:7f:aa:15:2d:1e:49:ab:da:c2:e2: 9f:3a:44:66:a5:3f:91:03:a6:e1:a0:a3:9a:6d:4d: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:E8:8B:EB:24:72:6B:B8:C8:B0:AB:AE:90:05:C3:30:CC:80:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9f4ceb36-67c7-397c-95e2-dd9feb2ef50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0d:94:1b:dc:91:ed:d1:ef:23:bf:0b:2d:3d:02:32:a8:d6: 3b:d9:48:c9:a3:24:46:b3:37:7f:60:a2:e1:36:c2:40:d3:c2: 2f:58:fe:99:97:dd:eb:f6:d2:59:5d:73:8a:1c:37:aa:d5:32: e7:ce:c1:13:52:94:44:81:36:da:e2:c3:da:4e:cd:1b:66:a3: 6d:90:1e:d4:4e:e1:31:44:43:47:fa:5b:fd:cb:ff:0a:05:99: 4d:d8:96:f2:03:67:e8:51:d2:03:cc:6c:d9:62:f2:bc:24:1f: 3c:a4:1d:a1:f6:8b:cd:86:86:82:e4:90:e2:f1:62:01:b3:26: b1:51:96:1b:d3:78:40:ac:62:d5:7a:b7:71:50:48:3c:94:e9: fa:0b:83:89:e9:12:ea:2d:9d:bc:ef:72:0b:63:d1:15:04:f4: 30:40:c2:12:3e:4c:a8:49:1a:66:a1:5a:a0:2b:8c:c3:e7:b3: 29:10:3b:23:d0:ee:5f:e8:60:ad:1e:d0:30:4c:86:c7:c2:64: 81:87:da:e2:9b:30:b1:61:49:b6:53:3f:9e:f8:11:7a:ec:bc: 26:db:41:ad:85:98:38:7e:5f:e4:91:67:b5:14:ea:2e:6b:0a: 86:a3:af:3f:6b:4d:08:e6:2c:99:71:00:e3:09:f4:19:69:d1: 39:f8:bc:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNbLwFMMGe4yuKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWU3ZTIxZDgtYTMzYi00MWNkLWE3OWMtNGU2YWU1NTE2MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5n3xkbD3SDBNBINOmvGUeXsAmJj44dJirVy1 gCh+AV6XMm07COp8cchrq2LJbinIpxUbhp2I2JwpeJZfszPgTg3uOYKyZhOKqW8B nZsITs0tqlPZSKYhM3OPstxHPjsXkSwx+2zX+PWW+K1zwv336ZYVGYTcA0iTORSU nQVoyum6NcUNfpiRUFtteCAybeaeIZO+MMxIKbq6OhYNCooc8DKkQHWVNFszDh5T K9dONeakoNuyFYFm8ee4roz+E1l28/8q6gZ8OAn/B+GcLmn1mIXijL5p5yj6egSW tMq3u1n/qmPQBX+qFS0eSavawuKfOkRmpT+RA6bhoKOabU0t3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlm6IvrJHJruMiwq66QBcMwzIAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWY0Y2ViMzYtNjdjNy0z OTdjLTk1ZTItZGQ5ZmViMmVmNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8NlBvcke3R7yO/Cy09AjKo1jvZSMmjJEazN39gouE2wkDTwi9Y/pmX 3ev20lldc4ocN6rVMufOwRNSlESBNtriw9pOzRtmo22QHtRO4TFEQ0f6W/3L/woF mU3YlvIDZ+hR0gPMbNli8rwkHzykHaH2i82GhoLkkOLxYgGzJrFRlhvTeECsYtV6 t3FQSDyU6foLg4npEuotnbzvcgtj0RUE9DBAwhI+TKhJGmahWqArjMPnsykQOyPQ 7l/oYK0e0DBMhsfCZIGH2uKbMLFhSbZTP574EXrsvCbbQa2FmDh+X+SRZ7UU6i5r Coajrz9rTQjmLJlxAOMJ9Blp0Tn4vP4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:54 2025 by rpki-client