$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a18d2944-7946-3da6-8eaa-40dd85fb38e8.roa File: a18d2944-7946-3da6-8eaa-40dd85fb38e8.roa (raw, json) Hash identifier: TpfLimke6gJvsnnU3yyFZdySzmk0i4IkTeltjtiNLZo= Subject key identifier: D5:EA:9E:54:12:32:26:DB:6E:1F:AC:92:2E:20:19:18:9C:38:0F:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78515748C3A09B221AE9F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a18d2944-7946-3da6-8eaa-40dd85fb38e8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.84.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:15:74:8c:3a:09:b2:21:ae:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4a90a2f0-a8c8-4228-8ae9-dc50ce368261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:ac:d6:33:7b:e9:fe:fe:5a:98:d7:bc:de: 40:d5:de:a3:22:f2:f5:f1:39:18:29:1d:14:8c:a6: 75:52:39:be:65:e1:f7:13:2e:af:79:1f:73:22:f7: 02:d8:7b:b7:4f:ac:20:11:00:f9:7a:54:7c:71:6f: 68:f0:5f:1d:16:f2:5a:59:2b:70:17:93:2c:5d:81: ba:d8:62:02:61:d7:57:ec:c6:d6:e3:7a:7d:bb:7c: e8:a4:45:b3:d7:e0:18:ab:60:60:33:1e:76:9a:40: b0:ad:cf:4c:3a:9a:c4:3a:c4:aa:5a:39:6f:bb:db: dc:dc:fb:58:c7:0c:83:4a:ed:f6:1a:57:2f:2c:e7: 9a:7c:c4:b4:4b:db:e9:22:ff:65:9f:68:ab:75:4e: c7:f2:c1:01:0a:c8:8a:f1:ca:34:95:28:05:15:c8: ab:2f:0a:97:de:76:eb:a6:da:d7:06:de:7b:cd:43: 68:ee:e2:2e:ef:9b:43:1d:f3:ff:5f:d3:bc:a1:a6: 68:27:35:40:02:54:f3:73:ad:d2:d3:dd:68:3e:31: 13:04:a0:68:cb:46:18:68:0f:01:22:92:4b:54:e9: 20:92:dd:ee:0e:a9:b6:9f:6a:a6:88:f2:7a:cb:ce: 34:62:98:cc:b7:bd:15:ac:64:2a:26:c4:ff:da:b9: 03:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:9E:54:12:32:26:DB:6E:1F:AC:92:2E:20:19:18:9C:38:0F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a18d2944-7946-3da6-8eaa-40dd85fb38e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1f:de:95:42:eb:4d:14:9b:a8:6b:16:21:df:56:e4:20:f4: d6:82:81:96:a9:dc:96:e0:ee:29:62:f2:65:bb:94:1a:b3:75: 05:b0:8b:4a:95:fc:67:79:1b:fb:88:00:33:4a:78:e2:4a:6a: 6c:31:be:23:e1:52:40:a2:b0:05:3b:1d:ee:3a:8f:05:a3:43: e5:9d:c7:55:29:21:ae:17:4e:5c:d1:36:8f:f7:18:df:16:63: 1a:97:32:6a:84:d5:b5:7e:5f:8c:ab:b1:a9:2b:9b:b9:9c:50: 7d:81:35:2c:86:56:70:a7:14:d6:cd:9b:55:24:37:74:b3:cf: 27:ca:1e:c2:ea:12:45:11:70:2a:43:d9:76:03:e9:79:fb:dc: f5:ca:8e:b0:8a:0a:90:b1:86:25:5d:20:bd:7b:76:00:52:5a: eb:d1:ae:de:c9:c7:2a:56:e9:b1:ad:d6:c2:29:24:bd:bb:cf: 3d:b1:c8:59:ca:39:66:8d:6e:83:02:99:a1:a6:f3:1f:9c:47: 3d:48:be:bf:b4:53:84:74:0d:ad:78:27:97:7b:e7:ae:3f:d6: 0b:49:c3:24:52:b2:6a:91:3a:b7:e5:7c:47:d3:d3:eb:40:45: 8a:35:75:48:59:0c:77:22:39:57:b9:f4:35:6b:c4:e0:77:57: 86:c5:77:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRV0jDoJsiGun4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGE5MGEyZjAtYThjOC00MjI4LThhZTktZGM1MGNlMzY4MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPOs1jN76f7+WpjXvN5A1d6jIvL18TkYKR0U jKZ1Ujm+ZeH3Ey6veR9zIvcC2Hu3T6wgEQD5elR8cW9o8F8dFvJaWStwF5MsXYG6 2GICYddX7MbW43p9u3zopEWz1+AYq2BgMx52mkCwrc9MOprEOsSqWjlvu9vc3PtY xwyDSu32GlcvLOeafMS0S9vpIv9ln2irdU7H8sEBCsiK8co0lSgFFcirLwqX3nbr ptrXBt57zUNo7uIu75tDHfP/X9O8oaZoJzVAAlTzc63S091oPjETBKBoy0YYaA8B IpJLVOkgkt3uDqm2n2qmiPJ6y840YpjMt70VrGQqJsT/2rkDxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXqnlQSMibbbh+ski4gGRicOA8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTE4ZDI5NDQtNzk0Ni0z ZGE2LThlYWEtNDBkZDg1ZmIzOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYf3pVC600Um6hrFiHfVuQg9NaCgZap3Jbg7ili8mW7lBqzdQWwi0qV /Gd5G/uIADNKeOJKamwxviPhUkCisAU7He46jwWjQ+Wdx1UpIa4XTlzRNo/3GN8W YxqXMmqE1bV+X4yrsakrm7mcUH2BNSyGVnCnFNbNm1UkN3SzzyfKHsLqEkURcCpD 2XYD6Xn73PXKjrCKCpCxhiVdIL17dgBSWuvRrt7JxypW6bGt1sIpJL27zz2xyFnK OWaNboMCmaGm8x+cRz1Ivr+0U4R0Da14J5d7564/1gtJwyRSsmqROrflfEfT0+tA RYo1dUhZDHciOVe59DVrxOB3V4bFd9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:22 2025 by rpki-client