$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa File: a39c4916-d280-3db9-8d45-5b63bb04856b.roa (raw, json) Hash identifier: 8DXAopYoRALqIy+9Jo1XAFTfJ56CYdq8R/KDM+m3LLs= Subject key identifier: 5A:08:E0:B9:AC:97:70:6D:7D:C9:B1:76:80:F5:4E:88:AC:A3:5B:2B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CF8DCA531111F754C3C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.89.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cf:8d:ca:53:11:11:f7:54:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=15b2f400-3936-48d8-a8e3-9f41707a3962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:cb:a2:ec:78:52:4c:7e:e5:bc:e5:6e:b3: ce:65:27:15:38:98:96:25:57:f7:6b:1a:5c:c9:b8: 6f:41:f4:e8:62:86:d9:fe:5f:48:3c:f3:70:0a:9a: cb:17:ca:1a:a9:d1:28:a3:ee:c4:13:47:f1:7f:23: 1d:81:f7:dc:c4:c2:31:b3:4e:0e:65:bb:f3:14:37: a1:49:ca:f7:9a:34:e8:49:62:81:2b:36:97:e9:75: 6f:aa:e2:db:08:2b:21:e2:cd:f1:de:aa:c3:35:f8: c6:72:01:75:af:f7:b0:71:88:bd:63:43:10:6e:71: f6:99:57:b7:18:89:61:62:7e:18:d4:e7:38:e4:68: 75:e1:e4:03:99:2f:9c:ab:b8:3e:47:09:21:ab:e4: 37:ba:19:f0:54:6c:bb:4a:93:c1:86:dd:3f:13:ff: 99:8e:61:65:51:f4:c4:51:d0:78:bf:58:f7:7f:f6: 42:8a:65:2d:9c:55:7e:bb:a5:48:13:b8:0b:e8:c1: ea:f0:db:5f:aa:d7:12:59:12:4a:bb:aa:b3:d3:63: e0:87:a1:8f:7d:6f:22:17:1c:c7:a7:1f:ed:fe:c9: 65:35:f7:db:04:79:aa:2f:a2:41:a4:19:42:07:b7: 1c:c8:1d:3f:c7:4c:7f:00:26:5e:78:55:6f:61:66: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:08:E0:B9:AC:97:70:6D:7D:C9:B1:76:80:F5:4E:88:AC:A3:5B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a39c4916-d280-3db9-8d45-5b63bb04856b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bb:cc:59:db:a3:c9:ec:ec:51:fb:93:10:a5:26:16:04:f0: 65:23:b7:8a:9d:34:c6:2e:fd:23:69:a6:b5:70:37:9b:30:3c: a9:51:ff:a7:8c:bd:27:56:85:a4:1f:82:04:e2:c7:a7:97:c1: cf:df:e2:f8:e7:50:78:64:65:70:fb:7a:90:98:e9:f7:bf:a1: 44:93:c6:1b:18:06:2e:18:83:90:ef:ee:b4:0c:f8:22:3f:a9: 60:c3:d0:c9:b4:08:03:4a:8b:00:27:7b:73:a1:76:f6:d6:d9: 61:ab:d0:39:5a:c2:62:a8:82:8c:f6:28:3f:82:10:6b:33:63: 96:c3:6a:f4:96:07:2d:34:1a:d7:29:f9:0c:cf:53:5f:b6:ab: 48:c5:bb:73:18:ec:8f:48:64:6a:d8:d4:1f:b6:f6:e1:01:cc: e1:93:84:15:e6:6f:07:11:fb:61:d5:3a:e2:ce:3c:1a:07:49: 1a:d3:7d:30:a4:bc:fa:6c:89:ee:1d:8d:df:8a:bc:54:65:08: 87:cb:b3:e0:27:5d:03:d7:d8:f1:e9:fd:9d:85:fb:f6:56:85: ef:23:11:3c:5a:55:82:f8:43:b8:52:86:0c:55:62:ab:99:66: 94:c7:49:7d:29:14:28:bb:d0:72:db:39:50:44:96:6c:05:84: 49:8b:3f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM+NylMREfdUw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTViMmY0MDAtMzkzNi00OGQ4LWE4ZTMtOWY0MTcwN2EzOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMPLoux4Ukx+5bzlbrPOZScVOJiWJVf3axpc ybhvQfToYobZ/l9IPPNwCprLF8oaqdEoo+7EE0fxfyMdgffcxMIxs04OZbvzFDeh Scr3mjToSWKBKzaX6XVvquLbCCsh4s3x3qrDNfjGcgF1r/ewcYi9Y0MQbnH2mVe3 GIlhYn4Y1Oc45Gh14eQDmS+cq7g+Rwkhq+Q3uhnwVGy7SpPBht0/E/+ZjmFlUfTE UdB4v1j3f/ZCimUtnFV+u6VIE7gL6MHq8NtfqtcSWRJKu6qz02Pgh6GPfW8iFxzH px/t/sllNffbBHmqL6JBpBlCB7ccyB0/x0x/ACZeeFVvYWajgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoI4Lmsl3BtfcmxdoD1Toiso1srMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTM5YzQ5MTYtZDI4MC0z ZGI5LThkNDUtNWI2M2JiMDQ4NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG7zFnbo8ns7FH7kxClJhYE8GUjt4qdNMYu/SNpprVwN5swPKlR/6eM vSdWhaQfggTix6eXwc/f4vjnUHhkZXD7epCY6fe/oUSTxhsYBi4Yg5Dv7rQM+CI/ qWDD0Mm0CANKiwAne3OhdvbW2WGr0DlawmKogoz2KD+CEGszY5bDavSWBy00Gtcp +QzPU1+2q0jFu3MY7I9IZGrY1B+29uEBzOGThBXmbwcR+2HVOuLOPBoHSRrTfTCk vPpsie4djd+KvFRlCIfLs+AnXQPX2PHp/Z2F+/ZWhe8jETxaVYL4Q7hShgxVYquZ ZpTHSX0pFCi70HLbOVBElmwFhEmLP9U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:03 2025 by rpki-client