$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json) Hash identifier: ZEkwsyJI6ao2Z+TaawzfDy0uFLmDchdVmVo4RHJP0EA= Subject key identifier: 53:F3:F1:97:E6:60:BB:34:60:08:81:BB:76:A7:B2:29:3D:BE:66:39 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F00A2EB15F9D2737AB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f0:0a:2e:b1:5f:9d:27:37:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7e2f9228-8142-48c2-ac57-05013e2efd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:95:94:c7:94:d4:65:99:e4:d8:cc:a4:5b: 3f:07:a3:7f:9f:47:45:d3:13:df:0f:a6:a4:2e:23: d8:ac:3d:19:d7:9a:a0:6f:b0:33:d6:5d:19:8c:37: d8:96:4c:95:96:63:aa:18:d3:8b:0f:3f:b5:5f:63: 8c:9d:68:22:f3:80:42:28:77:5a:9d:2b:dd:1c:3e: 3d:e3:84:21:fe:cb:56:f4:81:90:6a:99:8b:41:e0: eb:ab:00:f3:30:9e:64:c1:ad:6a:bc:16:e0:a0:f0: 66:87:07:f8:44:72:2f:0a:77:2d:84:99:8c:96:84: 73:9a:89:a1:ed:5e:b4:91:c8:ba:78:d5:2c:fe:b4: 3d:9a:ea:75:98:33:45:57:be:7e:94:32:48:73:f6: b4:d4:29:e0:ab:1e:f2:7c:ee:d9:f1:b8:3d:5a:33: ad:2e:84:59:1d:f6:ed:1f:80:8f:e3:68:01:b7:dc: 1e:69:bc:a1:77:74:ac:5a:63:92:fb:7a:89:b6:7b: 0e:bb:5a:48:35:a0:ac:0f:14:24:72:cd:00:94:6b: 0b:94:31:5a:28:fa:de:b1:33:74:c4:23:f8:32:63: 34:7b:8d:6b:7b:09:55:9b:ee:e2:57:4b:cd:d6:e4: 56:ec:92:66:d3:eb:2d:00:61:fc:43:0d:ee:e1:13: f0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:F1:97:E6:60:BB:34:60:08:81:BB:76:A7:B2:29:3D:BE:66:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2f:c8:52:42:ec:c5:12:25:b1:54:97:0e:6f:70:88:a6:84: df:ed:83:ea:8a:2f:84:df:e7:13:d4:a0:c2:fc:34:d8:ca:9f: ab:de:34:ea:b3:44:d3:f8:3b:e3:ac:ab:1f:fb:0e:5a:70:64: 92:3a:ee:c1:1e:21:92:23:95:58:8f:11:4d:19:9a:e0:c8:8e: fe:06:b6:d8:7d:f3:02:d7:5c:8d:7e:4b:31:23:c0:a4:e1:48: ba:75:ad:1e:e8:2a:81:04:b8:dd:7b:5f:33:a5:eb:33:2d:23: 6e:40:7b:20:76:85:2e:56:35:2e:a1:2d:4d:d1:81:14:a7:16: fa:d3:29:a3:42:9d:00:5d:73:4a:be:79:7e:70:b9:d0:dc:50: 8a:69:34:f0:98:85:d2:5e:28:1d:6f:c9:f6:b7:af:ff:a5:db: 0c:92:65:7e:5c:44:c9:eb:fd:cc:f8:73:39:19:58:33:9c:10: 16:48:58:4f:29:dc:8d:c4:f4:4b:61:db:33:3d:fe:c3:7e:09: 0a:2d:ec:80:57:0e:f2:fa:6c:70:94:11:08:6c:57:6e:62:a0: 70:5c:e1:89:4c:b9:9a:02:b7:95:9a:e7:17:80:18:2e:5b:9c: 38:a9:a6:60:55:e4:cd:01:c8:9d:21:0e:ef:bf:d8:00:cc:e5: ac:8a:27:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPAKLrFfnSc3qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2UyZjkyMjgtODE0Mi00OGMyLWFjNTctMDUwMTNlMmVmZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBGVlMeU1GWZ5NjMpFs/B6N/n0dF0xPfD6ak LiPYrD0Z15qgb7Az1l0ZjDfYlkyVlmOqGNOLDz+1X2OMnWgi84BCKHdanSvdHD49 44Qh/stW9IGQapmLQeDrqwDzMJ5kwa1qvBbgoPBmhwf4RHIvCncthJmMloRzmomh 7V60kci6eNUs/rQ9mup1mDNFV75+lDJIc/a01Cngqx7yfO7Z8bg9WjOtLoRZHfbt H4CP42gBt9weabyhd3SsWmOS+3qJtnsOu1pINaCsDxQkcs0AlGsLlDFaKPresTN0 xCP4MmM0e41rewlVm+7iV0vN1uRW7JJm0+stAGH8Qw3u4RPw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPz8ZfmYLs0YAiBu3ansik9vmY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzZjcyOGMtMmI1Zi0z M2NjLWE3ODYtZjVhOTMzM2FjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwvyFJC7MUSJbFUlw5vcIimhN/tg+qKL4Tf5xPUoML8NNjKn6veNOqz RNP4O+Osqx/7DlpwZJI67sEeIZIjlViPEU0ZmuDIjv4Gtth98wLXXI1+SzEjwKTh SLp1rR7oKoEEuN17XzOl6zMtI25AeyB2hS5WNS6hLU3RgRSnFvrTKaNCnQBdc0q+ eX5wudDcUIppNPCYhdJeKB1vyfa3r/+l2wySZX5cRMnr/cz4czkZWDOcEBZIWE8p 3I3E9Eth2zM9/sN+CQot7IBXDvL6bHCUEQhsV25ioHBc4YlMuZoCt5Wa5xeAGC5b nDippmBV5M0ByJ0hDu+/2ADM5ayKJ/k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:15 2025 by rpki-client