$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa File: b04c07b8-cff9-318b-a338-11569a7f320a.roa (raw, json) Hash identifier: YgbNRe7VP7ohy76IK2orSoX2FuTnkB+V5PDRyGeySPs= Subject key identifier: A8:F2:EF:18:5F:03:FF:7A:97:02:D9:56:6F:54:D9:44:7C:17:49:49 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78528EB8AE408194BAAA1C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.146.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:28:eb:8a:e4:08:19:4b:aa:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=14144f48-11e3-43bc-bbb5-9104cf5e4a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:81:01:c6:71:92:c9:87:8a:89:8c:36:fd: 86:b6:b1:c1:d5:37:f8:72:36:dd:fe:27:01:c3:f7: 08:5f:d1:56:47:ae:a6:81:25:d1:7d:34:38:2b:ed: 15:15:4d:ce:00:c6:d6:34:87:b9:ef:6b:c2:8d:d9: 67:da:e7:3b:fd:3f:65:40:8f:09:27:5c:f1:2b:4c: 32:e2:b6:b3:f6:fb:d0:53:c9:99:fc:f3:4d:8a:fa: 96:37:ca:c6:07:62:59:e0:89:09:5b:bb:27:da:99: d9:50:b2:ee:8a:96:2b:bd:c4:47:04:14:0a:d6:6d: 95:84:7e:b8:14:2d:df:4b:20:be:b6:29:3b:1d:7c: 86:43:f7:a5:e9:23:5b:c1:d2:cb:f3:26:17:01:06: 5a:2d:d6:4c:5a:3d:d1:da:f1:66:36:58:4a:64:ab: f2:39:87:67:ed:1e:2a:de:58:41:34:25:05:07:9f: 0f:8c:f6:27:82:9f:05:1b:53:3a:a8:9f:83:76:47: e0:70:45:50:52:59:88:99:05:3b:93:36:f6:e1:40: 5a:11:45:fe:3a:c7:58:a6:e5:b2:a0:96:0f:00:23: f4:f8:40:a8:41:10:e4:4b:5a:a4:18:3e:94:9e:cb: 1f:a7:d9:d0:b9:91:5d:73:16:a7:31:a1:ab:38:34: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F2:EF:18:5F:03:FF:7A:97:02:D9:56:6F:54:D9:44:7C:17:49:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b04c07b8-cff9-318b-a338-11569a7f320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e6:69:c0:ea:a4:3d:ce:ab:f1:fd:fe:9a:ad:29:e7:b2:5c: 4b:33:2d:17:fc:fc:e5:03:db:a7:6b:4b:9a:a1:28:fb:07:bd: 8b:fe:21:dc:70:6b:9b:95:0e:26:3b:72:af:cb:f6:96:dc:43: 38:2c:62:86:a3:2b:2b:76:e3:eb:e3:32:46:14:2c:66:80:11: 6c:61:a4:7b:26:6f:ee:15:d4:26:fc:fd:cf:a2:60:08:79:e7: 9b:02:b6:b3:a2:a8:53:cb:e5:67:db:62:47:d9:5e:e1:7e:26: 61:ea:07:e3:94:28:d1:29:c3:d4:9c:e3:4e:be:90:63:98:1a: a2:e5:f0:9b:55:61:ef:c2:4e:bf:5f:1b:b0:e1:85:c2:7a:c3: 61:d8:1a:d6:7c:6e:c8:a6:91:fc:d0:bc:8f:3b:7d:c1:54:90: dd:55:7c:4e:a1:8c:fe:a1:d6:4b:be:e3:b8:0b:42:57:72:b4: a8:72:48:29:c2:f0:02:9b:0a:23:d0:c8:70:31:0a:fd:3b:e4: 1b:1e:ed:3d:3d:4b:77:43:31:6c:9f:11:83:0b:b1:f4:32:33: a5:73:61:28:66:18:5c:9d:e1:49:9b:48:2b:a1:a4:bc:62:fc: 26:9f:22:50:06:83:1f:52:1e:df:97:bb:50:33:81:b4:9e:90: cc:f6:9b:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSjriuQIGUuqocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTQxNDRmNDgtMTFlMy00M2JjLWJiYjUtOTEwNGNmNWU0YTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22iBAcZxksmHiomMNv2GtrHB1Tf4cjbd/icB w/cIX9FWR66mgSXRfTQ4K+0VFU3OAMbWNIe572vCjdln2uc7/T9lQI8JJ1zxK0wy 4raz9vvQU8mZ/PNNivqWN8rGB2JZ4IkJW7sn2pnZULLuipYrvcRHBBQK1m2VhH64 FC3fSyC+tik7HXyGQ/el6SNbwdLL8yYXAQZaLdZMWj3R2vFmNlhKZKvyOYdn7R4q 3lhBNCUFB58PjPYngp8FG1M6qJ+DdkfgcEVQUlmImQU7kzb24UBaEUX+OsdYpuWy oJYPACP0+ECoQRDkS1qkGD6Unssfp9nQuZFdcxanMaGrODRFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjy7xhfA/96lwLZVm9U2UR8F0lJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjA0YzA3YjgtY2ZmOS0z MThiLWEzMzgtMTE1NjlhN2YzMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrmacDqpD3Oq/H9/pqtKeeyXEszLRf8/OUD26drS5qhKPsHvYv+Idxw a5uVDiY7cq/L9pbcQzgsYoajKyt24+vjMkYULGaAEWxhpHsmb+4V1Cb8/c+iYAh5 55sCtrOiqFPL5WfbYkfZXuF+JmHqB+OUKNEpw9Sc406+kGOYGqLl8JtVYe/CTr9f G7DhhcJ6w2HYGtZ8bsimkfzQvI87fcFUkN1VfE6hjP6h1ku+47gLQldytKhySCnC 8AKbCiPQyHAxCv075Bse7T09S3dDMWyfEYMLsfQyM6VzYShmGFyd4UmbSCuhpLxi /CafIlAGgx9SHt+Xu1AzgbSekMz2m3Y= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:40 2025 by rpki-client