$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda80cc4-e668-3566-9b26-9c03df0cb120.roa File: bda80cc4-e668-3566-9b26-9c03df0cb120.roa (raw, json) Hash identifier: 537w08cN8vHcxUGX9CIqEBsSEPJG817tEG7gf8Ak9zs= Subject key identifier: D5:A3:32:16:48:E4:FC:93:98:1D:CE:A1:EE:FE:13:9F:0D:C2:9F:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850DD696569AFFF2152908 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda80cc4-e668-3566-9b26-9c03df0cb120.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.64.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0d:d6:96:56:9a:ff:f2:15:29:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c640e497-d0c4-44be-a3d4-5301f9343f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:7d:4a:d4:3e:c5:b1:eb:ac:fa:a7:aa:00: 57:51:9e:14:69:bf:5f:61:50:f2:cd:60:85:19:16: 16:33:5e:c2:a7:aa:60:c3:b7:66:8e:b1:07:7a:e5: 9e:6f:c4:a8:f3:8e:58:83:c7:c5:6d:4c:d1:86:93: 9c:71:aa:46:b5:9c:c4:55:64:12:a4:69:75:2a:b6: 05:93:fc:11:00:8a:1d:ce:da:5f:51:81:e7:c5:93: 85:79:c5:f2:e1:06:d1:6f:b9:da:52:b3:f7:9b:87: 98:b8:31:1e:c7:1d:f9:d9:a6:ca:a6:dd:ec:3f:d4: c7:45:b5:cc:bb:b8:17:fa:a3:14:fe:0c:cf:fe:a0: 57:73:07:98:ac:f6:74:58:24:e5:c0:e5:e5:a0:3f: de:ab:19:8a:ce:0d:8b:cb:b6:64:69:24:4e:65:f6: b0:7b:42:2a:ef:4d:cf:6f:05:c9:f5:f8:71:00:68: 03:cc:2d:b4:e3:39:7d:92:80:df:8e:2e:72:9b:5d: 4c:93:3e:b5:3f:0b:98:0b:21:e2:e2:62:75:04:42: fc:31:db:61:01:37:98:28:25:32:08:5c:f0:a0:f3: 11:07:fb:61:e8:18:b2:1c:4a:6b:ae:f8:2b:7f:83: 8b:1c:47:91:ca:64:b9:64:e8:b3:4a:41:c4:7f:e8: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:32:16:48:E4:FC:93:98:1D:CE:A1:EE:FE:13:9F:0D:C2:9F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bda80cc4-e668-3566-9b26-9c03df0cb120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b9:6a:e5:60:a2:fa:31:0c:07:5a:dd:e4:53:b0:5c:b5:c9: 34:4d:8d:f3:d2:aa:2c:99:39:d4:ef:6b:f4:58:f1:b7:5c:12: 5b:29:0d:a3:cf:0f:5a:f1:ed:96:82:2c:e2:d8:30:93:5f:1a: da:b1:38:f8:cd:c7:50:11:72:eb:f7:67:f7:c9:ba:88:53:8e: aa:81:e2:4a:04:cf:d3:57:c6:66:8c:b0:7f:9a:74:f4:64:d4: 03:69:cc:dc:bd:8c:40:3e:61:ea:d7:d8:44:36:57:7b:73:f1: ee:8b:56:b5:c3:fc:2a:07:c2:16:27:8d:7b:15:cc:d8:b8:bd: 3f:e9:a1:df:94:aa:86:06:c1:e8:0b:04:62:a8:38:84:1e:06: 01:39:13:4e:c7:9b:0f:e5:4c:06:66:54:2a:37:a7:42:98:9f: 05:9a:47:ac:59:3c:f7:2b:c5:d8:10:a6:26:71:4f:e6:6b:1d: d6:fd:c2:9b:dc:b0:93:a5:e2:ff:0c:72:77:bb:30:f8:c5:c9: 5e:1e:0c:75:fd:cc:9a:7c:f3:4a:c0:6b:7b:bc:3b:f5:1a:c2: c4:aa:eb:58:21:0e:5d:42:a9:b7:10:2a:15:fc:d2:16:99:61: 4b:d4:12:55:c7:ce:99:d8:85:2a:46:79:52:8b:26:58:d6:fa: c6:fd:8b:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ3Wllaa//IVKQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzY0MGU0OTctZDBjNC00NGJlLWEzZDQtNTMwMWY5MzQzZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgh9StQ+xbHrrPqnqgBXUZ4Uab9fYVDyzWCF GRYWM17Cp6pgw7dmjrEHeuWeb8So845Yg8fFbUzRhpOccapGtZzEVWQSpGl1KrYF k/wRAIodztpfUYHnxZOFecXy4QbRb7naUrP3m4eYuDEexx352abKpt3sP9THRbXM u7gX+qMU/gzP/qBXcweYrPZ0WCTlwOXloD/eqxmKzg2Ly7ZkaSROZfawe0Iq703P bwXJ9fhxAGgDzC204zl9koDfji5ym11Mkz61PwuYCyHi4mJ1BEL8MdthATeYKCUy CFzwoPMRB/th6BiyHEprrvgrf4OLHEeRymS5ZOizSkHEf+jgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWjMhZI5PyTmB3Ooe7+E58Nwp/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmRhODBjYzQtZTY2OC0z NTY2LTliMjYtOWMwM2RmMGNiMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS5auVgovoxDAda3eRTsFy1yTRNjfPSqiyZOdTva/RY8bdcElspDaPP D1rx7ZaCLOLYMJNfGtqxOPjNx1ARcuv3Z/fJuohTjqqB4koEz9NXxmaMsH+adPRk 1ANpzNy9jEA+YerX2EQ2V3tz8e6LVrXD/CoHwhYnjXsVzNi4vT/pod+UqoYGwegL BGKoOIQeBgE5E07Hmw/lTAZmVCo3p0KYnwWaR6xZPPcrxdgQpiZxT+ZrHdb9wpvc sJOl4v8Mcne7MPjFyV4eDHX9zJp880rAa3u8O/UawsSq61ghDl1CqbcQKhX80haZ YUvUElXHzpnYhSpGeVKLJljW+sb9i+4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:01 2025 by rpki-client