$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa File: bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa (raw, json) Hash identifier: Q4Jf8/F2AMFSsL+gMcZsf2hIKmLAUl4Qyn74dikRv1w= Subject key identifier: C3:A4:18:84:5B:6C:4B:62:80:01:82:CF:E7:36:70:06:A0:CD:A7:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DFD2C3CBFEE65B653B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.145.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:d2:c3:cb:fe:e6:5b:65:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2cb558ae-0c51-4a79-9d63-06e4b21bd5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:60:79:58:90:d4:e0:70:86:bd:d6:17:02: 23:5a:cb:9b:66:46:92:2c:97:1e:c7:cc:7f:f8:3f: c2:f6:45:4c:00:2c:2c:25:7d:b7:99:0b:54:df:30: 1f:1b:6c:12:bb:00:61:c7:2b:8e:95:e8:4a:39:84: 5c:1d:50:1f:5b:a7:fb:25:85:1e:41:20:a7:d5:60: f6:81:a4:24:46:ea:4a:11:0b:30:09:96:27:61:05: db:65:35:d1:bd:e1:43:5c:7f:d8:80:22:4c:b8:cf: 76:57:9b:aa:34:2d:00:a5:73:a0:cf:47:a1:05:bc: 01:af:a9:e4:fb:dc:37:2d:f3:9f:20:07:4c:40:20: d8:98:42:dc:65:27:53:7c:87:d3:d3:b0:61:38:8a: a4:ef:8f:e8:12:3d:68:57:5f:a0:d2:6b:94:41:b0: ac:5a:44:26:17:9c:e8:a7:1c:b8:c8:25:13:03:3e: 32:4e:fd:22:3f:62:9f:52:85:55:c0:b0:ea:e6:e1: d2:70:ea:2f:d6:cb:e2:dc:2f:d0:15:b6:86:a3:64: 06:a3:89:57:7e:eb:ad:67:95:79:61:46:dc:22:a5: 64:ff:1e:5a:54:56:82:ee:58:00:15:72:b8:2b:e1: 68:9a:a6:b9:c0:a8:0c:01:48:2d:9a:dd:be:a9:07: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A4:18:84:5B:6C:4B:62:80:01:82:CF:E7:36:70:06:A0:CD:A7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:43:3a:7e:e3:06:5a:ac:6f:b3:42:af:73:5a:d8:8c:a2:35: 96:fd:97:9a:5d:da:83:79:ec:05:2d:75:25:29:8b:44:44:26: cf:b4:80:c9:68:96:a4:0b:ac:15:ea:55:36:bb:d7:2f:6f:49: 18:40:67:00:3f:25:fd:ac:cd:76:da:aa:1c:5b:48:03:f5:7b: fb:95:ee:cc:cb:84:c4:7e:cf:b5:f6:2f:91:e0:a4:57:41:e0: 76:ef:ae:b0:91:a0:97:26:32:54:99:23:22:b3:ed:26:f3:c4: 6b:99:57:7d:d0:67:1c:c5:a7:af:f6:09:7f:a7:2b:50:5c:06: 12:e2:b3:be:ad:50:51:65:f7:b1:71:f1:4e:6c:9f:34:8d:1e: 41:3c:31:59:3e:de:37:11:c7:3e:b8:a5:73:b7:1c:b4:1b:db: 21:d6:12:2a:47:3b:a0:24:2e:41:fb:cd:ab:f9:2c:1d:1f:5b: 0a:f6:27:95:1b:80:09:0e:97:c7:71:ac:27:97:21:c4:aa:f8: f2:94:77:05:e1:f6:73:96:78:4d:cf:cc:2d:91:b9:91:71:d3: 13:f3:b2:04:3e:38:05:82:8e:53:ed:2f:b8:7a:91:21:cd:bd: e4:5d:cc:aa:b1:4a:ca:1b:e9:ab:a1:48:39:ac:e8:d9:e4:9c: 86:d4:95:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN/Sw8v+5ltlOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmNiNTU4YWUtMGM1MS00YTc5LTlkNjMtMDZlNGIyMWJkNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjRgeViQ1OBwhr3WFwIjWsubZkaSLJcex8x/ +D/C9kVMACwsJX23mQtU3zAfG2wSuwBhxyuOlehKOYRcHVAfW6f7JYUeQSCn1WD2 gaQkRupKEQswCZYnYQXbZTXRveFDXH/YgCJMuM92V5uqNC0ApXOgz0ehBbwBr6nk +9w3LfOfIAdMQCDYmELcZSdTfIfT07BhOIqk74/oEj1oV1+g0muUQbCsWkQmF5zo pxy4yCUTAz4yTv0iP2KfUoVVwLDq5uHScOov1svi3C/QFbaGo2QGo4lXfuutZ5V5 YUbcIqVk/x5aVFaC7lgAFXK4K+Fomqa5wKgMAUgtmt2+qQeUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOkGIRbbEtigAGCz+c2cAagzaeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2NTI5YzEtZjIwMS0z YmY1LThjM2EtYTkwNjVjODkzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJDOn7jBlqsb7NCr3Na2IyiNZb9l5pd2oN57AUtdSUpi0REJs+0gMlo lqQLrBXqVTa71y9vSRhAZwA/Jf2szXbaqhxbSAP1e/uV7szLhMR+z7X2L5HgpFdB 4HbvrrCRoJcmMlSZIyKz7SbzxGuZV33QZxzFp6/2CX+nK1BcBhLis76tUFFl97Fx 8U5snzSNHkE8MVk+3jcRxz64pXO3HLQb2yHWEipHO6AkLkH7zav5LB0fWwr2J5Ub gAkOl8dxrCeXIcSq+PKUdwXh9nOWeE3PzC2RuZFx0xPzsgQ+OAWCjlPtL7h6kSHN veRdzKqxSsob6auhSDms6NnknIbUlXA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:21:22 2025 by rpki-client