$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa File: cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa (raw, json) Hash identifier: 30g1E9TaJQnYoKFMGlRGgfLNPYa0js+8KN+X6RKnqZk= Subject key identifier: 9E:50:55:74:3D:3B:83:7C:81:EB:04:0D:0F:DD:E8:D7:9B:E4:99:78 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850FCD2833E2212E97AB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.66.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0f:cd:28:33:e2:21:2e:97:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8666fa72-eb20-4245-be0c-ac79201515e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:01:89:af:62:b1:a5:de:65:b9:60:1b:a1: 42:d9:28:f8:f8:10:9e:c0:e3:c3:d0:ec:ae:b9:e4: 58:5e:f9:19:6f:e6:b1:29:31:3d:2b:7b:da:33:d6: 22:f1:c5:b5:f9:88:64:00:13:a0:c8:da:88:6b:f8: 9d:ae:c9:77:14:f1:65:1d:a6:94:1e:3b:ba:f6:ed: 6f:44:79:45:a3:7b:76:dc:4b:fa:51:06:66:87:03: a2:ef:f2:52:a5:ca:be:58:d9:a7:2f:0c:b8:12:2c: bd:98:70:c0:1c:b0:bf:de:57:bf:b4:49:bb:92:86: 01:ab:1a:9d:06:b5:ab:a0:45:5c:49:2f:fb:d1:90: 02:b6:d7:59:01:1e:d2:f5:72:b2:16:ae:f9:bd:6e: 67:df:ad:a7:4d:f0:a7:a4:9d:36:97:2f:61:7b:8e: 90:74:96:bb:d0:81:f3:45:60:6a:83:38:4b:93:6d: 6e:e2:c7:fe:43:7d:34:1e:83:07:38:ce:0a:b0:58: b1:ef:e2:65:2b:fa:12:48:88:29:e8:bc:5e:6a:ef: 0f:f8:2c:a0:2c:35:e2:ab:82:79:32:51:90:40:c9: ea:b3:71:9b:86:a4:8b:52:ea:b5:98:4e:2e:63:a2: 6b:b4:eb:79:dc:1b:e4:c2:0a:29:87:47:f1:38:8d: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:50:55:74:3D:3B:83:7C:81:EB:04:0D:0F:DD:E8:D7:9B:E4:99:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb0e7402-6b65-3c0c-bb05-f6b650a36cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:3e:12:50:1c:22:20:d1:48:83:07:0a:e8:19:45:b0:0f:12: 39:ae:8d:18:e4:92:15:87:e1:a9:65:dd:c2:fa:8d:c6:63:22: 68:2f:22:7a:14:83:7a:e4:f7:d5:51:20:5f:5c:c4:73:c3:33: f2:02:0f:f6:42:86:b5:b4:0f:8a:33:b8:b3:3f:76:e3:2e:02: bd:82:0a:0c:0c:ae:36:9d:c1:60:05:50:cc:97:5c:09:5c:8c: e6:37:2e:b8:1c:91:e1:a9:53:a9:b8:04:c6:3d:eb:0c:78:de: cc:26:0c:a3:33:36:f5:1d:ed:2d:a0:5a:30:d7:aa:84:2f:9a: 6e:2f:cc:55:3e:f2:c6:a0:2a:1e:52:27:69:73:d5:65:66:be: 35:79:db:d7:94:12:9d:8a:ac:56:5b:65:f5:c0:7c:4a:4a:33: ae:a3:53:ed:04:51:1a:ef:3e:41:29:9b:44:9e:61:83:bc:c1: 43:55:d8:52:b0:9e:59:a1:e5:95:55:c4:11:2d:f1:2c:6e:67: 2e:0d:c7:06:d1:50:df:a0:82:65:24:2c:96:e8:2f:fd:ae:70: 4d:d8:d4:15:5e:9f:1e:d9:4f:98:d7:ae:8c:c3:04:72:fc:ca: b6:b8:e4:5e:82:95:ae:0f:1a:b0:95:50:a7:ad:fc:d9:78:9a: 34:f0:15:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ/NKDPiIS6Xq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODY2NmZhNzItZWIyMC00MjQ1LWJlMGMtYWM3OTIwMTUxNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY0Bia9isaXeZblgG6FC2Sj4+BCewOPD0Oyu ueRYXvkZb+axKTE9K3vaM9Yi8cW1+YhkABOgyNqIa/idrsl3FPFlHaaUHju69u1v RHlFo3t23Ev6UQZmhwOi7/JSpcq+WNmnLwy4Eiy9mHDAHLC/3le/tEm7koYBqxqd BrWroEVcSS/70ZACttdZAR7S9XKyFq75vW5n362nTfCnpJ02ly9he46QdJa70IHz RWBqgzhLk21u4sf+Q300HoMHOM4KsFix7+JlK/oSSIgp6Lxeau8P+CygLDXiq4J5 MlGQQMnqs3GbhqSLUuq1mE4uY6JrtOt53Bvkwgoph0fxOI3SqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5QVXQ9O4N8gesEDQ/d6Neb5Jl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IwZTc0MDItNmI2NS0z YzBjLWJiMDUtZjZiNjUwYTM2Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY+ElAcIiDRSIMHCugZRbAPEjmujRjkkhWH4all3cL6jcZjImgvInoU g3rk99VRIF9cxHPDM/ICD/ZChrW0D4ozuLM/duMuAr2CCgwMrjadwWAFUMyXXAlc jOY3LrgckeGpU6m4BMY96wx43swmDKMzNvUd7S2gWjDXqoQvmm4vzFU+8sagKh5S J2lz1WVmvjV529eUEp2KrFZbZfXAfEpKM66jU+0EURrvPkEpm0SeYYO8wUNV2FKw nlmh5ZVVxBEt8SxuZy4NxwbRUN+ggmUkLJboL/2ucE3Y1BVenx7ZT5jXrozDBHL8 yra45F6Cla4PGrCVUKet/Nl4mjTwFQQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:52 2025 by rpki-client