$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa File: cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa (raw, json) Hash identifier: aH5/iMnJU6TSQ9RRsL0u11Ht7JDTG88pDsWGT9ywNNQ= Subject key identifier: 6E:6C:36:DF:28:2C:C8:87:E5:B9:9F:72:FB:8E:B2:8A:59:60:89:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E7E882EDEF514B3B4400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.134.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e7:e8:82:ed:ef:51:4b:3b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f7a862ab-b29a-4046-a54a-4c147126a31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:8b:76:68:fd:2d:d1:2d:74:87:3a:37:6b: 2e:4f:f1:a4:99:c5:73:ca:a2:f7:83:ed:f2:14:a0: c9:e6:5a:37:04:d0:c7:79:b3:33:97:6e:17:cc:9e: 24:a2:48:78:d3:de:a1:80:99:0f:d3:b5:d6:f9:2b: 28:d2:da:6f:51:9d:0f:30:c0:58:20:5b:0a:4e:02: 18:b5:a7:80:25:cb:4e:dd:de:ae:19:ab:e3:2e:8a: 3c:39:3f:e9:79:1d:d7:8b:40:55:67:4b:93:4e:9c: c8:1b:ab:17:1e:1c:16:26:ef:88:a3:1f:e1:81:f0: 45:cb:be:5c:6b:24:81:ee:88:d2:94:0e:98:43:1a: 51:71:f2:b0:da:59:18:71:80:6a:28:69:b4:54:aa: a1:64:fa:e7:6d:20:8a:3b:ef:95:e3:17:1b:89:30: 34:2e:ca:c1:2a:fd:2a:f9:f4:d7:bd:e3:55:b6:7d: 96:54:a5:40:b9:65:b1:00:e0:68:b0:4e:db:6b:ee: bf:32:1e:8b:e8:f9:f5:a4:e5:6c:89:f0:a1:38:c4: f8:81:94:18:a1:0e:be:73:91:96:62:bd:cf:23:d9: 31:1d:92:33:0a:08:1a:02:86:11:5f:e3:ea:8e:06: 3a:58:71:55:b2:43:f5:44:5d:0e:a0:00:a7:56:a8: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6C:36:DF:28:2C:C8:87:E5:B9:9F:72:FB:8E:B2:8A:59:60:89:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3f:21:bd:be:5e:62:1f:9b:6e:0a:30:63:80:07:ba:13:f0: 47:f3:e1:f7:86:9e:db:3b:bf:dd:f0:69:bf:1d:a1:68:72:52: be:2a:3c:70:39:97:c8:50:6c:ae:3f:f0:10:67:9a:4d:b4:95: c1:24:d8:8f:c4:52:18:8f:bd:07:e7:97:4b:14:de:50:d3:aa: be:a3:4e:a5:5d:39:a0:af:3f:12:40:91:0e:7d:8c:90:94:db: 43:4b:f2:9f:76:f8:c9:8a:38:c5:07:75:96:4e:bd:73:20:ff: e5:69:30:ab:2b:2c:4f:00:3e:54:2b:be:ea:f9:dd:af:2c:c9: 73:c0:90:53:55:28:c3:07:d9:8d:a8:82:8a:39:81:83:14:07: 7c:20:4e:62:91:63:7d:95:0a:e2:16:54:fa:8b:d7:dd:8b:0a: 0c:d9:df:d4:bd:65:e4:88:61:ac:71:56:05:85:ec:16:a1:60: 55:03:0a:24:c7:a2:8a:dc:b4:e7:e3:2e:ce:36:d2:cf:3f:62: 93:cb:9f:b8:63:e9:96:4b:79:5f:c1:54:0b:b8:a3:10:e4:8d: 5b:24:e3:a9:b8:ae:b3:f8:ba:fe:e8:22:da:18:42:cb:00:d6: 7b:ad:77:ea:8e:40:dc:d4:93:06:ab:9e:15:48:b8:f9:7e:7a: f5:b1:a5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOfogu3vUUs7RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjdhODYyYWItYjI5YS00MDQ2LWE1NGEtNGMxNDcxMjZhMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiquLdmj9LdEtdIc6N2suT/GkmcVzyqL3g+3y FKDJ5lo3BNDHebMzl24XzJ4kokh4096hgJkP07XW+Sso0tpvUZ0PMMBYIFsKTgIY taeAJctO3d6uGavjLoo8OT/peR3Xi0BVZ0uTTpzIG6sXHhwWJu+Iox/hgfBFy75c aySB7ojSlA6YQxpRcfKw2lkYcYBqKGm0VKqhZPrnbSCKO++V4xcbiTA0LsrBKv0q +fTXveNVtn2WVKVAuWWxAOBosE7ba+6/Mh6L6Pn1pOVsifChOMT4gZQYoQ6+c5GW Yr3PI9kxHZIzCggaAoYRX+PqjgY6WHFVskP1RF0OoACnVqj6yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5sNt8oLMiH5bmfcvuOsopZYIlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IzYmIxMDYtM2ZmMi0z MmUxLWI2YzYtZDBkNWI5ZTFmNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU/Ib2+XmIfm24KMGOAB7oT8Efz4feGnts7v93wab8doWhyUr4qPHA5 l8hQbK4/8BBnmk20lcEk2I/EUhiPvQfnl0sU3lDTqr6jTqVdOaCvPxJAkQ59jJCU 20NL8p92+MmKOMUHdZZOvXMg/+VpMKsrLE8APlQrvur53a8syXPAkFNVKMMH2Y2o goo5gYMUB3wgTmKRY32VCuIWVPqL192LCgzZ39S9ZeSIYaxxVgWF7BahYFUDCiTH oorctOfjLs420s8/YpPLn7hj6ZZLeV/BVAu4oxDkjVsk46m4rrP4uv7oItoYQssA 1nutd+qOQNzUkwarnhVIuPl+evWxpe8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:22 2025 by rpki-client