$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa File: d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa (raw, json) Hash identifier: Jj8AjpUq5zRIIZQMI+GcO8Wumuug7kG7ZDoahitTU9A= Subject key identifier: B8:EF:E5:B1:C6:8D:34:83:C6:BD:E4:C0:0B:7A:75:33:D7:7F:E8:55 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB6BCB612736E003382080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.108.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6b:cb:61:27:36:e0:03:38:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c9496cab-fd17-475f-8f69-15346c4c4f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:f3:1c:5d:e1:b5:db:83:d5:1a:c2:b3:54: 83:3b:4a:81:e7:f1:ac:d3:0b:43:e2:f1:2c:15:66: 5d:b7:fb:16:8b:73:64:3f:b0:d3:4b:af:1b:07:12: f4:e0:98:63:ca:01:ba:c5:ce:19:a4:db:7b:93:68: a0:7b:f5:5d:4d:19:1d:5c:7b:25:a9:41:7e:a0:49: 71:ba:ba:61:35:01:57:d6:fc:ff:a0:ae:68:e3:1d: ca:78:65:c1:4f:10:f5:b4:61:3d:3b:17:57:05:fb: af:ff:7f:6e:49:3f:81:a6:50:07:29:bd:a6:12:f3: da:8f:9c:80:d9:b5:38:a1:28:af:27:98:c9:ef:0b: 7d:78:fb:04:5d:fe:b5:87:01:64:d5:08:7a:6c:7a: 14:d5:f4:f7:2c:54:f7:60:b9:55:87:86:23:dc:62: 3e:95:b7:3a:37:94:e3:44:58:5d:66:a6:53:30:5c: 86:b4:04:d7:82:ec:ac:d8:75:5d:d8:74:76:04:f7: 7f:62:75:74:a2:72:ea:09:6b:dc:ec:de:5b:3e:6a: 21:ab:5b:bf:5a:2f:b0:33:ca:68:41:19:ae:a5:c9: ba:98:7b:0a:f4:ef:a7:dc:da:90:d5:0c:17:49:41: f5:22:e5:c8:1c:57:30:f3:8b:90:df:da:0d:9f:b8: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EF:E5:B1:C6:8D:34:83:C6:BD:E4:C0:0B:7A:75:33:D7:7F:E8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4f:fd:1c:92:f2:a6:86:4a:13:f3:34:b5:63:a0:26:39:09: c1:bf:07:ee:d1:5f:94:6a:6c:20:95:df:53:d5:fe:35:33:d3: 33:b1:1b:e7:c7:37:3d:c6:0f:32:94:4b:59:6b:25:c8:cc:ea: e8:bd:87:b3:85:39:42:55:7b:fb:c2:cf:a1:e5:0d:da:5f:4c: d3:63:3b:ec:2f:ef:9a:7f:86:31:32:76:64:81:c6:e4:04:1b: d6:b3:0c:f1:a9:85:f7:c7:63:74:63:0e:0f:99:b9:7b:99:d9: 0a:31:f6:de:6e:87:d0:80:ec:db:bb:73:e5:cd:31:21:47:cc: 2e:14:0e:31:f0:69:da:47:ce:82:c8:1a:93:db:71:dd:5e:29: 2d:15:cc:c0:9a:83:aa:dd:84:99:b5:04:e2:92:98:b2:8b:4d: 4f:65:59:dd:24:cf:39:75:94:2b:58:6c:49:93:6f:71:39:23: 37:db:cb:ab:fb:8b:ef:d4:dc:4a:c8:84:92:f9:15:ec:00:ad: a6:d8:2c:42:18:c1:4c:65:7f:d5:df:43:02:79:ff:cd:60:18: ff:7c:fb:df:e8:40:83:aa:b9:4a:73:8b:d0:2d:e5:76:4b:7d: 3c:64:f1:db:96:26:a7:ba:d1:90:1b:d6:61:05:a5:de:c7:a2: 37:1d:90:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2vLYSc24AM4IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Yzk0OTZjYWItZmQxNy00NzVmLThmNjktMTUzNDZjNGM0ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFbzHF3htduD1RrCs1SDO0qB5/Gs0wtD4vEs FWZdt/sWi3NkP7DTS68bBxL04JhjygG6xc4ZpNt7k2ige/VdTRkdXHslqUF+oElx urphNQFX1vz/oK5o4x3KeGXBTxD1tGE9OxdXBfuv/39uST+BplAHKb2mEvPaj5yA 2bU4oSivJ5jJ7wt9ePsEXf61hwFk1Qh6bHoU1fT3LFT3YLlVh4Yj3GI+lbc6N5Tj RFhdZqZTMFyGtATXguys2HVd2HR2BPd/YnV0onLqCWvc7N5bPmohq1u/Wi+wM8po QRmupcm6mHsK9O+n3NqQ1QwXSUH1IuXIHFcw84uQ39oNn7gpBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjv5bHGjTSDxr3kwAt6dTPXf+hVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJhMTI1YTktMjViZi0z OTM3LWJkYzktN2FhYTQ2MGZmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVP/RyS8qaGShPzNLVjoCY5CcG/B+7RX5RqbCCV31PV/jUz0zOxG+fH Nz3GDzKUS1lrJcjM6ui9h7OFOUJVe/vCz6HlDdpfTNNjO+wv75p/hjEydmSBxuQE G9azDPGphffHY3RjDg+ZuXuZ2Qox9t5uh9CA7Nu7c+XNMSFHzC4UDjHwadpHzoLI GpPbcd1eKS0VzMCag6rdhJm1BOKSmLKLTU9lWd0kzzl1lCtYbEmTb3E5Izfby6v7 i+/U3ErIhJL5FewArabYLEIYwUxlf9XfQwJ5/81gGP98+9/oQIOquUpzi9At5XZL fTxk8duWJqe60ZAb1mEFpd7HojcdkJg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:51 2025 by rpki-client