$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa File: d2e85e8c-7a74-3a11-93ce-8129452bde22.roa (raw, json) Hash identifier: MKBmI1X8lHZe/NAM+9pP308bvmPFcakFWOHvOynFazM= Subject key identifier: 7E:D0:96:90:95:0A:43:1D:B9:C8:B2:A2:28:D8:D0:4E:5D:CE:26:E6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78502DD77950E297EBD8300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.131.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:02:dd:77:95:0e:29:7e:bd:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=159c981f-9e98-450e-b616-13ec1c9aa88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:53:e8:5f:26:c1:81:b8:e4:49:28:df:ab: 36:ab:34:e1:d8:c2:8f:30:a3:f6:b2:a5:bc:e2:69: ca:25:94:ea:05:a4:3d:c8:bf:b5:b3:bf:97:82:8e: 32:e9:0d:33:74:3e:bc:d6:fd:ac:0f:91:8d:e9:e6: 35:71:2e:a6:47:45:28:af:44:ea:44:45:9c:02:c1: ac:65:e3:2b:ff:a2:30:76:2d:6a:a5:87:7d:14:de: f1:39:89:b3:f6:a4:00:53:95:73:d9:89:35:e5:cc: 7f:ce:77:12:99:60:f4:62:95:ee:46:f0:d1:75:66: 5d:9b:b2:24:48:30:b8:be:68:e6:78:c5:ac:d7:66: 4a:c3:6f:cb:af:0e:38:8a:18:67:c8:6d:50:72:e9: c1:80:17:06:ae:f9:b4:d3:f2:33:71:e2:18:a0:ba: d5:b2:3e:14:b2:cd:36:40:c5:64:37:42:37:b2:91: 5d:f6:70:76:8f:b2:64:07:04:26:75:e3:51:d9:fc: f7:ee:13:6d:88:55:ab:65:6c:d8:50:ad:3e:66:90: f5:ac:a0:50:af:7b:48:a5:34:6b:a8:f6:21:05:cc: 93:96:e2:33:29:6a:5d:95:e1:69:06:76:b8:a8:b4: 6b:37:45:e3:df:13:cd:9b:2f:b0:db:74:80:b7:92: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:96:90:95:0A:43:1D:B9:C8:B2:A2:28:D8:D0:4E:5D:CE:26:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2e85e8c-7a74-3a11-93ce-8129452bde22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:43:e3:f8:e6:42:f0:e1:73:e7:bf:b1:4d:da:0b:fe:7a:06: 76:d2:96:de:89:f3:39:2b:da:11:06:a3:ca:c4:55:10:94:11: 74:e7:04:56:a8:1b:bf:02:18:c3:b1:90:f9:ec:65:47:49:45: 1d:78:c8:76:9c:8e:71:f4:65:81:f4:42:16:0d:b8:3a:23:2f: ca:4e:7e:d5:62:6c:34:55:1b:9d:07:a8:ad:95:6a:ab:ad:54: 96:0c:a7:24:dd:22:1e:bb:13:77:e5:f0:c0:6c:ff:af:64:0a: 31:e9:93:46:6e:f9:e8:ef:50:d1:af:87:ed:f9:cf:8f:51:14: d1:5b:35:f9:fd:b5:65:6c:fc:08:d6:bd:f7:ea:b1:b8:5b:22: e7:a6:24:73:b4:1b:f3:16:4b:28:c7:67:3c:4d:d4:c4:44:6b: b8:bf:ae:1c:08:83:35:87:eb:51:12:21:fd:1a:9d:90:7a:9a: a5:69:c1:bd:0f:56:30:c4:b9:1e:5a:99:9f:47:72:ff:cc:f1: 23:e3:aa:23:42:61:fa:2a:39:ea:37:a4:bd:01:99:d6:8c:50: 1c:22:c1:d3:1c:94:0f:16:9b:81:94:dd:62:a1:cb:b1:6a:f5: 0d:b2:84:46:6f:2f:a6:b0:08:f7:ad:7f:70:0c:49:3c:17:38: 9a:17:b4:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQLdd5UOKX69gwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTU5Yzk4MWYtOWU5OC00NTBlLWI2MTYtMTNlYzFjOWFhODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FT6F8mwYG45Eko36s2qzTh2MKPMKP2sqW8 4mnKJZTqBaQ9yL+1s7+Xgo4y6Q0zdD681v2sD5GN6eY1cS6mR0Uor0TqREWcAsGs ZeMr/6Iwdi1qpYd9FN7xOYmz9qQAU5Vz2Yk15cx/zncSmWD0YpXuRvDRdWZdm7Ik SDC4vmjmeMWs12ZKw2/Lrw44ihhnyG1QcunBgBcGrvm00/IzceIYoLrVsj4Uss02 QMVkN0I3spFd9nB2j7JkBwQmdeNR2fz37hNtiFWrZWzYUK0+ZpD1rKBQr3tIpTRr qPYhBcyTluIzKWpdleFpBna4qLRrN0Xj3xPNmy+w23SAt5IGUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7QlpCVCkMduciyoijY0E5dzibmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJlODVlOGMtN2E3NC0z YTExLTkzY2UtODEyOTQ1MmJkZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlD4/jmQvDhc+e/sU3aC/56BnbSlt6J8zkr2hEGo8rEVRCUEXTnBFao G78CGMOxkPnsZUdJRR14yHacjnH0ZYH0QhYNuDojL8pOftVibDRVG50HqK2Vaqut VJYMpyTdIh67E3fl8MBs/69kCjHpk0Zu+ejvUNGvh+35z49RFNFbNfn9tWVs/AjW vffqsbhbIuemJHO0G/MWSyjHZzxN1MREa7i/rhwIgzWH61ESIf0anZB6mqVpwb0P VjDEuR5amZ9Hcv/M8SPjqiNCYfoqOeo3pL0BmdaMUBwiwdMclA8Wm4GU3WKhy7Fq 9Q2yhEZvL6awCPetf3AMSTwXOJoXtNg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:32 2025 by rpki-client