$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5853837-d9be-3841-a085-63d747feec12.roa File: d5853837-d9be-3841-a085-63d747feec12.roa (raw, json) Hash identifier: WR7vE2PVge+JjMAo4J9WhQsZ7F28FR9pZ8ObrOjdcYY= Subject key identifier: 51:F0:A5:0F:EB:08:87:36:94:F9:10:8C:73:E6:B5:48:34:BF:4C:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78518295F7C5988E1AEEF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5853837-d9be-3841-a085-63d747feec12.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.140.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:29:5f:7c:59:88:e1:ae:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5555efb9-5b7d-4a86-a394-0174d492761e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:93:4b:90:10:48:26:ce:a9:86:9b:7b:ce: 38:60:5d:c0:8a:ca:10:06:91:a5:bc:84:05:71:33: 35:fb:11:32:27:2d:50:05:fe:20:a1:78:ab:40:9f: c0:63:46:9f:fd:11:c6:7e:84:81:1d:a4:93:6c:65: c8:2e:0a:e5:7b:55:40:64:1a:3e:ee:3d:6a:25:ad: 31:19:79:12:38:e1:e7:d7:d5:20:55:c5:d5:89:97: 8f:63:0a:a0:eb:ff:07:7d:f9:eb:ff:5f:80:28:e5: 6a:eb:a3:34:a7:38:18:d6:4b:92:ce:5b:d8:22:94: dc:4a:d2:c1:18:19:13:04:04:8d:4f:e6:ad:d9:68: 3a:f4:01:37:18:be:ab:e8:3d:7a:cb:67:73:f2:e1: af:f5:cc:a8:e4:34:46:45:e7:49:b8:52:0c:6d:26: f0:af:91:33:f2:02:9c:e2:83:bb:17:13:c1:d9:b2: 5a:cd:cc:58:05:20:c7:29:be:26:a9:b2:34:6c:91: 39:af:43:ef:8f:76:f5:b8:a6:69:e1:99:3a:a0:a8: 01:e7:66:2d:00:97:08:ec:b0:27:ee:a0:ae:de:12: b2:ed:6d:78:8f:43:61:ca:54:f6:9c:41:76:5f:08: 57:be:b2:e8:3b:ba:a2:df:26:e8:91:7e:39:2e:78: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:A5:0F:EB:08:87:36:94:F9:10:8C:73:E6:B5:48:34:BF:4C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5853837-d9be-3841-a085-63d747feec12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:46:dc:4a:a6:67:77:60:a6:99:8d:b1:c8:f7:0b:2f:09:ac: 07:a2:dd:e8:44:6d:1a:6c:7e:5b:10:fe:1a:57:a8:21:4a:5a: 0c:d9:8d:2e:0c:7f:ab:1e:75:16:52:0c:0c:bf:28:e7:e0:90: 3b:ef:52:34:20:d6:d5:76:40:79:5a:ca:84:09:cf:26:ad:81: 91:1c:a8:c6:7a:c1:70:38:78:64:03:8f:d7:a1:7c:8e:65:54: cf:f5:73:39:62:67:e4:50:61:6c:5a:86:f1:3d:ac:44:85:a5: 70:9b:0a:9d:47:8c:84:64:67:79:68:a0:33:ef:27:84:0b:1b: 18:06:05:cf:70:19:c2:57:bf:a3:9e:1d:6b:c3:e6:20:3b:54: 2c:e9:5c:34:0e:68:be:a8:73:c0:a1:93:3a:dc:07:4a:c5:18: 54:90:86:4b:2c:64:85:90:9e:f5:65:b2:64:9c:7d:1a:61:bd: b9:34:06:78:25:f2:e9:55:f7:ce:5c:d2:4d:9b:55:01:94:6b: e8:da:88:bc:5f:cf:11:c2:41:8a:a1:e6:2c:58:fa:42:ae:df: 89:8c:2e:29:05:ef:01:ad:c6:1a:fd:e4:2e:dc:5a:73:2c:df: 46:c0:b8:a2:dc:4e:d8:ea:af:b8:4c:d1:07:8b:0c:d5:9a:85: cd:34:c0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRgpX3xZiOGu7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTU1NWVmYjktNWI3ZC00YTg2LWEzOTQtMDE3NGQ0OTI3NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfaTS5AQSCbOqYabe844YF3AisoQBpGlvIQF cTM1+xEyJy1QBf4goXirQJ/AY0af/RHGfoSBHaSTbGXILgrle1VAZBo+7j1qJa0x GXkSOOHn19UgVcXViZePYwqg6/8Hffnr/1+AKOVq66M0pzgY1kuSzlvYIpTcStLB GBkTBASNT+at2Wg69AE3GL6r6D16y2dz8uGv9cyo5DRGRedJuFIMbSbwr5Ez8gKc 4oO7FxPB2bJazcxYBSDHKb4mqbI0bJE5r0Pvj3b1uKZp4Zk6oKgB52YtAJcI7LAn 7qCu3hKy7W14j0NhylT2nEF2XwhXvrLoO7qi3ybokX45Lnh7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHwpQ/rCIc2lPkQjHPmtUg0v0wIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDU4NTM4MzctZDliZS0z ODQxLWEwODUtNjNkNzQ3ZmVlYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlG3EqmZ3dgppmNscj3Cy8JrAei3ehEbRpsflsQ/hpXqCFKWgzZjS4M f6sedRZSDAy/KOfgkDvvUjQg1tV2QHlayoQJzyatgZEcqMZ6wXA4eGQDj9ehfI5l VM/1czliZ+RQYWxahvE9rESFpXCbCp1HjIRkZ3looDPvJ4QLGxgGBc9wGcJXv6Oe HWvD5iA7VCzpXDQOaL6oc8ChkzrcB0rFGFSQhkssZIWQnvVlsmScfRphvbk0Bngl 8ulV985c0k2bVQGUa+jaiLxfzxHCQYqh5ixY+kKu34mMLikF7wGtxhr95C7cWnMs 30bAuKLcTtjqr7hM0QeLDNWahc00wFs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:37 2025 by rpki-client