$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d59c980e-0be4-3347-8b90-5649c710f1c5.roa File: d59c980e-0be4-3347-8b90-5649c710f1c5.roa (raw, json) Hash identifier: ndUeHb6MzYPjJW8es9FyA0X8VsjUHg34vwxOJS+9KAs= Subject key identifier: 45:74:A7:8F:76:1C:1F:0F:D5:DB:85:0B:C3:D4:67:F7:7A:2C:AF:E0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785110C6C2C962AAD86A420 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d59c980e-0be4-3347-8b90-5649c710f1c5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.84.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:11:0c:6c:2c:96:2a:ad:86:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=908a6bd2-e7bd-4d64-9eb1-8d691b3920fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:10:fe:80:e3:af:54:56:15:6b:5a:ef:53: 3f:0a:50:88:ae:2e:4c:91:bf:82:ff:6b:2a:02:2a: 66:27:e3:44:1e:aa:2a:82:e6:de:ee:d4:84:af:a9: 37:eb:7b:97:d5:d5:80:7e:0b:91:53:5c:7a:42:24: 7f:91:9a:5f:97:4c:d9:1f:90:c9:c0:33:b0:9d:cf: 5d:6e:2f:3b:b6:57:8b:8d:d4:65:f8:d2:42:43:09: 54:5e:62:16:04:cf:ed:68:b2:e8:61:40:47:d6:bf: dc:24:aa:e5:cc:7a:0c:82:68:a4:62:29:05:c8:d4: 53:37:d9:60:11:a7:d6:09:e3:f5:f4:92:87:0f:66: a3:6f:f5:68:fa:d3:02:1a:d3:3d:d0:7e:46:11:a3: ed:5c:4d:b7:ec:a3:d9:f8:d0:ce:36:38:be:6d:e4: b4:1c:68:b3:aa:cb:8d:6b:05:93:f5:5c:df:52:36: ea:c0:6b:c0:55:9f:cb:44:8f:1d:98:d4:27:83:82: e5:31:35:0d:45:59:cb:73:ea:c6:32:72:eb:8f:5d: cc:3c:86:e2:7f:53:ab:e3:7f:a5:84:23:de:a3:4b: cb:af:a0:40:f2:14:c4:6a:2c:9b:8c:d0:12:65:c2: c3:69:8b:68:5f:1f:a5:df:f7:c5:fd:0a:06:5d:13: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:74:A7:8F:76:1C:1F:0F:D5:DB:85:0B:C3:D4:67:F7:7A:2C:AF:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d59c980e-0be4-3347-8b90-5649c710f1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2e:55:93:2a:00:e8:c7:11:8d:48:c6:cf:83:ec:7e:04:c6: d5:dc:1c:24:de:89:c7:fa:bc:c0:96:57:4d:e4:86:b6:c6:00: a1:d8:a1:e9:f0:ad:c9:58:83:93:1e:83:42:cb:fb:68:28:16: c8:c3:27:09:42:51:32:7e:3e:ef:33:3a:f7:b2:84:8b:28:e1: 8d:12:e5:c5:42:f6:90:2c:f5:2e:46:f0:d9:a8:e2:b5:36:a6: 9c:5f:c7:1b:68:53:d8:a4:7a:a3:76:93:aa:76:25:aa:67:12: 1f:ae:bb:8d:f0:29:e0:5f:e8:03:2e:84:7a:e1:99:cb:49:77: 77:c1:31:3d:31:3e:ac:28:20:59:02:57:8f:fd:ed:df:17:a9: b6:02:95:c9:0d:00:74:66:93:34:a8:51:38:16:4a:75:20:8c: 31:a1:54:10:ea:27:ac:70:ee:88:25:21:b3:36:2b:16:de:ad: fd:ba:22:c1:1a:e8:36:1c:06:db:6e:57:2c:0d:a8:af:e7:f9: 54:c2:53:4e:7c:92:b3:f0:77:1e:16:18:ad:91:28:28:dc:0b: 22:3a:7d:ea:68:5c:a2:b9:ef:a8:b1:77:ae:78:39:6e:eb:6d: b3:3f:a0:6d:0a:e9:1a:64:72:8f:2d:c0:61:c6:72:3e:89:ed: 4b:78:94:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhREMbCyWKq2GpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTA4YTZiZDItZTdiZC00ZDY0LTllYjEtOGQ2OTFiMzkyMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4kQ/oDjr1RWFWta71M/ClCIri5Mkb+C/2sq AipmJ+NEHqoqgube7tSEr6k363uX1dWAfguRU1x6QiR/kZpfl0zZH5DJwDOwnc9d bi87tleLjdRl+NJCQwlUXmIWBM/taLLoYUBH1r/cJKrlzHoMgmikYikFyNRTN9lg EafWCeP19JKHD2ajb/Vo+tMCGtM90H5GEaPtXE237KPZ+NDONji+beS0HGizqsuN awWT9VzfUjbqwGvAVZ/LRI8dmNQng4LlMTUNRVnLc+rGMnLrj13MPIbif1Or43+l hCPeo0vLr6BA8hTEaiybjNASZcLDaYtoXx+l3/fF/QoGXRMhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV0p492HB8P1duFC8PUZ/d6LK/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDU5Yzk4MGUtMGJlNC0z MzQ3LThiOTAtNTY0OWM3MTBmMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsuVZMqAOjHEY1Ixs+D7H4ExtXcHCTeicf6vMCWV03khrbGAKHYoenw rclYg5Meg0LL+2goFsjDJwlCUTJ+Pu8zOveyhIso4Y0S5cVC9pAs9S5G8Nmo4rU2 ppxfxxtoU9ikeqN2k6p2JapnEh+uu43wKeBf6AMuhHrhmctJd3fBMT0xPqwoIFkC V4/97d8XqbYClckNAHRmkzSoUTgWSnUgjDGhVBDqJ6xw7oglIbM2Kxberf26IsEa 6DYcBttuVywNqK/n+VTCU058krPwdx4WGK2RKCjcCyI6fepoXKK576ixd654OW7r bbM/oG0K6Rpkco8twGHGcj6J7Ut4lI4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:09 2025 by rpki-client