$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa File: dab1da17-7121-358f-a4af-219126da6697.roa (raw, json) Hash identifier: SljYpKUWrlbkUbJzdHTNkEFdCzY42cQSm2cTIXCBfLM= Subject key identifier: BC:AC:C7:4A:BB:A4:8A:89:2C:95:29:64:54:A9:9F:69:AB:CE:EB:CC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F7951F4B12E517E5C040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f7:95:1f:4b:12:e5:17:e5:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a9ee2311-2823-4872-9ec5-1f86d2bd2d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:aa:26:38:c6:25:26:b8:6a:6d:d4:25:c6:01: e6:86:dc:ab:7b:73:20:f1:9d:0b:6c:68:85:22:f6: 72:f7:60:14:6b:ae:68:57:0f:5f:12:db:73:57:64: d9:92:d6:53:e6:37:f5:71:87:e7:d6:87:31:5a:94: fa:64:81:8e:e8:b5:63:f8:54:1f:f3:20:0a:e0:2c: 9c:77:5a:2f:1b:b4:06:32:4c:c4:37:3b:ea:57:b8: 1f:d6:e0:19:f3:1e:a8:6c:c3:ac:80:d7:d0:1b:e7: be:df:2a:28:c1:35:30:49:b5:7b:c3:80:43:39:95: 33:3c:5b:50:16:ac:59:7a:17:5c:45:82:46:9b:0f: ce:91:a7:5a:2f:c6:a9:d3:57:fd:92:56:23:d3:39: 10:da:ad:9e:0d:50:c9:0d:70:44:7b:da:15:9b:a9: 86:19:64:ae:68:e3:f7:a2:d2:f0:2f:6e:6f:4e:02: 84:3b:ad:cd:1b:4a:3c:dc:45:50:43:31:02:1b:a5: e7:b6:ed:71:de:79:52:a5:b1:e5:15:2e:3c:d7:1a: f9:20:b9:40:e1:3f:ba:82:b0:6a:34:d4:2e:a1:20: b6:ae:84:ce:eb:18:19:09:1a:9e:65:83:5a:72:08: a8:28:ed:1c:3c:59:11:69:1a:25:4a:fd:7c:2c:5f: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AC:C7:4A:BB:A4:8A:89:2C:95:29:64:54:A9:9F:69:AB:CE:EB:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab1da17-7121-358f-a4af-219126da6697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f7:26:da:e3:57:2e:61:50:e9:09:65:23:fc:66:d4:26:44: 4c:7d:a9:db:7b:60:b4:84:53:d2:c0:79:7b:f3:e4:f4:90:8a: 30:2a:80:0f:8e:d1:90:fa:b8:15:ab:f5:33:00:fd:63:7d:7c: d7:6b:0a:99:e7:79:21:ab:90:b5:3e:db:85:a6:d9:d7:a4:7b: b2:cb:72:e8:21:70:3e:1e:80:ba:d3:c3:22:da:90:de:77:e3: 23:12:d6:d3:ad:ed:3b:b0:09:38:0c:72:48:ef:d2:7b:8e:c5: 48:05:8c:03:bc:0b:f4:be:63:40:33:1f:de:16:bd:02:06:ad: 82:51:09:08:73:5a:bb:af:2e:97:29:41:0a:6c:7c:ce:2d:c1: 39:01:c8:98:ea:51:e8:e7:8a:c9:d3:ca:00:42:10:07:b6:23: ec:23:d3:2b:5a:07:af:db:33:89:5f:eb:28:c9:d5:46:10:7b: 82:4e:24:35:55:3b:de:d0:d2:99:33:2c:70:23:2f:c0:80:dd: e9:a8:2d:a9:5b:d3:d2:d2:19:93:06:a5:32:ab:b4:a4:0b:7b: ea:a2:d7:0e:bc:73:e6:f6:a6:27:2b:f7:9a:60:a6:7c:8c:ba: 12:c4:18:8d:c8:41:21:3c:f5:1e:f4:b7:aa:57:cb:66:05:73: d3:b0:d3:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPeVH0sS5RflwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTllZTIzMTEtMjgyMy00ODcyLTllYzUtMWY4NmQyYmQyZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaomOMYlJrhqbdQlxgHmhtyre3Mg8Z0LbGiF IvZy92AUa65oVw9fEttzV2TZktZT5jf1cYfn1ocxWpT6ZIGO6LVj+FQf8yAK4Cyc d1ovG7QGMkzENzvqV7gf1uAZ8x6obMOsgNfQG+e+3yoowTUwSbV7w4BDOZUzPFtQ FqxZehdcRYJGmw/OkadaL8ap01f9klYj0zkQ2q2eDVDJDXBEe9oVm6mGGWSuaOP3 otLwL25vTgKEO63NG0o83EVQQzECG6Xntu1x3nlSpbHlFS481xr5ILlA4T+6grBq NNQuoSC2roTO6xgZCRqeZYNacgioKO0cPFkRaRolSv18LF+/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLysx0q7pIqJLJUpZFSpn2mrzuvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGFiMWRhMTctNzEyMS0z NThmLWE0YWYtMjE5MTI2ZGE2Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIooAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj3JtrjVy5hUOkJZSP8ZtQmREx9qdt7YLSEU9LAeXvz5PSQijAqgA+O 0ZD6uBWr9TMA/WN9fNdrCpnneSGrkLU+24Wm2deke7LLcughcD4egLrTwyLakN53 4yMS1tOt7TuwCTgMckjv0nuOxUgFjAO8C/S+Y0AzH94WvQIGrYJRCQhzWruvLpcp QQpsfM4twTkByJjqUejnisnTygBCEAe2I+wj0ytaB6/bM4lf6yjJ1UYQe4JOJDVV O97Q0pkzLHAjL8CA3emoLalb09LSGZMGpTKrtKQLe+qi1w68c+b2picr95pgpnyM uhLEGI3IQSE89R70t6pXy2YFc9Ow05s= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:51 2025 by rpki-client