$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db6a0762-25f1-3560-b21c-6b7fb87b2209.roa File: db6a0762-25f1-3560-b21c-6b7fb87b2209.roa (raw, json) Hash identifier: gCEUgD753PjGMC1oJl8zdGwQYKNPT7mOhKmt7AS/Q1s= Subject key identifier: 01:F3:82:14:A0:03:77:43:A5:91:7E:C3:ED:93:68:00:50:47:72:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DF9691086E64799D8900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db6a0762-25f1-3560-b21c-6b7fb87b2209.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.85.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:96:91:08:6e:64:79:9d:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e3dbb279-219c-48f2-8dce-0178a9e5d57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:dd:44:bc:dc:b2:e0:35:66:32:65:59:cb: 68:d4:98:88:14:4e:2f:e0:b2:43:50:4d:b0:a2:92: ee:23:00:f1:80:fd:53:48:0c:c4:23:ad:86:e1:2b: 18:f9:de:3b:bd:2f:a2:3c:79:a8:e1:83:52:69:40: d2:3e:1f:56:7a:83:28:14:5c:c2:c8:b6:36:48:e4: a3:3f:a0:bd:10:25:67:e9:d6:8c:d0:c0:f1:6d:d2: f4:03:87:95:7a:42:b6:a7:dc:9d:86:76:2b:d4:fc: 0c:3c:99:0a:83:a1:53:50:5f:a1:2f:f6:8f:0f:90: 57:e7:22:60:ed:f5:25:9f:a0:43:7c:11:f8:32:5b: 4c:74:0e:85:6f:91:88:8f:03:a8:5f:fc:2e:3b:9b: f0:ef:20:ef:4e:c7:35:0d:c6:98:c6:9c:f3:d4:28: 2f:ad:96:11:02:61:e5:24:e9:03:f6:78:68:bc:1b: eb:0a:1f:db:b5:8b:15:49:9e:c0:f2:ae:a7:58:f7: a3:ac:27:46:e7:80:dc:f4:3e:7b:c8:d1:87:04:64: eb:e0:93:ab:49:86:ab:7b:2d:6f:45:5c:5b:1e:ce: 90:b9:c3:ee:7e:f5:28:d5:f6:22:cf:57:f2:a1:50: 90:0a:05:d9:5d:22:68:f4:5b:38:1b:69:d5:19:b3: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F3:82:14:A0:03:77:43:A5:91:7E:C3:ED:93:68:00:50:47:72:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db6a0762-25f1-3560-b21c-6b7fb87b2209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:16:52:b8:b9:d7:ff:81:bf:c8:a9:ad:b3:fd:52:ab:dc:81: 77:c4:15:23:4d:bf:8a:30:ab:45:68:bd:7d:0b:fe:c3:cc:4b: 6d:34:31:fd:ad:0d:09:5c:2e:85:55:d0:a3:2d:4c:44:90:5b: 7e:90:ce:8f:fb:8e:c8:eb:77:7c:62:08:99:47:75:ac:61:ee: d8:4c:07:0c:cd:6b:a1:b5:0f:71:44:79:16:7f:f1:14:46:4b: 3f:53:39:37:3c:cf:51:26:34:b3:5c:f1:0b:4f:6e:10:5a:d7: 30:60:f4:4d:03:62:09:b4:8b:e9:31:24:9e:a0:ba:5a:62:0a: dd:6d:57:21:41:e5:ea:7b:11:2a:39:7b:8f:9b:9c:7c:f1:3e: 51:c6:42:34:68:b6:47:d6:c6:05:55:9c:91:d2:85:09:b9:c9: 9c:14:69:16:c2:6e:5d:41:cc:e3:97:60:e0:01:b9:fd:3a:4a: 5e:c8:c5:00:99:b0:59:60:90:44:51:27:58:ae:dc:90:10:e2: ae:d1:b1:54:40:fd:2a:8d:de:d8:7a:99:12:7a:03:61:70:e1: 04:84:5f:bc:38:f4:5d:d6:0a:bd:d7:57:18:0c:c1:7e:47:6d: 10:13:b0:79:8f:97:92:02:43:d2:e0:27:17:9c:82:92:36:df: 3f:c2:9e:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN+WkQhuZHmdiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTNkYmIyNzktMjE5Yy00OGYyLThkY2UtMDE3OGE5ZTVkNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQbdRLzcsuA1ZjJlWcto1JiIFE4v4LJDUE2w opLuIwDxgP1TSAzEI62G4SsY+d47vS+iPHmo4YNSaUDSPh9WeoMoFFzCyLY2SOSj P6C9ECVn6daM0MDxbdL0A4eVekK2p9ydhnYr1PwMPJkKg6FTUF+hL/aPD5BX5yJg 7fUln6BDfBH4MltMdA6Fb5GIjwOoX/wuO5vw7yDvTsc1DcaYxpzz1CgvrZYRAmHl JOkD9nhovBvrCh/btYsVSZ7A8q6nWPejrCdG54Dc9D57yNGHBGTr4JOrSYarey1v RVxbHs6QucPufvUo1fYiz1fyoVCQCgXZXSJo9Fs4G2nVGbNxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHzghSgA3dDpZF+w+2TaABQR3I8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI2YTA3NjItMjVmMS0z NTYwLWIyMWMtNmI3ZmI4N2IyMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4WUri51/+Bv8iprbP9UqvcgXfEFSNNv4owq0VovX0L/sPMS200Mf2t DQlcLoVV0KMtTESQW36Qzo/7jsjrd3xiCJlHdaxh7thMBwzNa6G1D3FEeRZ/8RRG Sz9TOTc8z1EmNLNc8QtPbhBa1zBg9E0DYgm0i+kxJJ6gulpiCt1tVyFB5ep7ESo5 e4+bnHzxPlHGQjRotkfWxgVVnJHShQm5yZwUaRbCbl1BzOOXYOABuf06Sl7IxQCZ sFlgkERRJ1iu3JAQ4q7RsVRA/SqN3th6mRJ6A2Fw4QSEX7w49F3WCr3XVxgMwX5H bRATsHmPl5ICQ9LgJxecgpI23z/CngM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:24 2025 by rpki-client