$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbc1589d-0f97-31dd-abe4-89de12fc4198.roa File: dbc1589d-0f97-31dd-abe4-89de12fc4198.roa (raw, json) Hash identifier: 21BE6Z9JLV99jOwYtZqy7QRHoayxYJHEm6J56xYwjqw= Subject key identifier: B4:DA:90:10:B2:DA:84:6B:40:3E:E1:E2:B9:7C:DF:7B:68:75:7F:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DF0F92D4111DC3870470 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbc1589d-0f97-31dd-abe4-89de12fc4198.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.85.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:0f:92:d4:11:1d:c3:87:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=748fef7a-ffa9-4059-a9a5-55f148cb54b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:9e:b5:a1:be:b3:86:94:62:ad:81:b6:1b: 84:a1:b1:e5:98:03:90:44:c9:ad:f5:0f:89:9d:78: e8:9c:a3:62:13:d4:f1:d5:83:46:e0:f5:97:05:7d: 03:e3:64:e8:4c:c0:63:4d:5c:e1:f2:82:f4:04:f7: 68:65:67:88:d4:85:fc:29:c6:66:0d:8c:9a:6f:9f: 69:a1:b8:9d:59:a1:6b:80:78:5d:92:f3:14:f5:bf: 96:55:a7:bb:1c:9c:de:53:f7:4c:10:83:66:67:f7: 35:ce:6b:10:24:0e:3a:27:c2:8f:98:8a:6d:81:45: 79:bd:bb:40:8e:45:eb:27:56:56:aa:77:de:ca:3d: bb:98:06:ef:43:b0:16:e7:d4:d8:f3:0e:22:9f:c5: 3e:0b:78:3e:25:3c:e0:20:59:3c:14:26:88:36:42: 3d:f9:9a:da:94:1f:c3:7a:ce:8d:4a:53:76:20:5d: a2:2b:9b:fb:74:24:d4:71:ff:64:e1:c0:90:6d:48: 66:db:b2:5b:ac:38:28:b5:14:63:a3:c7:e7:49:ab: f5:42:b0:67:49:86:2e:91:ff:11:54:7f:bf:a1:04: fe:21:c0:90:cf:6a:2d:96:4a:2c:b8:f2:79:f1:cd: 38:af:a8:84:f6:ad:f2:a0:db:fa:a1:53:bb:d6:6d: a4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:90:10:B2:DA:84:6B:40:3E:E1:E2:B9:7C:DF:7B:68:75:7F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dbc1589d-0f97-31dd-abe4-89de12fc4198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a3:2b:c0:b2:d3:d6:67:bd:8b:fc:17:08:24:0e:9e:fb:8d: 96:52:ec:62:96:fc:7c:4a:2f:fa:09:de:de:e0:9d:91:ab:e9: 17:89:b3:3f:44:a6:1e:c9:85:d5:f1:a0:01:94:e7:d4:4c:f4: cd:bf:69:bd:16:d4:21:38:e8:22:e9:a5:3e:59:73:f7:b4:c9: 0c:9d:b7:db:fe:7b:ec:1a:14:c9:c6:36:30:8e:c9:a5:c0:5b: 9f:c5:21:a5:3f:6d:b8:a8:ba:d2:29:63:21:e3:9f:38:ff:ed: 00:ae:b4:d7:df:88:64:65:05:91:a9:14:55:36:43:e5:64:a6: 43:96:4c:f1:c7:48:72:cb:d0:17:bc:2f:47:56:94:df:2b:d6: 33:6f:64:71:22:a3:26:6b:1d:de:aa:8a:a4:78:85:19:59:fe: ad:01:55:66:c5:8c:49:7a:46:c9:07:ae:9a:b6:46:c0:df:df: 08:d5:8c:c1:ec:33:ea:66:68:42:95:08:41:fb:4e:88:12:d2: e0:59:cd:72:4e:73:0f:4c:42:d4:74:32:d8:17:49:a0:1e:ff: f1:0e:de:2e:2b:76:7c:e1:32:2c:a8:32:1c:00:d7:54:94:d4: e4:79:e9:78:fb:7d:04:2d:23:99:6f:5f:e0:d3:84:38:d0:7c: bf:5e:ac:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN8PktQRHcOHBHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzQ4ZmVmN2EtZmZhOS00MDU5LWE5YTUtNTVmMTQ4Y2I1NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB6etaG+s4aUYq2BthuEobHlmAOQRMmt9Q+J nXjonKNiE9Tx1YNG4PWXBX0D42ToTMBjTVzh8oL0BPdoZWeI1IX8KcZmDYyab59p obidWaFrgHhdkvMU9b+WVae7HJzeU/dMEINmZ/c1zmsQJA46J8KPmIptgUV5vbtA jkXrJ1ZWqnfeyj27mAbvQ7AW59TY8w4in8U+C3g+JTzgIFk8FCaINkI9+ZralB/D es6NSlN2IF2iK5v7dCTUcf9k4cCQbUhm27JbrDgotRRjo8fnSav1QrBnSYYukf8R VH+/oQT+IcCQz2otlkosuPJ58c04r6iE9q3yoNv6oVO71m2k1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTakBCy2oRrQD7h4rl833todX+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGJjMTU4OWQtMGY5Ny0z MWRkLWFiZTQtODlkZTEyZmM0MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByjK8Cy09ZnvYv8FwgkDp77jZZS7GKW/HxKL/oJ3t7gnZGr6ReJsz9E ph7JhdXxoAGU59RM9M2/ab0W1CE46CLppT5Zc/e0yQydt9v+e+waFMnGNjCOyaXA W5/FIaU/bbioutIpYyHjnzj/7QCutNffiGRlBZGpFFU2Q+VkpkOWTPHHSHLL0Be8 L0dWlN8r1jNvZHEioyZrHd6qiqR4hRlZ/q0BVWbFjEl6RskHrpq2RsDf3wjVjMHs M+pmaEKVCEH7TogS0uBZzXJOcw9MQtR0MtgXSaAe//EO3i4rdnzhMiyoMhwA11SU 1OR56Xj7fQQtI5lvX+DThDjQfL9erPQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:15 2025 by rpki-client