$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddd2d7c8-6037-390d-b81b-4db0d024a13a.roa File: ddd2d7c8-6037-390d-b81b-4db0d024a13a.roa (raw, json) Hash identifier: oY0sYYUyFn/oI8KSPsP9QPzldYhFiVhvQ0oor8YexyU= Subject key identifier: BE:85:C9:E7:B2:20:86:D6:1D:6D:E8:99:7E:B3:63:89:EB:3C:95:07 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851662867D8DEA8802F140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddd2d7c8-6037-390d-b81b-4db0d024a13a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:16:62:86:7d:8d:ea:88:02:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1dcfaf20-c5ec-493f-b7ef-81f47d10f2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:68:4a:9b:f6:ba:f5:d2:5e:76:f8:17:95: c1:cc:e7:61:63:7d:7d:2a:8d:eb:ee:78:78:36:09: 55:ed:69:64:6c:a1:bb:13:ea:6d:13:9e:22:9d:1f: 56:f4:59:ca:9a:4e:99:5f:40:0d:3a:d4:97:cb:5a: 32:04:e7:12:e7:4f:31:6f:95:70:8b:8f:39:68:61: 0b:11:6b:40:b1:a9:ed:06:af:fe:4d:9d:e2:49:1b: a3:45:4b:e9:ef:0a:75:30:da:5c:8f:5e:b0:4d:90: 66:cd:43:bd:9e:23:cd:1a:0b:7a:a8:1a:d2:18:ac: 13:25:0c:ee:9c:fb:99:8b:dc:64:f6:69:33:6a:26: 4d:16:55:e4:da:fb:6f:7c:2b:1c:37:8a:8d:94:aa: f5:f0:a0:98:4d:6d:7c:19:99:6b:d2:89:0f:4e:4d: cc:99:ea:59:54:ed:fd:cf:46:92:c6:df:9e:9d:07: e0:3d:bd:26:3f:e6:1b:49:fc:d0:74:68:a0:03:81: e9:2b:0a:23:0e:64:4f:c1:ca:1b:14:d8:0b:8c:f0: 0d:e7:70:73:f5:4d:e8:7e:ed:c6:43:0d:85:96:12: fc:64:b3:8a:06:13:f9:46:0e:53:ec:1b:47:08:93: 8e:41:a6:a4:3f:fb:8c:33:a0:24:4c:d6:01:12:c6: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:C9:E7:B2:20:86:D6:1D:6D:E8:99:7E:B3:63:89:EB:3C:95:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddd2d7c8-6037-390d-b81b-4db0d024a13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fb:c2:26:22:5a:e4:c3:8b:15:11:7c:20:a5:05:5f:ce:3d: 24:90:2d:d9:3a:5f:95:e8:f3:5c:72:27:45:5c:fc:f1:5c:27: c2:a6:35:f9:cd:db:8c:d4:73:31:59:81:09:ac:23:d5:f6:05: 85:fc:ac:41:5c:1f:73:75:a3:21:da:04:2f:10:f4:f3:dd:f4: 88:12:f2:d9:97:83:af:26:4d:bc:8a:34:86:74:92:46:6a:a4: 8e:3f:52:1a:a9:96:60:ed:f3:99:77:97:ee:68:f0:76:13:ad: ab:5d:af:25:fc:a5:1d:65:31:ad:f2:bb:da:9b:36:bb:37:47: e9:ea:c4:94:8c:2e:76:84:96:6e:01:7c:59:78:3a:65:5f:1e: d2:02:07:9e:89:54:d8:bb:76:79:ed:8d:fc:38:a1:1a:6f:a4: 47:41:1f:34:76:f8:c9:de:f4:ae:c7:12:b4:25:14:39:45:44: 55:65:bc:3b:65:aa:18:f3:78:d5:15:8a:99:c3:90:b9:1a:b4: ac:47:f1:25:c1:90:7e:f1:f2:ab:91:d8:da:a4:7c:2d:a8:32: fc:ec:3e:dd:a4:03:3f:40:f0:ca:0b:19:18:23:8e:a2:51:60: c9:34:fe:e5:3a:a6:e6:ae:aa:37:19:eb:90:79:37:9f:3e:47: 7b:14:95:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRZihn2N6ogC8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWRjZmFmMjAtYzVlYy00OTNmLWI3ZWYtODFmNDdkMTBmMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUtoSpv2uvXSXnb4F5XBzOdhY319Ko3r7nh4 NglV7WlkbKG7E+ptE54inR9W9FnKmk6ZX0ANOtSXy1oyBOcS508xb5Vwi485aGEL EWtAsantBq/+TZ3iSRujRUvp7wp1MNpcj16wTZBmzUO9niPNGgt6qBrSGKwTJQzu nPuZi9xk9mkzaiZNFlXk2vtvfCscN4qNlKr18KCYTW18GZlr0okPTk3MmepZVO39 z0aSxt+enQfgPb0mP+YbSfzQdGigA4HpKwojDmRPwcobFNgLjPAN53Bz9U3ofu3G Qw2FlhL8ZLOKBhP5Rg5T7BtHCJOOQaakP/uMM6AkTNYBEsb6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6FyeeyIIbWHW3omX6zY4nrPJUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGRkMmQ3YzgtNjAzNy0z OTBkLWI4MWItNGRiMGQwMjRhMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT7wiYiWuTDixURfCClBV/OPSSQLdk6X5Xo81xyJ0Vc/PFcJ8KmNfnN 24zUczFZgQmsI9X2BYX8rEFcH3N1oyHaBC8Q9PPd9IgS8tmXg68mTbyKNIZ0kkZq pI4/UhqplmDt85l3l+5o8HYTratdryX8pR1lMa3yu9qbNrs3R+nqxJSMLnaElm4B fFl4OmVfHtICB56JVNi7dnntjfw4oRpvpEdBHzR2+Mne9K7HErQlFDlFRFVlvDtl qhjzeNUVipnDkLkatKxH8SXBkH7x8quR2NqkfC2oMvzsPt2kAz9A8MoLGRgjjqJR YMk0/uU6puauqjcZ65B5N58+R3sUlfg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:57 2025 by rpki-client