$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de0654b5-de99-3072-99d9-b4082dd167e6.roa File: de0654b5-de99-3072-99d9-b4082dd167e6.roa (raw, json) Hash identifier: 5qy5HeBfLP7RPLKa4Xecu9cbpOpVhje16m7NGiAqlRI= Subject key identifier: 5A:B2:7E:34:86:2A:9C:FB:3D:33:A5:C4:F8:9F:0D:45:0D:15:AF:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853B278FCD7D1E46F000A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de0654b5-de99-3072-99d9-b4082dd167e6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.136.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3b:27:8f:cd:7d:1e:46:f0:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b9a8bcf0-84a2-4959-a225-ac326782522f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:bd:db:bc:87:84:48:42:00:5f:70:f1:4b: 9d:8d:fe:37:62:34:76:d4:49:01:f1:0f:98:76:cf: 29:ec:68:cd:f0:58:5d:90:01:1c:a7:d4:e8:55:0f: 15:31:dc:19:dc:45:3d:53:41:a4:38:2d:3c:13:1e: 3b:c9:88:40:9e:bd:c8:56:c6:4f:e1:16:fd:25:b2: b0:01:22:98:3e:67:73:67:d2:9e:dc:e8:47:51:08: c7:33:92:8a:f9:41:d2:d5:97:11:8b:01:02:f3:54: 4e:30:2b:41:9d:f8:11:32:8d:7e:d1:37:fb:d8:ec: df:bb:da:79:bd:f2:c4:c3:31:97:a2:39:ea:6c:fe: c4:19:8c:74:d7:aa:f0:1d:ce:a2:a2:74:b5:e9:f3: b2:89:04:bd:1b:3a:1c:b4:21:e8:32:2b:1b:b4:f0: 9e:35:23:5b:ab:e5:5b:b5:d0:7f:23:f1:14:04:2d: 3f:d3:a5:8b:56:62:28:86:47:b7:f9:c0:6f:cf:56: 6c:4e:3d:76:3f:23:33:b3:f5:c7:6d:55:c6:9b:dd: db:27:15:1e:68:bc:6f:43:fd:5e:db:97:39:e5:ef: 48:28:2b:0a:69:eb:01:66:99:c6:4e:0b:fc:65:a8: 2a:5c:33:38:d2:cf:56:63:8f:5e:d6:42:06:ef:ee: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B2:7E:34:86:2A:9C:FB:3D:33:A5:C4:F8:9F:0D:45:0D:15:AF:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de0654b5-de99-3072-99d9-b4082dd167e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:00:9a:b5:01:49:ae:ba:0b:fd:47:fd:2a:c2:e6:d1:3b:95: 69:ba:f6:18:f0:85:90:34:51:66:90:bb:54:fc:ea:23:b7:8f: b9:9d:78:56:2b:61:c9:6a:5e:c1:0c:c1:55:20:53:6e:06:b0: db:60:3c:21:dd:25:a4:92:88:29:fb:b1:ac:d8:a1:f5:b0:a4: e7:0f:91:fe:31:1a:85:91:96:a1:7a:1f:26:41:c7:08:2b:77: 8a:aa:51:76:ec:21:a1:de:30:17:1f:0d:89:59:7f:e7:17:65: a6:c8:5a:1f:f6:ae:c8:be:4c:58:d6:5c:2b:8c:85:ea:d8:27: 83:71:90:f5:3f:18:b3:ec:0b:3a:4c:35:d9:2d:fc:c3:8b:d4: 15:bc:1f:65:d3:6a:19:18:45:be:ac:83:b4:d7:b7:f2:ff:c5: e9:4b:8b:05:e4:df:29:2f:2d:9a:5b:a0:0a:53:82:21:74:25: 84:5d:e3:37:52:0f:ce:e4:d2:fb:90:85:eb:49:fd:e6:07:b9: ef:d7:02:2f:28:61:c9:9b:8d:21:46:f6:d9:2a:4d:61:01:8f: f2:91:51:19:de:2f:ed:d4:d9:dc:ef:c1:31:9b:02:f8:51:73: ac:9f:db:ef:24:92:84:31:71:31:db:a5:41:7c:1f:75:84:70: 8a:7f:d9:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTsnj819HkbwAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjlhOGJjZjAtODRhMi00OTU5LWEyMjUtYWMzMjY3ODI1MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DK927yHhEhCAF9w8Uudjf43YjR21EkB8Q+Y ds8p7GjN8FhdkAEcp9ToVQ8VMdwZ3EU9U0GkOC08Ex47yYhAnr3IVsZP4Rb9JbKw ASKYPmdzZ9Ke3OhHUQjHM5KK+UHS1ZcRiwEC81ROMCtBnfgRMo1+0Tf72Ozfu9p5 vfLEwzGXojnqbP7EGYx016rwHc6ionS16fOyiQS9GzoctCHoMisbtPCeNSNbq+Vb tdB/I/EUBC0/06WLVmIohke3+cBvz1ZsTj12PyMzs/XHbVXGm93bJxUeaLxvQ/1e 25c55e9IKCsKaesBZpnGTgv8ZagqXDM40s9WY49e1kIG7+4GtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqyfjSGKpz7PTOlxPifDUUNFa8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGUwNjU0YjUtZGU5OS0z MDcyLTk5ZDktYjQwODJkZDE2N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIohQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoAmrUBSa66C/1H/SrC5tE7lWm69hjwhZA0UWaQu1T86iO3j7mdeFYr YclqXsEMwVUgU24GsNtgPCHdJaSSiCn7sazYofWwpOcPkf4xGoWRlqF6HyZBxwgr d4qqUXbsIaHeMBcfDYlZf+cXZabIWh/2rsi+TFjWXCuMherYJ4NxkPU/GLPsCzpM Ndkt/MOL1BW8H2XTahkYRb6sg7TXt/L/xelLiwXk3ykvLZpboApTgiF0JYRd4zdS D87k0vuQhetJ/eYHue/XAi8oYcmbjSFG9tkqTWEBj/KRURneL+3U2dzvwTGbAvhR c6yf2+8kkoQxcTHbpUF8H3WEcIp/2So= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:17 2025 by rpki-client