$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa File: dfebcbdf-d4e0-3652-832c-311510c65ca3.roa (raw, json) Hash identifier: i++UWUAeQuJ1wyy1kvCFHqW63+zOi974ttpeY6XTZGU= Subject key identifier: 58:FB:CB:7C:85:80:03:AB:89:A5:D4:6D:86:3A:77:1D:76:D2:97:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F1356DE122788149AB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.140.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f1:35:6d:e1:22:78:81:49:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=240d513c-493d-4701-85fc-3945654f05f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:ca:cb:7e:33:4c:d0:64:3b:e1:e7:ee:37: 57:d7:34:c6:f7:04:c1:e8:e4:c9:95:8d:cc:3c:2f: 5c:4a:5e:cd:f2:1f:ed:e4:68:ff:ca:bc:b9:64:ed: eb:e5:a9:e4:82:27:5f:cb:a8:02:d0:b9:d1:9b:08: c1:33:92:54:e9:44:89:ef:f3:d9:5d:fa:86:95:d7: ce:6a:01:10:00:73:86:4b:6f:53:74:de:00:18:51: 8d:e5:b4:10:17:44:c8:14:1b:3e:0b:7f:a5:8d:ea: 66:e7:e9:72:e7:f4:bb:4e:7c:b3:3b:17:6d:4a:52: 93:be:ef:17:7d:9e:a2:26:30:4f:b4:8f:a2:22:54: 65:d3:87:9d:8d:1c:9f:d8:1b:de:c0:c5:9f:b2:7c: 1c:32:c5:03:24:5c:bc:70:ec:d8:aa:42:1e:ea:82: 9c:fc:de:32:b4:95:14:b3:90:d7:06:45:df:16:1f: 80:76:32:29:0f:34:e3:ad:fc:41:3a:45:68:7f:44: 60:30:e7:9e:8e:88:8e:66:5d:02:7e:00:cb:38:14: 97:44:d7:37:44:61:40:35:0d:7c:d5:f6:93:5e:ed: 79:18:2e:57:12:2d:64:ec:a0:2e:dc:07:84:95:b5: a9:d3:da:b5:2a:5b:2e:bb:2b:10:00:fa:48:a4:c2: 8a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FB:CB:7C:85:80:03:AB:89:A5:D4:6D:86:3A:77:1D:76:D2:97:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dfebcbdf-d4e0-3652-832c-311510c65ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7f:68:af:10:fb:7c:81:e3:54:dc:46:e2:03:64:f2:6b:98: b0:41:8f:fa:be:4f:d6:34:cc:37:75:df:5f:14:43:d1:c2:c6: 2a:3f:c4:a0:17:f8:3b:17:74:b9:89:32:91:68:5d:44:68:52: 9a:8f:b0:6c:31:be:54:53:56:d9:95:ea:dd:27:89:c7:3d:5e: dd:27:05:65:cb:cb:8a:f8:22:7d:93:20:9d:7d:15:37:e6:89: 16:d1:a8:9c:f6:7c:8e:e3:2c:a9:13:41:8b:79:c3:cd:c5:21: 42:7f:b0:41:e6:d7:1b:c3:c8:25:c3:ed:b9:18:1f:04:a6:b5: 65:d3:4e:6a:5f:73:93:41:1e:89:ed:4b:96:50:42:51:17:56: 99:ae:4a:72:6f:e9:68:d4:90:4f:02:cc:ac:53:51:e1:67:9c: 79:83:e5:57:fa:36:8d:8f:25:78:96:93:7e:f8:01:d8:21:d0: d4:41:65:00:f6:39:32:a7:eb:de:cf:3a:08:9f:79:a1:9d:70: 16:3c:4e:f7:d2:ad:2d:98:6a:b6:19:81:57:07:9d:67:c2:79: f8:2a:4c:a2:d1:e5:67:bb:6d:9c:21:d2:d3:f8:05:68:c1:20: ed:c2:e1:f9:75:c9:05:22:09:db:d1:9c:f1:32:e3:de:ba:11: f0:66:d4:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPE1beEieIFJq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjQwZDUxM2MtNDkzZC00NzAxLTg1ZmMtMzk0NTY1NGYwNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP7Ky34zTNBkO+Hn7jdX1zTG9wTB6OTJlY3M PC9cSl7N8h/t5Gj/yry5ZO3r5ankgidfy6gC0LnRmwjBM5JU6USJ7/PZXfqGldfO agEQAHOGS29TdN4AGFGN5bQQF0TIFBs+C3+ljepm5+ly5/S7TnyzOxdtSlKTvu8X fZ6iJjBPtI+iIlRl04edjRyf2BvewMWfsnwcMsUDJFy8cOzYqkIe6oKc/N4ytJUU s5DXBkXfFh+AdjIpDzTjrfxBOkVof0RgMOeejoiOZl0CfgDLOBSXRNc3RGFANQ18 1faTXu15GC5XEi1k7KAu3AeElbWp09q1KlsuuysQAPpIpMKK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj7y3yFgAOriaXUbYY6dx120pfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGZlYmNiZGYtZDRlMC0z NjUyLTgzMmMtMzExNTEwYzY1Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl/aK8Q+3yB41TcRuIDZPJrmLBBj/q+T9Y0zDd1318UQ9HCxio/xKAX +DsXdLmJMpFoXURoUpqPsGwxvlRTVtmV6t0nicc9Xt0nBWXLy4r4In2TIJ19FTfm iRbRqJz2fI7jLKkTQYt5w83FIUJ/sEHm1xvDyCXD7bkYHwSmtWXTTmpfc5NBHont S5ZQQlEXVpmuSnJv6WjUkE8CzKxTUeFnnHmD5Vf6No2PJXiWk374Adgh0NRBZQD2 OTKn697POgifeaGdcBY8TvfSrS2YarYZgVcHnWfCefgqTKLR5We7bZwh0tP4BWjB IO3C4fl1yQUiCdvRnPEy4966EfBm1Fo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:17 2025 by rpki-client