$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa File: f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa (raw, json) Hash identifier: JlZeJOuijzjXUEaZe6SmCGjygjywEmFH49WhPITSxWY= Subject key identifier: 21:F9:7D:A6:67:DC:AF:0D:56:27:20:F3:D5:66:A6:E6:16:5A:72:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78509D2CEE8F22122F0C000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.66.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:09:d2:ce:e8:f2:21:22:f0:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2d2687d6-1605-4a8c-b8e8-ec7beef8d075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:76:f8:7a:33:ff:66:94:e1:ca:94:04:74: f8:38:dd:50:25:ff:98:37:77:a3:44:89:7a:f9:d8: bc:40:8b:70:a9:3b:33:e5:68:8b:09:fc:6a:7d:61: 8d:23:14:5f:08:9c:60:de:75:87:23:54:3b:2d:ed: be:d0:bd:d4:ac:96:1f:0a:31:53:29:8d:0f:59:e3: de:b6:9a:7a:8a:0a:54:7e:71:a6:d5:02:31:44:95: 6b:6b:1a:dd:b2:dc:6b:96:43:de:f6:3a:8a:c5:d8: 75:82:a7:24:4b:b9:5f:42:cc:7f:fc:3f:34:96:c3: 73:ec:e2:b8:68:e4:20:ed:28:e5:11:24:b7:e7:dd: 81:0c:91:b7:d4:69:2b:c9:d4:95:b8:c1:51:d3:34: 15:cd:ed:09:b7:49:33:2a:56:4d:62:a0:0c:35:6e: 2f:27:c9:70:ba:c8:bd:5c:dc:ca:99:b0:ac:99:07: f9:ab:8b:10:30:31:5e:00:6a:09:8d:22:24:e5:de: 8c:24:c7:df:ff:6b:02:fb:4d:35:65:1f:ba:03:73: 87:11:31:4e:f6:68:2c:54:58:88:dc:9a:00:98:02: 11:98:65:52:4e:12:0f:42:03:6c:8b:ec:36:db:e1: ed:77:73:5e:88:26:4c:99:a2:2c:15:00:af:cb:87: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F9:7D:A6:67:DC:AF:0D:56:27:20:F3:D5:66:A6:E6:16:5A:72:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f085fb7c-1f5d-3e26-96e0-ab217bbf1346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:56:8c:72:ec:dd:9a:af:36:6d:56:91:37:3a:bc:14:02:6e: 42:2a:6e:f5:30:28:f8:d3:e6:5c:36:c4:53:df:a1:a1:ad:ae: 45:a8:71:eb:90:00:ee:9c:ce:3c:9b:62:66:28:8e:ee:23:3e: f1:82:16:4c:ef:38:01:22:22:c6:74:e2:fe:b4:c1:3d:71:9b: 65:0e:bb:44:75:ad:5d:f5:90:38:15:59:95:fb:69:b2:59:00: 96:31:d7:33:be:fb:0a:23:cb:0d:0b:87:26:b6:1d:af:85:b1: 7a:38:0d:a0:51:aa:f5:e3:00:ae:d9:b6:91:1a:77:f2:31:24: 6c:e4:b8:50:bb:77:ba:d3:10:9c:be:80:4d:73:17:07:b8:aa: 3a:8f:da:16:6c:78:1f:49:f1:5d:4d:60:35:88:7d:9a:77:d1: db:60:2b:71:80:17:bd:1e:5c:e2:ae:ce:09:7a:7b:cc:5b:a8: 33:a6:56:5a:31:87:7e:87:7f:b9:df:5d:e0:28:98:25:62:e6: 00:72:1e:97:5f:a3:b8:81:80:42:4c:d1:18:41:ca:6a:cf:6b: 7b:e2:ed:e8:55:93:63:3c:77:22:74:20:36:73:05:1f:9e:15: 13:e6:40:65:19:72:ea:e2:bf:a3:fa:3e:a1:35:55:18:79:c6: f8:11:65:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQnSzujyISLwwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmQyNjg3ZDYtMTYwNS00YThjLWI4ZTgtZWM3YmVlZjhkMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrh2+Hoz/2aU4cqUBHT4ON1QJf+YN3ejRIl6 +di8QItwqTsz5WiLCfxqfWGNIxRfCJxg3nWHI1Q7Le2+0L3UrJYfCjFTKY0PWePe tpp6igpUfnGm1QIxRJVraxrdstxrlkPe9jqKxdh1gqckS7lfQsx//D80lsNz7OK4 aOQg7SjlESS3592BDJG31GkrydSVuMFR0zQVze0Jt0kzKlZNYqAMNW4vJ8lwusi9 XNzKmbCsmQf5q4sQMDFeAGoJjSIk5d6MJMff/2sC+001ZR+6A3OHETFO9mgsVFiI 3JoAmAIRmGVSThIPQgNsi+w22+Htd3NeiCZMmaIsFQCvy4fPjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH5faZn3K8NVicg89VmpuYWWnKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA4NWZiN2MtMWY1ZC0z ZTI2LTk2ZTAtYWIyMTdiYmYxMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhWjHLs3ZqvNm1WkTc6vBQCbkIqbvUwKPjT5lw2xFPfoaGtrkWoceuQ AO6czjybYmYoju4jPvGCFkzvOAEiIsZ04v60wT1xm2UOu0R1rV31kDgVWZX7abJZ AJYx1zO++wojyw0Lhya2Ha+FsXo4DaBRqvXjAK7ZtpEad/IxJGzkuFC7d7rTEJy+ gE1zFwe4qjqP2hZseB9J8V1NYDWIfZp30dtgK3GAF70eXOKuzgl6e8xbqDOmVlox h36Hf7nfXeAomCVi5gByHpdfo7iBgEJM0RhBymrPa3vi7ehVk2M8dyJ0IDZzBR+e FRPmQGUZcuriv6P6PqE1VRh5xvgRZTY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:56 2025 by rpki-client