$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa File: f11069b8-0d35-380f-acb1-1cd190315ba7.roa (raw, json) Hash identifier: VuCrukjmbrZ5DCC4Q3GiP4D6MVlFD/ATcywCig1w8Wg= Subject key identifier: 47:BF:A6:22:FE:BA:F3:8F:F0:01:45:04:03:60:3B:21:9F:6B:4A:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850753A7620282F11E7A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.20.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:07:53:a7:62:02:82:f1:1e:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0e180c80-c598-4c69-9abf-9005b5e69dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:60:37:e9:22:0c:14:27:43:e1:21:28:7c: 71:21:e8:00:35:98:08:89:ba:85:e5:cf:1d:48:48: 25:61:29:59:51:d6:ae:27:94:9f:ab:0b:9e:75:e4: 1c:e5:bc:e9:2a:b4:aa:8c:53:29:7b:7e:9b:44:62: 86:43:ae:a7:a9:5b:f0:90:83:8d:74:1c:7f:57:ab: e8:e8:ac:64:60:64:08:78:80:cc:24:7a:95:a3:8f: b0:9f:47:82:d8:2f:bb:f6:4d:2b:0f:cc:a6:0a:02: 99:75:ea:83:a1:3e:ac:6d:57:cf:5c:5d:ef:91:0d: ae:70:69:cd:7e:ee:bd:01:b9:e8:06:e7:db:2f:3d: f5:be:67:c7:b7:8c:ef:68:8c:e1:44:ab:bd:b0:21: 99:44:c8:38:5a:0f:76:66:c9:eb:9e:97:98:82:09: 65:e2:7a:0a:15:2a:1a:3f:01:69:12:e2:c0:f7:0f: 8e:85:bc:e6:4c:4b:57:02:3e:d3:d7:0b:59:01:98: 09:7b:7e:86:85:ac:77:0b:99:6d:e5:9c:bd:99:78: f7:08:f8:5c:bf:93:c0:f8:f2:a4:aa:b2:e4:ae:84: 76:77:a7:76:83:b5:ed:16:9b:2a:c9:13:6e:24:8f: a0:ef:97:b7:85:21:3b:47:a0:99:22:90:9b:cc:f1: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:A6:22:FE:BA:F3:8F:F0:01:45:04:03:60:3B:21:9F:6B:4A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.20.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:23:7d:5e:57:bf:96:f9:96:ad:f9:e3:a3:e9:ad:71:2b:3d: e1:77:83:a3:87:db:34:0f:03:65:94:91:c1:3f:a5:a2:59:31: 4c:6f:16:38:ea:b4:8e:72:7e:79:52:bd:78:66:29:8b:99:65: a3:2d:93:bf:5b:dd:d2:e7:12:f9:49:eb:22:70:60:26:60:ff: d2:94:65:8a:19:73:9b:c1:5e:ae:53:73:01:36:36:04:6d:36: 09:48:7c:04:f1:a4:ea:c1:b1:3b:8d:9f:12:c5:69:19:98:95: b0:b7:72:9e:ad:1d:20:98:d4:c2:cc:e3:09:7c:71:c1:f5:fc: 8e:66:34:37:85:5d:fb:87:78:d0:4f:3c:28:f9:98:62:8a:1e: 7c:4a:50:4b:3b:ce:12:19:96:6d:19:e8:df:97:44:db:dd:c8: f7:6f:e3:29:3a:4b:b2:2b:d2:2e:61:61:5a:75:ea:85:0b:6e: 6e:55:9b:ab:3e:79:7d:fe:fb:84:2e:b2:09:8d:16:72:20:14: 5c:5b:a0:c9:7a:97:37:8d:6c:ce:d5:60:6d:f2:c9:f1:5e:7d: a2:05:da:ef:66:9c:e7:ae:fd:e6:9c:ac:4c:ca:24:ca:5c:3d: a7:bd:fd:61:f2:59:39:3a:b1:38:34:a8:cb:31:16:df:6a:8d: c2:80:f6:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQdTp2ICgvEeegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGUxODBjODAtYzU5OC00YzY5LTlhYmYtOTAwNWI1ZTY5ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvhgN+kiDBQnQ+EhKHxxIegANZgIibqF5c8d SEglYSlZUdauJ5SfqwuedeQc5bzpKrSqjFMpe36bRGKGQ66nqVvwkIONdBx/V6vo 6KxkYGQIeIDMJHqVo4+wn0eC2C+79k0rD8ymCgKZdeqDoT6sbVfPXF3vkQ2ucGnN fu69AbnoBufbLz31vmfHt4zvaIzhRKu9sCGZRMg4Wg92ZsnrnpeYggll4noKFSoa PwFpEuLA9w+OhbzmTEtXAj7T1wtZAZgJe36Ghax3C5lt5Zy9mXj3CPhcv5PA+PKk qrLkroR2d6d2g7XtFpsqyRNuJI+g75e3hSE7R6CZIpCbzPGc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe/piL+uvOP8AFFBANgOyGfa0qEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjExMDY5YjgtMGQzNS0z ODBmLWFjYjEtMWNkMTkwMzE1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACojfV5Xv5b5lq3546PprXErPeF3g6OH2zQPA2WUkcE/paJZMUxvFjjq tI5yfnlSvXhmKYuZZaMtk79b3dLnEvlJ6yJwYCZg/9KUZYoZc5vBXq5TcwE2NgRt NglIfATxpOrBsTuNnxLFaRmYlbC3cp6tHSCY1MLM4wl8ccH1/I5mNDeFXfuHeNBP PCj5mGKKHnxKUEs7zhIZlm0Z6N+XRNvdyPdv4yk6S7Ir0i5hYVp16oULbm5Vm6s+ eX3++4QusgmNFnIgFFxboMl6lzeNbM7VYG3yyfFefaIF2u9mnOeu/eacrEzKJMpc Pae9/WHyWTk6sTg0qMsxFt9qjcKA9mQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:33 2025 by rpki-client