$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa File: f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa (raw, json) Hash identifier: r7scGCEZnX4OhCDJSZj4Icoc0XbXU2UH1rmDC7vClTU= Subject key identifier: 00:67:13:9A:0D:E9:EC:26:96:67:D4:B3:02:C3:01:AE:D0:40:8A:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EC771401212EF9FD4550 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.145.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ec:77:14:01:21:2e:f9:fd:45:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1d2f6f1c-4ed2-49e0-9b7a-022d520f4b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:cc:3c:b1:0a:45:24:2d:42:ca:89:f5:f8: aa:e9:3b:88:41:0f:44:c8:be:10:7d:3b:2d:74:40: 51:45:d1:c1:c5:a2:1e:4f:84:2c:58:06:42:18:ef: 9c:28:d6:ec:91:ed:a0:a7:35:31:54:b2:d5:64:19: 48:6d:ad:db:f2:74:1d:24:09:71:df:a6:0f:82:95: 9b:35:42:8d:f1:ca:21:2d:60:ba:9a:2e:06:af:52: c1:21:97:18:bb:bf:7d:8b:0e:d3:87:35:b2:4e:df: e3:23:05:ba:a3:53:ae:d3:e3:7e:26:33:ab:81:13: 1d:6f:4a:2a:eb:96:63:c2:e8:52:42:c7:41:97:c4: d4:80:69:55:f3:0e:af:45:38:80:0d:25:99:89:44: ad:a8:61:9f:87:d1:d5:ec:ab:4c:f1:42:b5:bf:19: 3c:6e:4b:3e:62:76:18:46:8f:33:b7:fa:21:a0:7a: 6d:76:88:89:e1:71:48:b0:71:b0:ef:c3:62:e9:0d: 48:40:2c:ba:72:2b:d2:5a:06:0e:89:4f:c5:f2:c4: 1d:b9:b6:99:28:37:88:71:95:c1:d4:41:00:a3:b6: d5:82:5a:5f:11:25:d7:94:e1:c7:6b:e8:7d:82:4d: 7a:69:23:0f:90:a2:72:f7:fc:e4:ec:1b:c3:66:41: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:13:9A:0D:E9:EC:26:96:67:D4:B3:02:C3:01:AE:D0:40:8A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f9:ef:3a:8b:8d:e4:fd:45:b9:c6:5d:5c:af:f7:d4:c9:57: 68:46:1e:19:be:74:a9:09:cf:c0:f5:52:6a:2f:99:79:df:7d: bb:c4:7e:33:be:c1:b6:e3:1f:cb:70:e8:3f:16:13:07:6f:24: 4b:b0:3f:90:00:c5:e1:bc:66:ae:8f:4a:a9:a3:e1:c4:8e:99: 96:b1:65:b3:24:dd:3f:9d:8f:73:23:cc:04:78:71:a0:22:cd: 2c:4e:66:4c:ae:77:06:76:9a:98:b5:fa:fe:ea:7d:5b:1d:18: 35:82:68:7e:fc:6a:dd:7b:54:f5:8e:eb:87:c9:92:ab:b4:b2: 6b:b8:23:d1:47:88:e3:5c:00:6c:61:c4:47:3e:c2:35:cf:c2: 8a:8d:8a:c4:d7:87:dd:21:ae:de:dd:14:c4:55:05:63:4a:e2: f8:12:69:7a:ed:9d:be:07:46:1a:4f:a0:1b:01:b6:c4:be:27: 07:1e:2a:18:60:1d:18:f6:ae:78:b5:3c:b8:7e:a3:61:d5:e8: aa:d6:97:3e:58:18:29:9e:d1:ff:de:f6:81:75:39:0c:84:0d: de:5d:9a:ce:f1:79:fb:ce:4d:6e:ad:33:84:41:78:7e:0c:b1: 5a:49:a6:84:d0:27:eb:d0:85:b9:de:55:ad:6d:0c:1f:ab:ab: 7f:3e:d8:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOx3FAEhLvn9RVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWQyZjZmMWMtNGVkMi00OWUwLTliN2EtMDIyZDUyMGY0YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytbMPLEKRSQtQsqJ9fiq6TuIQQ9EyL4QfTst dEBRRdHBxaIeT4QsWAZCGO+cKNbske2gpzUxVLLVZBlIba3b8nQdJAlx36YPgpWb NUKN8cohLWC6mi4Gr1LBIZcYu799iw7ThzWyTt/jIwW6o1Ou0+N+JjOrgRMdb0oq 65ZjwuhSQsdBl8TUgGlV8w6vRTiADSWZiUStqGGfh9HV7KtM8UK1vxk8bks+YnYY Ro8zt/ohoHptdoiJ4XFIsHGw78Ni6Q1IQCy6civSWgYOiU/F8sQdubaZKDeIcZXB 1EEAo7bVglpfESXXlOHHa+h9gk16aSMPkKJy9/zk7BvDZkHDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABnE5oN6ewmlmfUswLDAa7QQIriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjJjMWM1MTMtYzQ3YS0z N2JmLWFkZTAtZDU3Yjg3NWM3ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB757zqLjeT9RbnGXVyv99TJV2hGHhm+dKkJz8D1UmovmXnffbvEfjO+ wbbjH8tw6D8WEwdvJEuwP5AAxeG8Zq6PSqmj4cSOmZaxZbMk3T+dj3MjzAR4caAi zSxOZkyudwZ2mpi1+v7qfVsdGDWCaH78at17VPWO64fJkqu0smu4I9FHiONcAGxh xEc+wjXPwoqNisTXh90hrt7dFMRVBWNK4vgSaXrtnb4HRhpPoBsBtsS+JwceKhhg HRj2rni1PLh+o2HV6KrWlz5YGCme0f/e9oF1OQyEDd5dms7xefvOTW6tM4RBeH4M sVpJpoTQJ+vQhbneVa1tDB+rq38+2No= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:24 2025 by rpki-client