$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa File: fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa (raw, json) Hash identifier: s8mxpqVgctVlXgemrNOCjEJddUZtj4xBn0Vuc1wIhj8= Subject key identifier: DB:53:91:EF:C1:9D:EA:FF:59:16:28:7A:33:F5:CD:44:21:11:92:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785085DCE9F2BEC35093240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.134.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:08:5d:ce:9f:2b:ec:35:09:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=63254b4a-50f0-4864-a74e-7e6c0d8859ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:b1:43:bf:83:c9:92:f0:e0:a5:c2:91:d7: b9:6f:bb:17:20:1d:f7:3b:6d:28:52:c8:02:d6:9f: 51:41:78:df:59:b3:1e:29:07:33:4c:c8:cf:63:d9: 0c:0c:f2:c5:6e:b9:c8:38:fc:fc:5d:67:73:f8:95: ba:6b:c3:92:e8:be:90:61:3b:e5:15:cd:a6:4d:75: be:23:37:d6:71:7f:62:78:b1:df:76:89:c3:7d:2c: f7:96:7d:b7:7d:51:e7:92:bc:d8:e8:15:5b:d0:a7: 61:30:d2:c4:0e:c8:2c:94:d0:3a:31:87:f5:a3:4c: 5d:a0:9b:6c:0e:7c:b9:11:d2:99:b1:ac:fd:d3:c9: 23:3a:1a:ac:2a:00:2f:c6:6f:1c:9d:bf:1c:b8:32: dd:c0:44:dd:da:2d:96:6d:28:2d:b0:37:42:d8:2f: 59:e8:1e:a8:aa:e2:7a:08:0f:af:97:cf:36:74:33: 9b:ef:d7:45:bc:4a:08:5d:6c:bc:2d:15:c0:a6:f8: c6:19:de:b5:0c:a9:64:a4:9c:69:25:d4:86:75:fa: e1:54:b6:8b:98:5d:87:eb:b4:45:dd:07:8d:0d:d2: 98:cc:01:76:26:7f:ee:56:90:e8:36:eb:8e:90:8b: e1:e8:b4:e8:de:e1:6e:b2:02:c2:27:50:35:83:bd: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:91:EF:C1:9D:EA:FF:59:16:28:7A:33:F5:CD:44:21:11:92:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fb968d9d-c1ad-30f7-909f-035a5f1fcf17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:46:b1:15:6d:80:32:3c:da:37:cc:49:d7:2c:6a:01:e7:ae: b5:72:e3:97:6e:6e:11:69:92:76:bf:9e:a5:eb:75:eb:a4:0b: 45:5e:63:f4:60:05:cb:63:bd:02:f5:13:63:83:a3:30:b7:9a: ed:05:c3:eb:0c:01:23:4b:48:21:c5:7b:69:40:56:e4:ea:c5: 7c:6c:ff:11:6a:28:88:9d:97:9e:38:2a:0c:a4:4b:01:29:a7: b6:fd:cd:34:1e:8a:22:0e:7c:d9:74:d8:da:b1:a4:ba:78:92: 71:28:29:cb:f7:37:97:b9:61:bc:45:02:87:d2:13:2f:93:33: 45:7b:c1:a1:5f:48:5e:d1:09:53:68:e1:cc:76:bb:6e:2c:d9: 1f:48:8c:dd:11:00:ab:d2:99:ae:36:cd:3b:05:b1:09:cb:79: 6f:c5:69:62:a1:18:1c:d9:bc:84:0e:ce:e7:0a:e3:ce:28:6b: d7:d0:ae:c3:fe:17:33:ea:dd:50:25:2b:4a:9e:20:9d:4e:54: c9:15:b8:38:a1:17:91:68:3b:5f:e5:a1:4c:84:28:ea:e1:f8: 16:0b:86:8f:5f:33:11:0a:12:c5:f0:4f:71:aa:2b:81:df:d1: 10:89:65:ce:4a:96:3b:eb:2c:f0:6f:37:ee:7d:bf:fc:ea:a4: ce:07:3b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQhdzp8r7DUJMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjMyNTRiNGEtNTBmMC00ODY0LWE3NGUtN2U2YzBkODg1OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcyxQ7+DyZLw4KXCkde5b7sXIB33O20oUsgC 1p9RQXjfWbMeKQczTMjPY9kMDPLFbrnIOPz8XWdz+JW6a8OS6L6QYTvlFc2mTXW+ IzfWcX9ieLHfdonDfSz3ln23fVHnkrzY6BVb0KdhMNLEDsgslNA6MYf1o0xdoJts Dny5EdKZsaz908kjOhqsKgAvxm8cnb8cuDLdwETd2i2WbSgtsDdC2C9Z6B6oquJ6 CA+vl882dDOb79dFvEoIXWy8LRXApvjGGd61DKlkpJxpJdSGdfrhVLaLmF2H67RF 3QeNDdKYzAF2Jn/uVpDoNuuOkIvh6LTo3uFusgLCJ1A1g71+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtTke/Bner/WRYoejP1zUQhEZKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmI5NjhkOWQtYzFhZC0z MGY3LTkwOWYtMDM1YTVmMWZjZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZGsRVtgDI82jfMSdcsagHnrrVy45dubhFpkna/nqXrdeukC0VeY/Rg BctjvQL1E2ODozC3mu0Fw+sMASNLSCHFe2lAVuTqxXxs/xFqKIidl544KgykSwEp p7b9zTQeiiIOfNl02NqxpLp4knEoKcv3N5e5YbxFAofSEy+TM0V7waFfSF7RCVNo 4cx2u24s2R9IjN0RAKvSma42zTsFsQnLeW/FaWKhGBzZvIQOzucK484oa9fQrsP+ FzPq3VAlK0qeIJ1OVMkVuDihF5FoO1/loUyEKOrh+BYLho9fMxEKEsXwT3GqK4Hf 0RCJZc5KljvrLPBvN+59v/zqpM4HO7I= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:49 2025 by rpki-client