$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa File: ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa (raw, json) Hash identifier: /XM4vdwhFIgKJQBDY0bObrc9O0tcv6vcq+ILF8OkaoU= Subject key identifier: 2A:3B:17:8B:9D:DD:9B:5E:5C:85:62:2A:09:AA:3E:F4:BA:EC:3E:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78530DBDF55A6EE15C91BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.141.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:30:db:df:55:a6:ee:15:c9:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d0cb6ccb-2dcc-4fbf-a197-b52b6c33cd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:54:10:ef:f9:cd:8a:b2:97:fa:f2:15:a5: 4f:de:93:33:5d:c2:0d:8a:78:6e:29:eb:3a:20:d8: 3d:54:90:1a:c5:b1:49:ae:02:a3:37:6b:5e:d5:65: 44:25:56:6e:de:46:43:8a:c7:0f:ed:4d:ca:26:b3: e1:35:67:30:83:39:67:c2:5b:fb:70:b3:e1:9a:6a: 5e:13:46:d9:c9:6b:51:e4:1d:5b:c3:4c:66:20:e5: 91:43:0f:25:dd:aa:db:56:ca:81:97:90:80:0f:44: e9:70:80:14:bd:08:20:d8:a1:22:73:8c:7c:ee:87: ec:60:13:28:83:2e:b6:7d:ce:7a:7c:9e:6f:6d:7c: bd:38:a3:7f:94:53:07:bf:0c:f6:b2:0a:07:7c:e8: cb:54:03:a3:7d:15:26:dc:8b:4e:b0:fc:63:56:0b: 64:a9:58:66:f4:fd:2b:60:b4:4f:7e:95:f8:df:01: 02:94:cb:88:00:00:0b:8e:93:99:5c:73:55:bf:2f: 3e:b2:b7:08:8f:4b:16:d9:2e:0d:2f:70:4f:57:ef: 0d:9b:6b:46:eb:7c:ed:9d:1e:c9:45:89:6f:c4:58: d1:1f:f8:3f:57:78:e7:26:d1:32:13:22:4e:09:4a: 56:d9:06:42:01:30:f8:0f:33:db:74:46:36:c8:ff: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:17:8B:9D:DD:9B:5E:5C:85:62:2A:09:AA:3E:F4:BA:EC:3E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff63a7c0-6270-3a02-92e6-8a6a9eb78af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ac:43:b2:1a:9c:34:c2:2c:8f:03:c1:29:8c:10:50:59:12: 57:b4:f2:64:9d:a3:0c:52:c4:b5:5a:c4:58:ba:4d:22:04:6a: c9:5c:33:60:45:bb:9e:c2:a9:20:5c:0b:2a:58:2e:ae:3f:83: 29:7e:87:32:9b:24:84:9c:a0:e0:5c:83:a6:9e:0f:ac:f6:db: aa:63:df:85:cf:ee:66:aa:82:82:1b:7f:e8:2b:b7:10:ef:dd: 87:9c:da:5c:17:6b:1f:49:89:8b:0e:bd:58:dc:12:f7:3b:65: cb:47:62:ba:6e:77:86:f5:6e:d9:c4:12:ae:76:0b:00:a2:be: 0a:9c:84:25:42:25:14:53:ec:0c:f7:a2:6c:25:75:95:44:a4: 59:60:17:90:6b:73:4b:c9:07:ea:86:e3:e0:86:68:3c:7c:e5: bd:99:bd:d4:6e:c3:b1:f2:97:d6:96:00:0f:9a:ef:66:17:70: 6d:ae:42:55:0e:bf:91:59:60:53:6e:75:49:9d:61:bb:7a:b5: b8:40:f6:01:6a:70:66:5f:8b:00:e9:96:73:b6:30:32:d2:f8: e1:e1:9b:1f:e4:95:51:6e:78:d6:01:63:38:e9:2f:69:40:5d: b4:ce:eb:a4:8f:2d:e6:f9:8b:e0:82:73:8e:bc:43:62:00:8a: b6:60:5e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTDb31Wm7hXJG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDBjYjZjY2ItMmRjYy00ZmJmLWExOTctYjUyYjZjMzNjZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj39UEO/5zYqyl/ryFaVP3pMzXcINinhuKes6 INg9VJAaxbFJrgKjN2te1WVEJVZu3kZDiscP7U3KJrPhNWcwgzlnwlv7cLPhmmpe E0bZyWtR5B1bw0xmIOWRQw8l3arbVsqBl5CAD0TpcIAUvQgg2KEic4x87ofsYBMo gy62fc56fJ5vbXy9OKN/lFMHvwz2sgoHfOjLVAOjfRUm3ItOsPxjVgtkqVhm9P0r YLRPfpX43wEClMuIAAALjpOZXHNVvy8+srcIj0sW2S4NL3BPV+8Nm2tG63ztnR7J RYlvxFjRH/g/V3jnJtEyEyJOCUpW2QZCATD4DzPbdEY2yP97xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo7F4ud3ZteXIViKgmqPvS67D5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmY2M2E3YzAtNjI3MC0z YTAyLTkyZTYtOGE2YTllYjc4YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADisQ7IanDTCLI8DwSmMEFBZEle08mSdowxSxLVaxFi6TSIEaslcM2BF u57CqSBcCypYLq4/gyl+hzKbJIScoOBcg6aeD6z226pj34XP7maqgoIbf+grtxDv 3Yec2lwXax9JiYsOvVjcEvc7ZctHYrpud4b1btnEEq52CwCivgqchCVCJRRT7Az3 omwldZVEpFlgF5Brc0vJB+qG4+CGaDx85b2ZvdRuw7Hyl9aWAA+a72YXcG2uQlUO v5FZYFNudUmdYbt6tbhA9gFqcGZfiwDplnO2MDLS+OHhmx/klVFueNYBYzjpL2lA XbTO66SPLeb5i+CCc468Q2IAirZgXsw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:19:54 2025 by rpki-client