$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa File: 239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa (raw, json) Hash identifier: fAwHwOglGt/G85J2vtdQyO2FhN5iZz/rzfDcNE07hbo= Subject key identifier: 4B:DB:E9:6F:C5:B6:8C:FF:E1:3F:0E:A9:24:BE:C3:19:B0:65:BF:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78520CB8217C372802F5080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.140.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:20:cb:82:17:c3:72:80:2f:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6d3a6fdb-cdcb-4152-a65b-e1b9e1fbed61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:61:fd:53:93:ac:1d:e1:aa:77:c2:20:d7: 7f:44:92:a9:3b:f3:8b:2b:86:5d:cf:d2:57:ed:ef: 2c:e1:00:94:d8:78:0f:5d:c5:0d:4b:22:9a:dd:aa: 1f:f1:71:ae:85:39:97:0c:f0:34:aa:31:15:ee:90: 40:4d:6b:d2:50:76:5b:eb:8a:1c:a3:87:9a:31:27: fe:ed:f6:a8:9b:77:9a:30:bd:25:44:d7:a5:00:9e: cc:2d:81:bf:0a:20:6a:b8:db:a9:55:e2:be:52:40: 33:9e:31:1b:15:2f:dd:dc:82:6f:b3:0e:68:a4:14: af:df:7f:f7:d4:4a:9e:d5:03:55:b7:01:7e:73:58: 40:ec:4c:fe:d4:8e:6c:e0:50:53:b8:99:a5:78:2b: 9d:fa:3f:cf:70:19:6a:dd:a5:88:51:27:41:01:72: 2e:a4:23:01:e8:6c:ba:04:62:c0:ae:80:e4:30:c3: 09:e8:45:33:31:ca:f9:15:4f:77:b6:8f:09:65:0e: f4:ce:1a:2c:ba:76:d8:c1:bd:18:54:cb:f4:bd:4c: 8b:07:67:c1:bf:d3:34:0b:85:fc:62:14:17:f9:16: 56:08:7e:79:a5:df:23:f2:99:4d:59:73:e1:67:fc: 7c:06:e5:18:bb:ab:1a:22:f3:4f:5b:62:72:b6:27: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:E9:6F:C5:B6:8C:FF:E1:3F:0E:A9:24:BE:C3:19:B0:65:BF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/239c4941-fa1f-3fe1-bdd4-b3558fa260ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f9:df:e1:54:cc:70:b9:78:d1:f2:d9:20:c4:2d:a9:07:73: 96:3f:76:0f:02:46:69:f9:6d:e8:4a:54:1d:52:d2:80:f8:6c: ee:71:48:a0:f6:c4:af:85:13:12:3c:f4:03:a4:7a:3f:1b:df: 8c:87:04:3d:42:c8:e0:b6:10:dd:d1:7a:35:5d:a4:de:0f:8c: 74:da:8f:99:60:7a:21:38:d1:61:25:01:ed:50:c1:07:20:51: ed:2e:19:74:e3:cf:cd:db:df:04:57:4e:3c:2f:7e:c0:5e:33: 44:10:a6:5b:c3:09:cc:1d:9a:f1:ac:15:dd:9b:27:34:78:52: 6d:6f:ec:de:8a:93:0e:3b:59:2c:8a:3f:0e:f7:55:6d:7b:77: 9d:97:ce:1f:6c:71:80:4f:f2:d6:6d:1f:9b:74:03:9e:bf:ff: 8d:c0:7e:a6:9c:a1:8f:5d:ed:96:a8:c6:50:91:a6:e3:cc:21: 0b:8c:f6:26:24:ae:ec:09:a8:69:1a:c2:ff:ae:5e:32:12:91: 7b:14:d3:bc:28:5c:11:c9:1e:4c:c8:e2:e4:ba:ab:fe:22:c2: a7:33:be:a1:3e:e5:12:da:06:a1:25:6a:77:eb:5e:61:8e:49: 2f:27:86:a2:fd:66:47:de:49:c0:3b:ce:81:22:a1:3a:3b:ac: 61:83:3b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSDLghfDcoAvUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmQzYTZmZGItY2RjYi00MTUyLWE2NWItZTFiOWUxZmJlZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTlh/VOTrB3hqnfCINd/RJKpO/OLK4Zdz9JX 7e8s4QCU2HgPXcUNSyKa3aof8XGuhTmXDPA0qjEV7pBATWvSUHZb64oco4eaMSf+ 7faom3eaML0lRNelAJ7MLYG/CiBquNupVeK+UkAznjEbFS/d3IJvsw5opBSv33/3 1Eqe1QNVtwF+c1hA7Ez+1I5s4FBTuJmleCud+j/PcBlq3aWIUSdBAXIupCMB6Gy6 BGLAroDkMMMJ6EUzMcr5FU93to8JZQ70zhosunbYwb0YVMv0vUyLB2fBv9M0C4X8 YhQX+RZWCH55pd8j8plNWXPhZ/x8BuUYu6saIvNPW2Jytie1vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvb6W/Ftoz/4T8OqSS+wxmwZb8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM5YzQ5NDEtZmExZi0z ZmUxLWJkZDQtYjM1NThmYTI2MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIozAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj53+FUzHC5eNHy2SDELakHc5Y/dg8CRmn5behKVB1S0oD4bO5xSKD2 xK+FExI89AOkej8b34yHBD1CyOC2EN3RejVdpN4PjHTaj5lgeiE40WElAe1QwQcg Ue0uGXTjz83b3wRXTjwvfsBeM0QQplvDCcwdmvGsFd2bJzR4Um1v7N6Kkw47WSyK Pw73VW17d52Xzh9scYBP8tZtH5t0A56//43AfqacoY9d7ZaoxlCRpuPMIQuM9iYk ruwJqGkawv+uXjISkXsU07woXBHJHkzI4uS6q/4iwqczvqE+5RLaBqElanfrXmGO SS8nhqL9ZkfeScA7zoEioTo7rGGDO1A= -----END CERTIFICATE-----Generated at Sun May 4 19:18:11 2025 by rpki-client