$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa File: 28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa (raw, json) Hash identifier: 67AaQugXyLwkJL0mb7GwrfL3uvOd6RykZQCtsC9dXlE= Subject key identifier: 87:7A:94:CD:CC:AE:0A:38:72:6A:1A:18:B9:4C:0A:ED:18:CD:7A:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CEF8BB85D8915C3E8D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.146.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ce:f8:bb:85:d8:91:5c:3e:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=18f3ad17-15dd-4e39-b750-a90fe09bf75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:66:7c:73:04:bf:d8:9f:aa:68:7c:3f:43: 90:84:09:5c:d5:c5:a7:16:14:da:e8:36:72:69:2d: e3:27:9a:1d:00:b1:70:07:ce:db:d5:95:0c:b7:d4: d1:4a:06:d1:20:2f:52:62:2b:aa:5b:b8:2f:16:e4: 02:93:65:2b:2d:fc:ff:c3:64:f9:62:ab:e2:5e:0b: 0f:01:7e:3b:9f:0c:7f:7e:11:8d:02:c2:49:2c:37: bc:36:9b:38:e0:88:88:92:16:c9:a5:90:3a:41:f1: 63:c1:85:93:2b:56:c4:94:99:85:c0:25:bd:99:84: 25:9c:1f:96:9d:aa:aa:bb:d1:f2:9c:d8:21:41:e8: 37:1b:ae:f9:2f:27:8e:e5:0d:5b:37:71:03:3a:c0: 05:a9:ba:82:af:dd:9c:c0:01:c3:eb:4d:72:3b:fa: 4b:51:3a:4b:68:6d:cf:5d:ca:69:01:90:74:23:88: 55:80:54:19:1c:51:00:91:ad:0c:d1:bb:b1:23:f4: 11:71:e5:a0:77:c2:37:6e:7d:ac:d0:69:cf:2f:40: 6d:56:34:6b:be:fe:ad:b1:7c:16:45:aa:30:e1:97: 4d:8b:6c:88:34:ec:9f:2c:b0:e3:99:e8:f5:09:e8: 37:8f:3a:ad:93:22:7d:5f:cc:c5:43:4f:44:4e:00: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7A:94:CD:CC:AE:0A:38:72:6A:1A:18:B9:4C:0A:ED:18:CD:7A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/28bb0dfd-1f10-3790-ac42-b1671918f1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.146.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:08:38:e4:93:29:08:7c:98:d4:2b:a7:4f:6b:31:e8:30:58: 8e:bf:94:5d:ca:06:52:9f:ba:73:41:45:0d:2a:a7:e9:5f:50: 32:fa:7e:7b:38:6b:30:2d:f5:34:2a:ef:ca:0f:d9:0b:9a:0e: a1:75:3d:ba:18:69:b5:a8:fb:b8:0e:95:6c:4a:31:d6:d5:c4: 8b:dc:4f:f4:7e:33:b0:98:54:ce:5e:49:be:41:00:cf:dc:7f: c9:57:8f:ed:18:43:1d:c6:a5:63:6a:0f:dd:f2:d1:0f:66:c9: 97:40:5b:5c:7b:58:7e:90:fb:c8:17:1f:f0:c9:2b:f0:bd:05: ab:8b:b3:d6:36:dd:de:2a:fb:5b:8b:a6:3a:e4:3b:07:47:9c: 0f:86:9f:73:f5:ec:c3:fb:c2:a9:e5:00:17:66:0a:ff:57:77: 51:d4:b8:c8:2f:06:d4:b6:1f:1f:46:22:06:d2:e5:31:a6:81: 88:00:54:ab:ff:55:cd:8b:c7:94:3c:04:8b:9a:47:bc:09:ce: 79:8e:fd:20:d5:fa:54:2e:7c:d8:91:9e:d8:e2:2c:38:5f:bd: 8e:bb:0f:71:94:b4:80:37:2c:04:01:c7:0d:20:44:84:cf:06: bb:a7:54:39:5a:21:52:78:a1:a2:59:0a:d5:bf:ce:97:00:90: 8a:75:d6:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM74u4XYkVw+jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MThmM2FkMTctMTVkZC00ZTM5LWI3NTAtYTkwZmUwOWJmNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxhmfHMEv9ifqmh8P0OQhAlc1cWnFhTa6DZy aS3jJ5odALFwB87b1ZUMt9TRSgbRIC9SYiuqW7gvFuQCk2UrLfz/w2T5YqviXgsP AX47nwx/fhGNAsJJLDe8Nps44IiIkhbJpZA6QfFjwYWTK1bElJmFwCW9mYQlnB+W naqqu9HynNghQeg3G675LyeO5Q1bN3EDOsAFqbqCr92cwAHD601yO/pLUTpLaG3P XcppAZB0I4hVgFQZHFEAka0M0buxI/QRceWgd8I3bn2s0GnPL0BtVjRrvv6tsXwW Raow4ZdNi2yINOyfLLDjmej1Ceg3jzqtkyJ9X8zFQ09ETgD7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId6lM3Mrgo4cmoaGLlMCu0YzXo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjhiYjBkZmQtMWYxMC0z NzkwLWFjNDItYjE2NzE5MThmMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoIOOSTKQh8mNQrp09rMegwWI6/lF3KBlKfunNBRQ0qp+lfUDL6fns4 azAt9TQq78oP2QuaDqF1PboYabWo+7gOlWxKMdbVxIvcT/R+M7CYVM5eSb5BAM/c f8lXj+0YQx3GpWNqD93y0Q9myZdAW1x7WH6Q+8gXH/DJK/C9BauLs9Y23d4q+1uL pjrkOwdHnA+Gn3P17MP7wqnlABdmCv9Xd1HUuMgvBtS2Hx9GIgbS5TGmgYgAVKv/ Vc2Lx5Q8BIuaR7wJznmO/SDV+lQufNiRntjiLDhfvY67D3GUtIA3LAQBxw0gRITP BrunVDlaIVJ4oaJZCtW/zpcAkIp11ro= -----END CERTIFICATE-----Generated at Sun May 4 19:28:03 2025 by rpki-client