$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e1e80bb-afee-33f4-8900-2fd3d5f9b12b.roa File: 2e1e80bb-afee-33f4-8900-2fd3d5f9b12b.roa (raw, json) Hash identifier: OPSQsgmmlkc7jRKdQ71J8c/kwWewOJ20W0va7QntxYE= Subject key identifier: 1F:32:9D:E3:B6:78:BB:33:DE:87:9B:2C:AD:C6:D5:C2:4A:20:59:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78514DE6911C4048EEB4000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e1e80bb-afee-33f4-8900-2fd3d5f9b12b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.84.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:14:de:69:11:c4:04:8e:eb:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=75a7163b-1243-4020-b78c-ae4e60e8f71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:e8:2a:ba:9a:aa:6e:29:11:4e:eb:ac:ee: 71:f6:55:54:50:bd:82:0e:58:69:c6:60:bd:d5:67: b9:46:a6:61:7b:2f:fd:a4:ca:40:6f:b2:e1:69:e1: 9b:50:75:1a:74:0a:62:0a:cf:54:c1:2c:b1:74:a2: ac:ab:3d:36:0d:37:6c:2c:a2:7a:56:53:f6:11:12: e1:c0:9d:49:f2:68:29:c2:09:a6:c6:c4:af:b6:53: 8c:f3:42:dd:bb:f5:a7:ae:ed:c1:00:33:ec:be:fe: 7c:d9:87:9e:f7:85:71:c9:91:cb:bd:e0:34:e8:ae: fc:0c:0f:b6:bc:94:e6:46:a0:08:32:48:3a:4d:06: 56:a6:d3:9a:66:76:33:38:36:f1:28:fe:cd:86:cb: 55:8d:49:93:25:3b:35:0d:c9:fd:3c:f7:92:ad:ba: 4b:f0:1c:1c:55:4a:a2:d5:69:7c:40:0e:78:20:b5: 49:b5:cf:ed:46:36:8b:a7:bb:ac:e1:cb:bf:97:9e: 7b:df:d6:92:02:f5:f9:a1:7a:9e:8c:cb:f3:7c:26: fb:40:46:e6:c1:dd:ac:4f:07:87:78:53:34:24:27: a5:30:15:9c:cb:fd:0c:0d:bf:9b:66:d2:a1:b1:7d: 2c:3e:cb:6c:17:f5:47:fa:ee:8e:de:34:5e:d0:74: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:32:9D:E3:B6:78:BB:33:DE:87:9B:2C:AD:C6:D5:C2:4A:20:59:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e1e80bb-afee-33f4-8900-2fd3d5f9b12b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c7:9a:8f:c7:c3:09:8b:ee:00:ca:f4:10:82:81:6d:e4:e0: 5c:77:20:b6:0b:5a:e2:74:ac:14:6e:cb:0f:79:4d:85:cf:c0: d8:42:f1:aa:1b:43:76:9c:f9:fc:d8:3d:ea:55:34:4e:d2:0c: fb:da:f0:8d:1b:5c:90:3b:96:5e:06:0e:7d:a5:bf:58:2d:c9: f8:e8:37:00:d3:78:39:79:f0:74:59:80:75:48:67:97:7e:2a: cc:7b:10:81:84:64:a7:e9:7b:fa:ef:01:48:ce:50:87:f7:4d: 84:72:b0:59:7a:f2:3e:56:74:78:19:f4:63:06:dc:1f:dc:c1: 6c:d3:2c:54:f6:97:8d:13:a1:c4:2f:ab:e4:f0:8e:c5:06:40: f0:e3:37:40:53:ca:c8:8a:7f:86:69:06:ad:d5:41:fc:e8:d4: e0:20:f7:94:48:29:04:d1:f8:e6:51:3c:d8:9a:89:6e:bf:bd: 3c:b1:1a:87:a3:61:da:c8:cc:29:0d:c1:10:5b:f6:eb:fa:0f: 68:5f:3b:fe:9b:4a:94:76:a3:c8:f9:ff:5e:a9:2d:1a:b3:34: e0:ca:b7:a3:31:2c:62:9c:48:fe:50:b0:30:dd:f3:50:d9:84: fc:97:2c:d6:6f:a6:b3:8b:ae:de:82:d5:94:52:c6:b7:5c:14: ae:48:01:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRTeaRHEBI7rQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzVhNzE2M2ItMTI0My00MDIwLWI3OGMtYWU0ZTYwZThmNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDPoKrqaqm4pEU7rrO5x9lVUUL2CDlhpxmC9 1We5RqZhey/9pMpAb7LhaeGbUHUadApiCs9UwSyxdKKsqz02DTdsLKJ6VlP2ERLh wJ1J8mgpwgmmxsSvtlOM80Ldu/Wnru3BADPsvv582Yee94VxyZHLveA06K78DA+2 vJTmRqAIMkg6TQZWptOaZnYzODbxKP7NhstVjUmTJTs1Dcn9PPeSrbpL8BwcVUqi 1Wl8QA54ILVJtc/tRjaLp7us4cu/l55739aSAvX5oXqejMvzfCb7QEbmwd2sTweH eFM0JCelMBWcy/0MDb+bZtKhsX0sPstsF/VH+u6O3jRe0HQyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8yneO2eLsz3oebLK3G1cJKIFlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmUxZTgwYmItYWZlZS0z M2Y0LTg5MDAtMmZkM2Q1ZjliMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLHmo/HwwmL7gDK9BCCgW3k4Fx3ILYLWuJ0rBRuyw95TYXPwNhC8aob Q3ac+fzYPepVNE7SDPva8I0bXJA7ll4GDn2lv1gtyfjoNwDTeDl58HRZgHVIZ5d+ Ksx7EIGEZKfpe/rvAUjOUIf3TYRysFl68j5WdHgZ9GMG3B/cwWzTLFT2l40TocQv q+TwjsUGQPDjN0BTysiKf4ZpBq3VQfzo1OAg95RIKQTR+OZRPNiaiW6/vTyxGoej YdrIzCkNwRBb9uv6D2hfO/6bSpR2o8j5/16pLRqzNODKt6MxLGKcSP5QsDDd81DZ hPyXLNZvprOLrt6C1ZRSxrdcFK5IAYs= -----END CERTIFICATE-----Generated at Sun May 4 19:35:50 2025 by rpki-client