$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3026b0b8-ae66-3fa3-9c8b-63eb0d7b9189.roa File: 3026b0b8-ae66-3fa3-9c8b-63eb0d7b9189.roa (raw, json) Hash identifier: WfEAYl+2NWGu4slc2L33uFNIbWS6Wbvk/59REsZxt6M= Subject key identifier: 25:06:11:C7:71:DA:4D:E9:A6:70:41:AD:8C:40:6A:A2:44:C9:B0:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78535448371087C4E568650 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3026b0b8-ae66-3fa3-9c8b-63eb0d7b9189.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.136.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:35:44:83:71:08:7c:4e:56:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a3c03af2-efa1-4c88-b175-2274c6af1d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:04:45:0b:47:c4:f7:6c:1b:1d:93:a6:4f: 8a:a0:4d:0b:57:a6:63:67:53:05:ec:ef:f0:4a:5c: 63:59:85:3d:2e:41:32:31:f7:88:7a:29:87:38:a4: ae:ed:fd:d1:71:4f:4c:b6:ec:9d:bf:6d:b9:07:c4: 0d:8e:ab:d4:74:f7:6d:6c:ee:27:0a:23:60:83:c4: bc:1a:e9:10:81:60:83:a9:de:c5:ce:59:37:ad:b2: 2f:91:24:8c:9e:1c:3a:ee:7b:25:bf:4a:52:1d:e0: 67:7d:ef:bc:21:ec:1e:99:b1:b6:e5:fb:0d:50:4e: c6:33:8e:8b:ce:1e:8b:bb:a0:f0:af:c8:98:1c:c0: ed:d6:30:8c:56:45:8f:78:94:fb:91:22:fd:93:49: 57:28:bf:68:d0:8d:48:27:8e:e3:bb:c5:1f:b5:e3: a8:0b:d2:e9:fc:e4:f5:14:b1:2a:07:4f:c8:41:8f: 5e:0d:77:59:8f:a3:e1:66:18:34:b1:6b:be:f0:24: c6:7e:26:48:ce:03:fc:fb:0b:34:df:71:f0:aa:aa: c9:f8:34:a8:8a:80:05:98:ff:9a:7c:b0:3e:39:ea: 8d:e8:9b:40:b3:f2:5e:1d:e8:66:ec:ac:48:9d:42: ad:66:ec:c5:78:be:04:aa:aa:a1:46:ad:a7:89:7f: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:06:11:C7:71:DA:4D:E9:A6:70:41:AD:8C:40:6A:A2:44:C9:B0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3026b0b8-ae66-3fa3-9c8b-63eb0d7b9189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:24:d7:6a:bf:cf:07:1b:96:d6:b3:d7:fb:3d:7f:8c:6d:8f: b0:f5:8c:a9:e2:fb:5d:09:ef:ee:e3:72:74:1d:05:cf:28:4d: c2:1d:cc:2f:a8:b9:c0:77:75:e9:1f:32:dc:6a:94:92:5e:21: 1a:33:13:63:6c:40:1d:30:b8:3a:f3:22:e6:85:39:22:fa:f2: 85:a3:47:57:a4:43:b7:37:ca:3a:72:b8:2c:ed:ef:0b:2b:98: 7a:3c:0a:14:06:d6:77:a4:07:c5:84:c2:4a:05:b4:77:9d:50: 8d:57:d0:a0:41:6c:6d:b5:c1:48:f8:1b:01:90:2d:3a:fe:6b: 11:e4:cf:f7:36:f1:6f:e2:03:7a:85:dd:68:cf:78:d5:35:66: 3f:dc:42:4a:3a:80:fe:7d:ac:fb:67:97:d2:e8:de:6e:90:88: a3:07:70:67:04:08:c8:4e:c9:af:70:6f:f0:e3:bc:5b:ef:dd: 13:4b:6d:91:62:e6:4e:1b:41:99:d7:72:b5:d3:cd:06:17:17: f2:6b:4d:8c:6d:3c:b7:0b:84:90:2f:b5:bc:d8:49:83:5b:78: 84:eb:8d:4f:a6:e7:bf:96:48:f9:ec:dd:e3:30:7e:a3:4b:13: b3:a5:b2:40:12:0c:14:21:71:76:ec:2b:9a:59:6f:52:34:7c: 4b:c1:3c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTVEg3EIfE5WhlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTNjMDNhZjItZWZhMS00Yzg4LWIxNzUtMjI3NGM2YWYxZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnsERQtHxPdsGx2Tpk+KoE0LV6ZjZ1MF7O/w SlxjWYU9LkEyMfeIeimHOKSu7f3RcU9Mtuydv225B8QNjqvUdPdtbO4nCiNgg8S8 GukQgWCDqd7Fzlk3rbIvkSSMnhw67nslv0pSHeBnfe+8IewembG25fsNUE7GM46L zh6Lu6Dwr8iYHMDt1jCMVkWPeJT7kSL9k0lXKL9o0I1IJ47ju8UfteOoC9Lp/OT1 FLEqB0/IQY9eDXdZj6PhZhg0sWu+8CTGfiZIzgP8+ws033HwqqrJ+DSoioAFmP+a fLA+OeqN6JtAs/JeHehm7KxInUKtZuzFeL4EqqqhRq2niX8JmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUGEcdx2k3ppnBBrYxAaqJEybD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzAyNmIwYjgtYWU2Ni0z ZmEzLTljOGItNjNlYjBkN2I5MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIojwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADck12q/zwcbltaz1/s9f4xtj7D1jKni+10J7+7jcnQdBc8oTcIdzC+o ucB3dekfMtxqlJJeIRozE2NsQB0wuDrzIuaFOSL68oWjR1ekQ7c3yjpyuCzt7wsr mHo8ChQG1nekB8WEwkoFtHedUI1X0KBBbG21wUj4GwGQLTr+axHkz/c28W/iA3qF 3WjPeNU1Zj/cQko6gP59rPtnl9Lo3m6QiKMHcGcECMhOya9wb/DjvFvv3RNLbZFi 5k4bQZnXcrXTzQYXF/JrTYxtPLcLhJAvtbzYSYNbeITrjU+m57+WSPns3eMwfqNL E7OlskASDBQhcXbsK5pZb1I0fEvBPLg= -----END CERTIFICATE-----Generated at Sun May 4 19:29:48 2025 by rpki-client