$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af42333-b839-3188-bdee-3fe1a7d56755.roa File: 8af42333-b839-3188-bdee-3fe1a7d56755.roa (raw, json) Hash identifier: DJZLhWxgw2fdMItDRZqBySoRxQ5oudsASQWyOoB3gsk= Subject key identifier: E5:A9:CD:AB:46:1A:1C:07:A8:FD:04:1B:98:FC:29:6E:E7:88:23:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851A5D26258607C6E17C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af42333-b839-3188-bdee-3fe1a7d56755.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.94.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1a:5d:26:25:86:07:c6:e1:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b9f5f046-05a0-4e9a-aa0a-0c7f4250b620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:b5:ad:93:9f:a8:fc:a8:4f:d6:77:95:b0: 86:c5:08:aa:32:57:23:cc:44:bc:93:38:31:28:0b: cb:3e:34:6a:05:92:07:b2:ac:3b:43:f1:8b:3e:3f: 15:e7:7b:b6:b7:ff:4a:04:12:a6:25:29:54:14:ea: 1a:4c:6b:d9:4e:9f:f1:2e:bb:fa:1e:0a:6c:d2:86: f4:3c:b0:d9:e4:3c:57:90:7e:4b:b0:a5:5d:d7:f2: dc:44:bd:86:a5:62:2e:c8:10:1c:e8:6a:60:fc:2d: dc:7a:b5:e5:e6:e6:3c:80:9b:b4:75:e6:b4:ac:37: 6e:4c:c1:c5:d4:fd:24:ff:66:49:d8:1f:c7:8e:fc: 91:4d:c9:6b:b2:ba:28:86:da:44:29:8e:ad:71:a7: a7:c1:50:e7:1c:60:0d:6d:e2:61:f1:97:d8:38:d1: 1c:f1:51:62:d7:1a:3e:8c:ce:fa:c1:e3:ed:76:c1: 24:c4:4b:5c:55:95:38:95:8c:c1:a5:b6:4e:94:af: 75:4b:0f:8a:0c:d3:64:6c:37:09:c8:25:b0:e6:a1: 34:d6:48:26:1d:33:8c:94:11:20:c1:f3:95:2e:2d: 1d:49:47:43:a3:86:71:a8:43:9c:49:0c:f5:3c:c5: 74:0b:7e:df:97:20:27:20:d7:2b:f1:dc:37:a5:0c: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:CD:AB:46:1A:1C:07:A8:FD:04:1B:98:FC:29:6E:E7:88:23:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af42333-b839-3188-bdee-3fe1a7d56755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:56:02:ee:bf:89:32:4a:08:f8:9c:08:d9:88:84:a3:41:66: ee:41:88:d9:9a:a1:a9:b9:46:b2:7e:cf:ed:9a:98:2c:18:8f: 3e:a1:7d:65:46:b5:ae:74:b1:3c:09:95:1c:b0:28:e8:45:7b: 23:cf:b5:bc:7e:f3:89:e8:e8:e5:4b:74:ef:ec:0f:77:79:ae: 87:38:dd:17:36:63:85:a8:bf:a8:dc:64:42:91:6e:93:6e:60: 0b:d2:c0:66:30:0e:98:e9:64:f3:b0:7a:44:61:d3:f0:3c:80: 04:3d:98:d9:44:33:55:ae:c1:51:1d:cf:6d:a7:01:2a:6c:14: 82:f9:92:0d:d9:eb:98:0e:8f:ef:07:48:ca:e4:be:7a:4d:46: a1:07:74:b4:32:84:03:dc:e5:0a:f4:8d:3e:98:49:a6:25:40: 03:21:92:14:81:3c:29:09:91:ce:39:6e:28:9c:7d:b5:68:f5: 35:d7:a3:d0:4f:26:53:f9:f7:5a:09:c8:78:fa:9a:93:fe:43: 5b:65:f9:87:21:67:e2:ca:13:21:70:23:83:d4:9d:ef:0b:a4: 89:2b:03:b4:d6:6d:88:0c:5a:67:fe:ad:ea:53:2b:3b:ad:60: bc:45:4c:19:c1:7c:44:9e:9d:de:54:35:43:91:28:db:b5:2d: 94:f9:d5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRpdJiWGB8bhfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjlmNWYwNDYtMDVhMC00ZTlhLWFhMGEtMGM3ZjQyNTBiNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbq1rZOfqPyoT9Z3lbCGxQiqMlcjzES8kzgx KAvLPjRqBZIHsqw7Q/GLPj8V53u2t/9KBBKmJSlUFOoaTGvZTp/xLrv6Hgps0ob0 PLDZ5DxXkH5LsKVd1/LcRL2GpWIuyBAc6Gpg/C3cerXl5uY8gJu0dea0rDduTMHF 1P0k/2ZJ2B/HjvyRTclrsroohtpEKY6tcaenwVDnHGANbeJh8ZfYONEc8VFi1xo+ jM76wePtdsEkxEtcVZU4lYzBpbZOlK91Sw+KDNNkbDcJyCWw5qE01kgmHTOMlBEg wfOVLi0dSUdDo4ZxqEOcSQz1PMV0C37flyAnINcr8dw3pQwbQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWpzatGGhwHqP0EG5j8KW7niCNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGFmNDIzMzMtYjgzOS0z MTg4LWJkZWUtM2ZlMWE3ZDU2NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNWAu6/iTJKCPicCNmIhKNBZu5BiNmaoam5RrJ+z+2amCwYjz6hfWVG ta50sTwJlRywKOhFeyPPtbx+84no6OVLdO/sD3d5roc43Rc2Y4Wov6jcZEKRbpNu YAvSwGYwDpjpZPOwekRh0/A8gAQ9mNlEM1WuwVEdz22nASpsFIL5kg3Z65gOj+8H SMrkvnpNRqEHdLQyhAPc5Qr0jT6YSaYlQAMhkhSBPCkJkc45biicfbVo9TXXo9BP JlP591oJyHj6mpP+Q1tl+YchZ+LKEyFwI4PUne8LpIkrA7TWbYgMWmf+repTKzut YLxFTBnBfESend5UNUORKNu1LZT51Qg= -----END CERTIFICATE-----Generated at Sat May 10 22:23:41 2025 by rpki-client