$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa File: 90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa (raw, json) Hash identifier: L7KtT2KU6qrQNY1ME7Jo6LahTNkr4cRoVEwPg9XEsto= Subject key identifier: B6:52:EE:13:76:A8:3A:78:69:A5:7E:96:B6:A3:17:6F:95:B2:F8:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853D1EA3F22FFAEA046D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3d:1e:a3:f2:2f:fa:ea:04:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1a58f588-88d9-4723-9379-2cddac070077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:66:f3:00:92:16:01:f6:b6:f9:89:14:d6: 13:45:35:57:99:2c:b5:10:76:09:2c:fe:a1:1e:21: 14:f1:f6:7b:c9:e2:34:55:59:b2:aa:e9:8b:8e:00: 8c:b8:f9:9f:d3:46:96:99:ee:39:8f:72:0c:5c:44: c7:55:b2:d4:0b:49:13:b9:3e:04:7e:ea:be:f2:67: 86:cf:7c:9c:8e:10:05:b4:0c:e7:0d:f4:87:9e:12: 78:f2:77:9e:98:9e:3e:9a:50:4a:e4:a1:cc:c9:93: d7:2d:96:ba:67:2c:47:16:0e:ca:3b:d2:78:8d:03: b5:c0:d8:5c:ae:69:97:64:cd:33:f1:f9:7f:45:35: 54:f1:02:03:f7:69:98:93:de:aa:14:85:c3:09:c7: d5:cb:b6:38:e6:8d:26:16:cb:56:0a:8a:fb:a0:14: d8:cd:17:ca:eb:8e:bd:0c:6a:13:b3:25:d4:57:16: b5:c2:e8:e5:a5:f4:5d:cb:85:09:b9:d7:9f:30:67: fe:16:59:df:97:a7:65:a9:cd:3d:b1:9e:9c:7c:4c: b6:05:93:f5:8e:97:61:2a:89:8c:49:6f:9d:ee:9d: 18:97:7e:5a:39:cd:16:cf:6a:3f:06:b2:c3:28:66: 6e:88:bd:53:9b:d5:72:4d:70:0a:74:bf:af:90:45: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:52:EE:13:76:A8:3A:78:69:A5:7E:96:B6:A3:17:6F:95:B2:F8:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90b32a53-22e0-38a3-ad94-85dcb9e9de80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e8:ca:1f:2d:d2:17:cd:49:da:40:a4:b4:c3:d4:0d:63:87: a3:4c:f2:1c:a1:58:5b:4c:6f:ad:a2:60:50:b9:3d:68:ab:1d: f1:7a:87:f8:47:11:20:6b:3d:58:e2:38:79:cf:7e:07:57:8b: e4:18:78:1e:5b:d8:d5:2c:dd:40:6d:c3:35:28:c7:1a:25:26: e4:cb:df:dd:c0:bb:a1:e1:10:7b:3a:ed:c1:90:aa:18:ed:3f: 75:a8:58:88:76:44:eb:98:cb:b7:4b:11:1e:e4:99:db:8f:54: 24:b5:c3:fd:3e:85:1b:ba:1f:4e:3c:71:af:f2:f1:89:5d:a2: 23:d2:09:05:bd:14:89:13:77:83:19:d9:dc:fc:c3:c3:00:e1: 67:b9:9e:c4:31:fd:7e:a2:ed:ec:23:fb:e9:65:92:e0:08:7a: 44:e3:9b:eb:51:f1:13:eb:12:2e:e6:5c:dd:61:6e:cb:a1:85: 5a:8c:15:0e:3d:d1:43:d3:4f:35:2b:f5:59:9c:a1:17:9d:f6: 66:20:f2:41:52:7b:9e:ce:ef:e9:8e:5f:b5:31:0e:4a:0a:69: 44:b1:f7:16:01:cd:b0:bd:38:69:c3:28:7b:2f:16:be:a9:30: 36:49:ba:5d:a5:67:4f:a8:78:62:e7:69:a7:e8:a7:5f:18:96: 24:31:55:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT0eo/Iv+uoEbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWE1OGY1ODgtODhkOS00NzIzLTkzNzktMmNkZGFjMDcwMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijJm8wCSFgH2tvmJFNYTRTVXmSy1EHYJLP6h HiEU8fZ7yeI0VVmyqumLjgCMuPmf00aWme45j3IMXETHVbLUC0kTuT4Efuq+8meG z3ycjhAFtAznDfSHnhJ48neemJ4+mlBK5KHMyZPXLZa6ZyxHFg7KO9J4jQO1wNhc rmmXZM0z8fl/RTVU8QID92mYk96qFIXDCcfVy7Y45o0mFstWCor7oBTYzRfK6469 DGoTsyXUVxa1wujlpfRdy4UJudefMGf+Flnfl6dlqc09sZ6cfEy2BZP1jpdhKomM SW+d7p0Yl35aOc0Wz2o/BrLDKGZuiL1Tm9VyTXAKdL+vkEXI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZS7hN2qDp4aaV+lrajF2+VsvjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBiMzJhNTMtMjJlMC0z OGEzLWFkOTQtODVkY2I5ZTlkZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIorwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDoyh8t0hfNSdpApLTD1A1jh6NM8hyhWFtMb62iYFC5PWirHfF6h/hH ESBrPVjiOHnPfgdXi+QYeB5b2NUs3UBtwzUoxxolJuTL393Au6HhEHs67cGQqhjt P3WoWIh2ROuYy7dLER7kmduPVCS1w/0+hRu6H048ca/y8YldoiPSCQW9FIkTd4MZ 2dz8w8MA4We5nsQx/X6i7ewj++llkuAIekTjm+tR8RPrEi7mXN1hbsuhhVqMFQ49 0UPTTzUr9VmcoRed9mYg8kFSe57O7+mOX7UxDkoKaUSx9xYBzbC9OGnDKHsvFr6p MDZJul2lZ0+oeGLnaafop18YliQxVWI= -----END CERTIFICATE-----Generated at Sun May 4 19:29:37 2025 by rpki-client