$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa File: a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa (raw, json) Hash identifier: 3RsUOWyZ7Fw17JcOaHeDUwawCBQ/qmSIdQa8xNQIRd0= Subject key identifier: 04:BA:3F:6E:C1:A8:71:D6:69:F4:A8:8F:29:BF:F8:7F:C0:C2:1F:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853E3B3F302BE169B2DC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.141.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3e:3b:3f:30:2b:e1:69:b2:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4846cb3b-126a-4c11-9fe0-c21457a75955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:95:78:86:ed:e8:2c:a7:33:c9:3f:c2:91: a4:7b:7c:09:8d:8d:c3:27:10:8a:c4:34:68:da:26: 1e:a0:96:61:b1:70:cf:92:8b:76:03:e3:da:66:5a: 31:ac:73:95:e9:08:9c:57:00:b9:b8:dd:d9:23:52: 7a:e1:f6:cf:98:69:7f:2c:14:a9:20:f6:89:b6:10: 41:40:89:75:72:63:23:74:11:1d:17:d7:31:3f:45: a2:5b:65:f9:55:cb:d0:02:3d:b6:7e:b5:8b:89:34: 51:5d:9d:2c:2e:7f:d0:41:64:11:fc:92:5a:1f:5d: 3a:9a:9b:64:6f:d8:bb:42:6a:da:32:f5:a8:63:05: 9c:eb:8d:da:0f:f0:ee:07:62:0c:b7:21:04:fd:ad: c9:47:51:06:ea:6c:06:b9:d9:b7:47:72:9f:3b:49: 10:dd:a7:f9:4c:2a:c6:dc:20:7d:bb:6a:6e:94:38: 2f:67:bf:0f:81:e6:55:67:f8:40:3e:be:9a:f1:60: a4:93:b6:39:51:f7:f1:52:73:34:ac:c2:58:76:18: 88:3d:45:79:ff:e2:bf:66:4b:92:f9:e5:1d:ec:27: c8:a9:98:72:e4:73:de:98:7d:a3:ef:4e:ef:98:60: 6b:f3:06:0b:52:64:14:21:8e:2c:2d:79:f5:62:d7: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BA:3F:6E:C1:A8:71:D6:69:F4:A8:8F:29:BF:F8:7F:C0:C2:1F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9d8d6fa-c502-3261-ab32-45e02d3bbfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2f:c9:66:6d:d9:b3:8a:d0:fb:18:21:4d:c5:e4:b6:12:0d: 32:19:6d:be:1b:1f:b4:2b:b1:8d:17:f6:f5:b4:3b:a2:c9:13: 29:cd:ff:da:b0:fb:e6:e3:8a:fa:02:4a:10:f1:1f:c1:5d:5d: 03:19:06:df:51:ce:05:c6:ed:92:40:cd:2a:7d:f0:e3:00:b1: 9b:c5:5d:6e:81:7b:32:09:a4:91:3d:b5:e9:e8:ac:a0:63:9e: 8c:a1:b1:0d:fb:57:47:cb:d8:32:c5:53:b9:b9:0b:fe:fc:30: 61:a1:e0:cb:43:74:4b:bd:b4:e8:2e:04:2a:be:40:72:f4:8b: 42:4c:c0:47:bc:3a:65:3a:eb:21:66:91:20:51:f8:81:ff:43: c1:88:23:05:b2:50:37:da:4f:56:97:23:43:41:e0:4f:e5:92: d3:f8:c2:7f:45:e7:df:1a:46:aa:8f:af:c3:f3:26:a8:a2:9a: 1d:d6:5b:70:4b:0c:a2:3d:66:1e:cd:ce:df:2a:6e:c2:7f:e9: 97:a0:f2:74:84:70:e7:ed:f3:18:42:e7:67:ee:43:8d:25:b3: 4c:2f:cc:93:35:20:2d:be:7f:92:15:24:11:8a:b9:3c:aa:da: ba:7b:e9:ba:00:a8:76:92:14:86:36:1a:14:14:64:31:a7:80: ce:a1:bc:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT47PzAr4Wmy3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDg0NmNiM2ItMTI2YS00YzExLTlmZTAtYzIxNDU3YTc1OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdiVeIbt6CynM8k/wpGke3wJjY3DJxCKxDRo 2iYeoJZhsXDPkot2A+PaZloxrHOV6QicVwC5uN3ZI1J64fbPmGl/LBSpIPaJthBB QIl1cmMjdBEdF9cxP0WiW2X5VcvQAj22frWLiTRRXZ0sLn/QQWQR/JJaH106mptk b9i7QmraMvWoYwWc643aD/DuB2IMtyEE/a3JR1EG6mwGudm3R3KfO0kQ3af5TCrG 3CB9u2pulDgvZ78PgeZVZ/hAPr6a8WCkk7Y5UffxUnM0rMJYdhiIPUV5/+K/ZkuS +eUd7CfIqZhy5HPemH2j707vmGBr8wYLUmQUIY4sLXn1Ytf6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS6P27BqHHWafSojym/+H/Awh8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTlkOGQ2ZmEtYzUwMi0z MjYxLWFiMzItNDVlMDJkM2JiZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFovyWZt2bOK0PsYIU3F5LYSDTIZbb4bH7QrsY0X9vW0O6LJEynN/9qw ++bjivoCShDxH8FdXQMZBt9RzgXG7ZJAzSp98OMAsZvFXW6BezIJpJE9tenorKBj noyhsQ37V0fL2DLFU7m5C/78MGGh4MtDdEu9tOguBCq+QHL0i0JMwEe8OmU66yFm kSBR+IH/Q8GIIwWyUDfaT1aXI0NB4E/lktP4wn9F598aRqqPr8PzJqiimh3WW3BL DKI9Zh7Nzt8qbsJ/6Zeg8nSEcOft8xhC52fuQ40ls0wvzJM1IC2+f5IVJBGKuTyq 2rp76boAqHaSFIY2GhQUZDGngM6hvNI= -----END CERTIFICATE-----Generated at Sun May 4 18:24:43 2025 by rpki-client