$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa File: afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa (raw, json) Hash identifier: cyXOnKMJr8lk7l2YCOEY0NJVboBKMJ5r1TtbweNi7rs= Subject key identifier: C3:47:FF:22:23:52:A5:20:31:8B:31:AE:E4:F2:51:D9:9E:45:B3:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785010CDE25C206CE166B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.136.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:01:0c:de:25:c2:06:ce:16:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4380a5f0-ea34-410e-931b-78b9cacbfe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:9f:61:b5:24:df:89:02:9d:7e:12:17:f4: ac:f4:b4:9b:07:12:53:b0:5d:eb:d9:0b:ac:d9:b9: 5d:64:7b:79:6f:9e:52:5a:d0:ed:fc:b3:78:f5:69: 88:39:90:5c:21:51:18:f3:fa:72:88:ad:08:75:d8: 4a:64:5a:49:f2:61:ea:91:39:0e:c1:d5:4a:9b:4a: c2:77:35:2e:f6:e9:fa:30:59:6d:a3:fe:23:f4:e6: 47:1c:40:c4:98:15:89:a5:94:16:3d:2b:84:ed:87: 13:7e:98:dc:29:55:7c:af:01:6b:cb:46:d4:6a:5f: b5:5e:80:8c:0b:dd:a0:f0:75:4f:9d:ca:b8:5f:bc: 4b:80:25:cc:4a:b0:ad:d8:8d:df:9c:5b:2f:5a:a2: fb:7a:93:b5:ae:db:af:43:1e:e8:d1:6d:65:28:72: b0:c6:fc:bb:f8:08:2f:2e:2d:af:fc:55:14:bb:80: f3:26:c7:b2:19:21:57:54:b6:ba:1f:f7:37:d3:53: d4:64:51:b0:6f:94:4c:96:f4:f2:23:da:bb:fc:ec: da:2d:9f:76:72:72:59:18:71:e7:48:bc:b2:76:7c: ab:ac:fb:86:fe:dd:db:21:cf:35:2a:c4:c5:4b:1f: 6c:1b:ea:40:24:89:65:ca:9c:d4:4e:8b:ce:38:12: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:FF:22:23:52:A5:20:31:8B:31:AE:E4:F2:51:D9:9E:45:B3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afe2afeb-a71b-3eff-875d-394e4b1a99b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1c:f3:6c:f6:eb:a4:65:28:cf:de:78:34:64:1a:16:a7:c6: 33:cd:98:2c:92:0e:27:eb:b4:42:eb:26:0c:8f:12:71:7a:a9: 6f:c1:3a:65:06:bb:05:fa:28:3a:da:dd:a8:02:4d:4c:1a:94: 02:2f:d6:49:94:e1:19:c0:96:7b:55:d5:9d:93:5c:c0:81:be: 80:8c:e8:3b:40:47:8d:34:6a:9c:3c:7d:8f:0d:2d:1f:46:08: 7b:0e:34:40:67:d2:fa:4e:7d:ba:ea:4a:5c:2b:ae:86:ff:fe: 0e:14:08:e9:b1:6f:35:0b:8e:1b:7a:03:18:16:22:7a:69:b1: a4:44:4d:b4:e3:75:88:02:b6:c9:d9:1f:db:95:4b:56:0e:15: 99:ad:6a:c2:b5:b6:9e:41:88:7e:4e:25:6b:cc:a9:f4:df:14: c3:a4:50:ea:de:dc:cc:66:d7:35:2c:4b:88:68:85:94:6e:98: 56:c7:a5:15:00:33:0a:7b:48:f9:b8:90:52:9c:6c:31:57:ee: e9:52:44:63:25:9a:ec:6d:3d:49:dc:32:28:23:9c:56:83:8c: 32:f8:0e:fc:62:06:31:fb:3b:d1:ae:ad:c0:26:7b:c9:5e:f7: 49:c7:8b:f6:a6:e1:77:87:d3:f8:1a:be:df:a3:83:37:6f:3a: c0:34:7a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQEM3iXCBs4Wa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDM4MGE1ZjAtZWEzNC00MTBlLTkzMWItNzhiOWNhY2JmZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRKfYbUk34kCnX4SF/Ss9LSbBxJTsF3r2Qus 2bldZHt5b55SWtDt/LN49WmIOZBcIVEY8/pyiK0IddhKZFpJ8mHqkTkOwdVKm0rC dzUu9un6MFlto/4j9OZHHEDEmBWJpZQWPSuE7YcTfpjcKVV8rwFry0bUal+1XoCM C92g8HVPncq4X7xLgCXMSrCt2I3fnFsvWqL7epO1rtuvQx7o0W1lKHKwxvy7+Agv Li2v/FUUu4DzJseyGSFXVLa6H/c301PUZFGwb5RMlvTyI9q7/OzaLZ92cnJZGHHn SLyydnyrrPuG/t3bIc81KsTFSx9sG+pAJIllypzUTovOOBKrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNH/yIjUqUgMYsxruTyUdmeRbONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZlMmFmZWItYTcxYi0z ZWZmLTg3NWQtMzk0ZTRiMWE5OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIogQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQc82z266RlKM/eeDRkGhanxjPNmCySDifrtELrJgyPEnF6qW/BOmUG uwX6KDra3agCTUwalAIv1kmU4RnAlntV1Z2TXMCBvoCM6DtAR400apw8fY8NLR9G CHsONEBn0vpOfbrqSlwrrob//g4UCOmxbzULjht6AxgWInppsaRETbTjdYgCtsnZ H9uVS1YOFZmtasK1tp5BiH5OJWvMqfTfFMOkUOre3Mxm1zUsS4hohZRumFbHpRUA Mwp7SPm4kFKcbDFX7ulSRGMlmuxtPUncMigjnFaDjDL4DvxiBjH7O9GurcAme8le 90nHi/am4XeH0/gavt+jgzdvOsA0ego= -----END CERTIFICATE-----Generated at Sun May 4 19:29:30 2025 by rpki-client