$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa File: b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa (raw, json) Hash identifier: hQBM/irTRMJNG+/NhpeZ7Yvp/MaT5F3qR0LEG4JZbxc= Subject key identifier: DE:42:AF:FD:A8:EB:9F:4F:94:BB:99:11:2D:44:05:CF:76:B0:99:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785291C57625C086B2D2B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.145.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:29:1c:57:62:5c:08:6b:2d:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=cfb779cc-6fd4-4ae0-b107-a0417523921a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:5c:1e:29:a7:45:28:d2:40:a9:92:53:10: 07:0d:3b:73:b2:bb:e8:f5:73:fc:6c:ab:80:4f:b1: c3:a4:c1:2e:b8:7b:07:49:74:e8:93:9a:08:a3:14: f3:80:28:e2:86:a8:28:22:91:08:99:2b:e1:c4:af: 3c:d7:ba:89:35:25:ba:46:64:bf:bd:c8:e5:92:90: 0d:6b:1d:75:bd:78:7c:6d:e3:7b:8c:01:ee:62:5c: fa:f1:8e:4f:d8:e7:ef:3d:7c:cd:47:38:2e:41:2c: ca:33:22:0e:f3:c3:86:c8:65:f4:c3:a5:75:99:07: e8:b2:4b:a1:96:6f:2f:81:38:b3:b8:b5:70:c8:5b: 07:8f:53:83:37:f0:1a:05:cc:0e:4a:4e:76:4e:91: ce:39:4a:61:4b:94:1d:ae:b6:19:f6:c5:27:1e:88: 11:97:1e:a1:98:56:d6:50:9d:9d:61:cd:c7:34:5f: f8:3b:ec:7a:21:9f:23:76:d8:56:bf:32:cc:f4:1f: c7:ea:2f:80:e9:c8:b4:e7:1b:f3:3d:2c:b2:df:4d: c0:66:1d:ea:b3:65:5a:ec:7c:62:2a:fc:5c:c4:29: 5a:e0:d9:69:ee:0d:cb:22:15:90:80:e2:a1:5a:0b: 41:4f:16:eb:3b:fd:fd:14:06:dc:1d:ba:ab:7b:7e: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:AF:FD:A8:EB:9F:4F:94:BB:99:11:2D:44:05:CF:76:B0:99:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7946bd6-1d41-3870-96a8-a56deae3a1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8b:6c:17:cc:d3:01:a7:ac:3a:03:67:69:82:48:98:6e:6a: ff:f8:1e:ec:de:7f:fa:21:85:43:df:25:53:62:4c:a6:a0:1c: 27:5f:dd:45:cd:4a:6e:fe:c4:31:87:52:cc:c6:ce:64:0e:a7: 66:a0:96:71:4d:76:dd:ee:7f:8f:87:cb:be:21:d2:fd:c1:dd: ed:67:11:7b:2b:6c:7d:b2:80:c1:cd:8d:61:89:60:a9:7c:2d: f4:8e:ab:13:19:b9:49:cb:39:a8:bd:0d:b3:c2:81:ab:48:0b: c4:72:29:90:f0:fd:3c:8d:85:8f:3b:69:62:65:67:5c:3b:28: b5:23:19:e2:e1:c3:d9:da:45:f5:82:d1:78:6c:cf:06:0b:6c: 5d:94:cc:c0:d4:b7:7a:e3:ff:4d:da:0e:13:cf:c0:02:66:fd: 8a:9a:33:6b:5c:0c:9c:a2:b8:87:0e:a5:fc:16:1c:27:ad:31: a1:78:00:91:ec:de:fc:ea:cb:c4:3d:2e:b4:cb:cb:9e:38:38: 53:05:e5:8c:a5:d4:4d:c2:b3:cb:07:b7:09:04:af:a3:89:0c: 33:78:8b:67:6c:09:8a:48:81:80:62:e5:36:b2:ed:5e:c6:04: 18:99:ca:ad:df:b6:d2:9f:02:b3:32:48:b6:13:ba:cd:99:d4: 58:36:5f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSkcV2JcCGstK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2ZiNzc5Y2MtNmZkNC00YWUwLWIxMDctYTA0MTc1MjM5MjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv51cHimnRSjSQKmSUxAHDTtzsrvo9XP8bKuA T7HDpMEuuHsHSXTok5oIoxTzgCjihqgoIpEImSvhxK8817qJNSW6RmS/vcjlkpAN ax11vXh8beN7jAHuYlz68Y5P2OfvPXzNRzguQSzKMyIO88OGyGX0w6V1mQfoskuh lm8vgTizuLVwyFsHj1ODN/AaBcwOSk52TpHOOUphS5QdrrYZ9sUnHogRlx6hmFbW UJ2dYc3HNF/4O+x6IZ8jdthWvzLM9B/H6i+A6ci05xvzPSyy303AZh3qs2Va7Hxi KvxcxCla4Nlp7g3LIhWQgOKhWgtBTxbrO/39FAbcHbqre34xHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5Cr/2o659PlLuZES1EBc92sJmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjc5NDZiZDYtMWQ0MS0z ODcwLTk2YTgtYTU2ZGVhZTNhMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGLbBfM0wGnrDoDZ2mCSJhuav/4Huzef/ohhUPfJVNiTKagHCdf3UXN Sm7+xDGHUszGzmQOp2aglnFNdt3uf4+Hy74h0v3B3e1nEXsrbH2ygMHNjWGJYKl8 LfSOqxMZuUnLOai9DbPCgatIC8RyKZDw/TyNhY87aWJlZ1w7KLUjGeLhw9naRfWC 0XhszwYLbF2UzMDUt3rj/03aDhPPwAJm/YqaM2tcDJyiuIcOpfwWHCetMaF4AJHs 3vzqy8Q9LrTLy544OFMF5Yyl1E3Cs8sHtwkEr6OJDDN4i2dsCYpIgYBi5Tay7V7G BBiZyq3fttKfArMySLYTus2Z1Fg2XwQ= -----END CERTIFICATE-----Generated at Sun May 4 18:42:34 2025 by rpki-client