$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c70484de-cea8-3a72-a316-b10555df7722.roa File: c70484de-cea8-3a72-a316-b10555df7722.roa (raw, json) Hash identifier: N60esOjjAXnQHE1a4rnOKgcIE3EYP8jAnGe4XPQkmgk= Subject key identifier: 7F:4F:33:B1:FE:4E:0B:70:E8:42:E7:77:D9:24:41:03:7B:7C:17:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850D1C1A8FABA0511AD880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c70484de-cea8-3a72-a316-b10555df7722.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.135.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0d:1c:1a:8f:ab:a0:51:1a:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=209d1340-e13c-4839-9e15-a3727fe3dd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c8:8b:60:84:73:46:16:92:15:4f:8b:48:aa: 37:57:e7:88:20:3c:26:ad:d5:34:73:7e:b4:bb:78: 06:64:87:12:7b:2a:c7:9c:59:e4:24:51:36:b1:2b: 88:25:b1:0b:57:2b:7e:e9:c2:54:f1:2a:b6:80:e3: 4b:7f:3e:4b:fb:7c:68:7c:32:21:23:f9:0a:e9:d2: 78:7f:98:0d:d2:7f:f6:33:1e:27:24:9d:70:2d:a1: 3a:5b:da:eb:6c:f4:fb:46:51:75:fb:08:8d:3c:3d: 94:1c:ea:f4:4a:25:9a:ef:75:a4:2e:04:98:33:22: 7c:fe:69:f7:58:90:a8:0f:22:87:db:64:3a:7c:36: 09:a9:e2:dc:2a:d4:42:b4:85:5c:b7:aa:d9:3d:90: c1:4d:e9:c2:9b:91:11:67:fe:30:b1:37:ad:d7:32: 3d:07:5a:60:2b:f3:bc:b1:42:2b:ff:b3:c1:e4:02: a4:a5:c8:be:34:cd:45:9f:ee:76:75:f1:54:9d:64: 94:16:bd:00:36:51:39:97:65:7b:a9:c6:e9:82:ec: cb:43:fb:02:2f:89:ca:41:d8:8f:65:f1:28:6c:bc: 91:54:e2:62:f5:92:16:e8:85:1a:c8:48:81:58:e7: cf:d7:6f:49:14:c2:bc:1e:85:5a:c0:23:fa:14:29: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4F:33:B1:FE:4E:0B:70:E8:42:E7:77:D9:24:41:03:7B:7C:17:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c70484de-cea8-3a72-a316-b10555df7722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0b:df:63:d1:91:73:99:5c:ed:b9:f0:d0:73:b6:4f:11:fe: d4:64:d7:19:9d:8f:6e:a9:ca:9b:0b:24:40:33:6c:5e:b7:a2: e4:59:3d:f0:f7:3d:01:5c:14:57:d5:e2:c5:70:cd:3c:b9:e2: 8b:79:19:4c:97:7f:3c:bf:d2:1b:57:23:15:2f:f9:c4:42:18: fc:c5:9e:fd:31:ef:9a:8b:3e:21:e4:b2:ce:ec:57:df:64:ab: 5e:6d:49:f8:bb:24:e6:ca:d0:fb:16:0f:c1:0c:37:c2:c0:bd: 34:0c:e5:f3:d9:5a:d9:97:a7:f2:4f:48:17:d8:db:51:53:ca: 23:cd:07:f1:9d:05:4a:e5:23:09:36:a3:56:f3:7c:a8:5e:0d: 5b:c5:41:57:f4:fe:80:6e:0b:9c:5c:26:68:5d:b1:b3:4a:9d: e4:d8:17:77:68:78:7d:3c:72:4e:64:e7:04:2e:b0:54:4e:ec: 8b:51:09:f3:99:34:c8:27:ce:6e:8c:9e:4f:ed:3f:0f:36:3a: fa:15:13:33:e3:81:11:2c:b7:34:fc:97:e7:4a:1f:2f:f6:4c: d1:8d:7d:f9:5b:bd:70:16:ac:c3:06:bb:15:4a:f9:07:f8:77: 9b:52:e2:14:d4:1d:88:f7:31:93:a4:c6:7a:e6:cc:78:b0:26: 51:3f:e5:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ0cGo+roFEa2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjA5ZDEzNDAtZTEzYy00ODM5LTllMTUtYTM3MjdmZTNkZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMiLYIRzRhaSFU+LSKo3V+eIIDwmrdU0c360 u3gGZIcSeyrHnFnkJFE2sSuIJbELVyt+6cJU8Sq2gONLfz5L+3xofDIhI/kK6dJ4 f5gN0n/2Mx4nJJ1wLaE6W9rrbPT7RlF1+wiNPD2UHOr0SiWa73WkLgSYMyJ8/mn3 WJCoDyKH22Q6fDYJqeLcKtRCtIVct6rZPZDBTenCm5ERZ/4wsTet1zI9B1pgK/O8 sUIr/7PB5AKkpci+NM1Fn+52dfFUnWSUFr0ANlE5l2V7qcbpguzLQ/sCL4nKQdiP ZfEobLyRVOJi9ZIW6IUayEiBWOfP129JFMK8HoVawCP6FCn+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9PM7H+Tgtw6ELnd9kkQQN7fBcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzcwNDg0ZGUtY2VhOC0z YTcyLWEzMTYtYjEwNTU1ZGY3NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIodAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYL32PRkXOZXO258NBztk8R/tRk1xmdj26pypsLJEAzbF63ouRZPfD3 PQFcFFfV4sVwzTy54ot5GUyXfzy/0htXIxUv+cRCGPzFnv0x75qLPiHkss7sV99k q15tSfi7JObK0PsWD8EMN8LAvTQM5fPZWtmXp/JPSBfY21FTyiPNB/GdBUrlIwk2 o1bzfKheDVvFQVf0/oBuC5xcJmhdsbNKneTYF3doeH08ck5k5wQusFRO7ItRCfOZ NMgnzm6Mnk/tPw82OvoVEzPjgREstzT8l+dKHy/2TNGNfflbvXAWrMMGuxVK+Qf4 d5tS4hTUHYj3MZOkxnrmzHiwJlE/5QU= -----END CERTIFICATE-----Generated at Sun May 4 23:48:32 2025 by rpki-client