$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa File: d3e7c7a6-4f36-36ab-a259-e80420017c29.roa (raw, json) Hash identifier: yd0dwydD2B8jslDBvKPU82mdT3TJ4iHZs4PY/niH8GI= Subject key identifier: 17:13:EF:A6:CB:7A:21:C2:2C:0C:AB:A0:20:36:30:E6:BC:43:0B:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78526D3F82AFC20C23D6D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.133.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:26:d3:f8:2a:fc:20:c2:3d:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=85d95027-540b-4a2f-b867-e7c0c4f6f985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:49:09:76:d8:56:ec:d6:b1:b4:ca:85:8e: 76:bd:71:18:fd:dd:ce:2f:67:9c:be:0d:8b:20:52: 03:01:f9:d2:8e:bc:22:df:7b:27:b8:5f:48:8e:3f: 57:d4:0d:b4:86:d4:0c:3e:42:ff:93:5c:e9:51:94: 08:70:c2:57:b9:a2:4e:12:73:f5:ac:e7:1f:3c:4b: 11:f3:98:a3:bb:45:45:87:65:0a:74:fe:90:6c:33: 1f:02:80:cc:ab:39:5f:d5:6b:75:ae:60:9e:39:c2: bf:65:4f:30:55:cb:b4:c3:87:8d:7c:21:00:15:e7: 3b:1e:6d:6d:ad:f8:69:28:8e:e8:0f:cb:05:02:70: 86:63:0f:4c:c1:cb:82:34:e1:1b:a0:49:e8:c6:b4: 26:13:53:83:a5:d5:14:c9:9f:4f:58:e9:8e:1c:74: 7c:3f:40:a1:77:89:9c:7b:9e:1f:4a:ca:62:3e:17: 25:3f:62:b6:10:da:1c:1d:b4:31:9f:72:5b:e1:9c: 94:4f:6f:b8:6c:99:ab:24:bd:b6:2d:4b:f9:b0:af: 29:69:73:6c:ab:00:91:9f:d4:d8:2f:27:25:1f:98: 4c:22:85:df:78:9c:5d:b8:f5:e5:b3:ba:bc:d2:43: 24:10:8d:62:c9:5b:a5:2a:6b:60:36:81:ce:5e:51: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:EF:A6:CB:7A:21:C2:2C:0C:AB:A0:20:36:30:E6:BC:43:0B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3e7c7a6-4f36-36ab-a259-e80420017c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5a:d1:7a:05:12:1a:8d:83:e6:30:6b:9d:4c:62:6a:02:67: 30:6f:21:30:6c:32:e6:df:09:0f:d3:dc:7f:38:74:cb:b3:d7: c6:68:39:f7:35:81:0b:85:57:10:1b:be:c6:23:1d:19:ff:6e: 82:f8:16:41:31:f5:14:1a:61:63:46:e1:33:96:b5:7e:37:43: 71:21:a1:83:10:37:40:69:bf:b8:66:13:4b:1b:80:45:cb:e6: 08:45:ad:83:6b:2e:57:fd:38:76:1a:ad:81:02:97:a5:2f:e0: 50:eb:6f:70:13:58:87:1f:65:81:a7:0d:fb:11:d4:9b:fa:00: f2:a5:10:3d:6d:34:9a:45:7e:c1:5b:54:8d:fc:8f:ad:1b:90: 77:f8:4d:9b:7a:0b:6a:33:b2:05:e7:ae:cb:17:3a:8c:36:4a: 64:40:6b:7d:00:26:0f:10:a3:4e:c2:6e:aa:34:da:ab:fc:b4: f7:d3:f1:4b:de:b1:71:c3:c0:ed:12:79:f3:58:04:3c:37:51: 26:ea:91:8c:ff:97:ae:58:b5:bc:ad:30:f3:a6:4a:db:e6:14: ee:63:8b:77:55:5d:d8:70:1d:f5:ae:a5:88:77:33:ea:cb:9a: 0e:dc:fb:4f:6b:40:5d:96:cb:a4:4b:d2:2a:d2:9d:90:f1:4d: 4c:c7:9c:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSbT+Cr8IMI9bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODVkOTUwMjctNTQwYi00YTJmLWI4NjctZTdjMGM0ZjZmOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKNJCXbYVuzWsbTKhY52vXEY/d3OL2ecvg2L IFIDAfnSjrwi33snuF9Ijj9X1A20htQMPkL/k1zpUZQIcMJXuaJOEnP1rOcfPEsR 85iju0VFh2UKdP6QbDMfAoDMqzlf1Wt1rmCeOcK/ZU8wVcu0w4eNfCEAFec7Hm1t rfhpKI7oD8sFAnCGYw9MwcuCNOEboEnoxrQmE1ODpdUUyZ9PWOmOHHR8P0Chd4mc e54fSspiPhclP2K2ENocHbQxn3Jb4ZyUT2+4bJmrJL22LUv5sK8paXNsqwCRn9TY LyclH5hMIoXfeJxduPXls7q80kMkEI1iyVulKmtgNoHOXlHv/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcT76bLeiHCLAyroCA2MOa8QwulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNlN2M3YTYtNGYzNi0z NmFiLWEyNTktZTgwNDIwMDE3YzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5a0XoFEhqNg+Ywa51MYmoCZzBvITBsMubfCQ/T3H84dMuz18ZoOfc1 gQuFVxAbvsYjHRn/boL4FkEx9RQaYWNG4TOWtX43Q3EhoYMQN0Bpv7hmE0sbgEXL 5ghFrYNrLlf9OHYarYECl6Uv4FDrb3ATWIcfZYGnDfsR1Jv6APKlED1tNJpFfsFb VI38j60bkHf4TZt6C2ozsgXnrssXOow2SmRAa30AJg8Qo07Cbqo02qv8tPfT8Uve sXHDwO0SefNYBDw3USbqkYz/l65YtbytMPOmStvmFO5ji3dVXdhwHfWupYh3M+rL mg7c+09rQF2Wy6RL0irSnZDxTUzHnB4= -----END CERTIFICATE-----Generated at Sun May 4 19:25:20 2025 by rpki-client