$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa65b408-608c-368d-8bb9-fb1f574bcc42.roa File: fa65b408-608c-368d-8bb9-fb1f574bcc42.roa (raw, json) Hash identifier: pyXQBSCF1nuev0dst771yhJxf0A36iRQIB+jaDS19OA= Subject key identifier: 8A:8B:A0:80:13:7C:4C:6E:FA:CD:27:FC:7A:85:8E:C6:D3:04:B9:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EA1D59F7828DC5DF74C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa65b408-608c-368d-8bb9-fb1f574bcc42.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.134.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:1d:59:f7:82:8d:c5:df:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2693cfca-01b5-4c8a-9044-19e7e6c3b79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:a8:c3:37:28:c2:57:42:52:62:5c:ac:d9: 7d:8c:a3:b7:fd:8f:ee:3b:87:ec:d7:2c:97:29:07: 3a:9f:c3:dc:02:a3:09:79:ca:55:9c:84:38:ff:fd: 0b:b1:05:82:a7:d1:88:e4:0d:21:8e:2d:3d:42:81: 01:2d:a8:9e:74:8a:01:b8:7a:50:8a:41:c2:4a:13: 7a:cc:18:54:ae:f0:28:3a:4f:ee:8f:3e:d2:20:42: 59:c8:3e:26:da:bc:e5:b1:57:f7:45:d4:9d:a4:24: 6b:7f:43:57:83:b7:0b:f8:2c:3f:2f:10:d6:90:a4: 08:8f:59:20:63:ee:f9:ac:e9:f2:f6:ab:cb:44:79: 90:9b:f1:ca:18:53:91:6c:4d:33:bf:9e:76:0c:51: 1c:94:cd:c8:a7:45:f1:dd:27:27:5d:4d:89:40:cd: f2:7b:0f:16:7e:3a:62:5b:78:6b:ce:ef:c1:cf:89: 9b:64:99:34:5a:f6:6f:ce:e5:c6:25:60:cd:e2:65: 5b:6b:dd:1e:37:36:b8:30:18:e1:38:fb:fc:a3:91: 08:af:9d:24:f1:bf:e4:57:98:3e:90:14:48:b2:76: 1e:fb:e6:6c:75:f1:e5:26:9c:01:b6:c8:ce:5c:de: cc:90:d8:78:8e:01:3d:25:ca:78:76:88:78:2d:ac: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8B:A0:80:13:7C:4C:6E:FA:CD:27:FC:7A:85:8E:C6:D3:04:B9:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa65b408-608c-368d-8bb9-fb1f574bcc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:ba:df:25:28:e8:d7:a5:10:95:58:04:ee:17:59:02:99: 40:3d:ec:09:66:fc:9b:16:eb:f2:6a:9e:ce:e5:af:54:33:5f: bf:50:7a:a8:2d:91:3c:4e:13:4e:e0:93:f6:3c:01:6c:89:8d: aa:63:3f:d4:69:dc:69:c1:97:af:47:fd:c4:aa:93:77:e4:a6: 0f:4c:c0:e7:4f:5b:fe:10:61:84:81:60:a4:f6:2d:70:a5:f8: 96:18:4e:6b:1c:e4:14:4d:8b:c9:1c:2e:8c:61:34:8e:42:87: 45:02:e3:84:cd:8a:df:cf:d3:be:e6:05:70:28:ba:7a:95:0a: 6c:c1:86:23:ed:f1:ac:ab:96:75:b0:ec:90:11:a9:c0:2c:a3: d8:74:0d:f4:60:0b:67:06:c0:ca:29:08:02:44:61:26:23:f1: ca:d2:96:48:ff:37:bf:44:93:f1:96:72:eb:38:59:6a:f0:ab: c8:e5:c8:07:f7:87:a7:fa:81:ce:b3:a0:55:1e:e0:14:b5:27: 47:33:f4:1e:24:a0:c0:67:ec:e4:ec:6a:77:a0:ba:a8:72:4a: 2d:30:bb:ad:29:0c:c1:0e:5a:25:10:84:28:8b:b2:09:79:f3: 1b:1f:d6:dd:b8:cc:a8:be:7c:f4:af:d0:f7:71:17:97:65:d8: 23:4b:0e:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOodWfeCjcXfdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjY5M2NmY2EtMDFiNS00YzhhLTkwNDQtMTllN2U2YzNiNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqCowzcowldCUmJcrNl9jKO3/Y/uO4fs1yyX KQc6n8PcAqMJecpVnIQ4//0LsQWCp9GI5A0hji09QoEBLaiedIoBuHpQikHCShN6 zBhUrvAoOk/ujz7SIEJZyD4m2rzlsVf3RdSdpCRrf0NXg7cL+Cw/LxDWkKQIj1kg Y+75rOny9qvLRHmQm/HKGFORbE0zv552DFEclM3Ip0Xx3ScnXU2JQM3yew8Wfjpi W3hrzu/Bz4mbZJk0WvZvzuXGJWDN4mVba90eNza4MBjhOPv8o5EIr50k8b/kV5g+ kBRIsnYe++ZsdfHlJpwBtsjOXN7MkNh4jgE9Jcp4doh4Lay6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqLoIATfExu+s0n/HqFjsbTBLmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE2NWI0MDgtNjA4Yy0z NjhkLThiYjktZmIxZjU3NGJjYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMnut8lKOjXpRCVWATuF1kCmUA97Alm/JsW6/Jqns7lr1QzX79Qeqgt kTxOE07gk/Y8AWyJjapjP9Rp3GnBl69H/cSqk3fkpg9MwOdPW/4QYYSBYKT2LXCl +JYYTmsc5BRNi8kcLoxhNI5Ch0UC44TNit/P077mBXAounqVCmzBhiPt8ayrlnWw 7JARqcAso9h0DfRgC2cGwMopCAJEYSYj8crSlkj/N79Ek/GWcus4WWrwq8jlyAf3 h6f6gc6zoFUe4BS1J0cz9B4koMBn7OTsaneguqhySi0wu60pDMEOWiUQhCiLsgl5 8xsf1t24zKi+fPSv0PdxF5dl2CNLDp8= -----END CERTIFICATE-----Generated at Sun May 4 19:09:45 2025 by rpki-client