$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa File: fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa (raw, json) Hash identifier: eK+YgRVHNxujvjCnWBCKe5EyFFKkbLcqqmitZfBpdjY= Subject key identifier: 98:F3:C1:07:33:2E:D4:73:72:00:85:36:19:7D:FF:CB:53:AA:49:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785257D5472E4AC5FEADD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.66.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:25:7d:54:72:e4:ac:5f:ea:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4bfd0345-7978-40b9-a136-aca36dc5d41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:93:c3:e7:e9:e4:9d:2f:14:48:5e:2e:67: 8c:c2:84:7b:ae:05:d5:8b:6a:5d:77:98:dc:b2:70: bd:98:d2:64:f7:da:c8:58:df:7e:4e:08:5a:e6:74: 70:7e:0d:aa:96:20:31:05:46:48:c9:48:e5:e1:1b: 45:04:b2:8e:18:ca:fd:7e:0a:1e:e3:22:1b:4d:9e: 9e:1e:28:01:de:83:96:c0:af:63:4f:45:12:86:79: 65:e0:88:cf:12:ea:27:99:1c:f6:df:51:0d:25:e0: 99:6a:93:07:6f:f2:a0:79:2e:e9:ca:77:36:37:a5: a8:5a:02:79:08:44:65:c3:a2:70:d7:06:86:37:af: 70:51:4f:94:cf:b3:f6:38:e0:d1:03:c7:d6:df:a8: 6c:3a:5f:a6:20:68:87:a4:cf:cb:26:d7:05:55:b3: f0:6d:bb:86:bc:56:f1:fc:21:c6:7a:b4:d6:cd:81: bb:85:d3:75:71:ba:34:15:0c:0f:c9:55:43:fa:1f: 99:fc:71:25:4f:f1:e5:f6:ce:7e:27:22:8f:29:fd: 20:dc:ed:31:56:61:16:7d:1d:60:22:5b:b0:08:5b: fb:ef:37:71:1f:ca:51:df:62:91:28:de:09:e1:32: 15:68:67:1e:d7:cc:99:e5:b6:2b:25:66:15:b0:35: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F3:C1:07:33:2E:D4:73:72:00:85:36:19:7D:FF:CB:53:AA:49:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:54:e6:25:df:3c:9d:de:c9:99:39:4f:32:22:00:ad:ab:fc: 24:42:3b:56:8f:35:0b:d6:df:56:5e:94:eb:19:a9:06:5d:97: 42:49:6e:d1:ec:30:62:23:db:9d:8b:e4:49:a3:db:09:6d:2b: 32:73:39:6f:f1:a4:d2:60:bb:7e:72:8e:24:44:ec:fb:ab:a6: ab:37:a7:2b:37:80:43:77:90:6a:20:95:d9:e5:74:b1:e0:83: 7b:41:2f:79:83:8e:a6:f8:9c:c3:8f:af:49:c6:b6:75:ae:f5: e9:e5:2f:35:f1:d1:57:4d:57:50:0d:ef:57:f3:35:28:96:db: 14:19:f9:e3:bb:27:59:05:ea:cd:9e:ba:d4:04:45:54:93:d6: d3:c7:b8:c1:ca:62:83:ce:62:85:a6:b9:b4:b4:3a:f3:fe:13: d5:20:59:5c:1f:e1:df:f3:16:00:a9:5a:4a:c9:5a:84:b2:05: 58:68:9d:11:32:ac:a3:01:ad:b8:02:56:4c:f3:3a:63:d5:53: 2c:c6:bd:17:ab:fe:75:cf:3a:2a:1f:2f:6a:fc:f4:e8:35:55: cd:ce:47:e3:54:12:76:eb:b0:8b:be:84:5c:df:4c:af:80:fc: 15:d0:d5:03:94:e4:50:a6:12:72:39:46:17:f4:17:77:85:be: 82:65:d7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSV9VHLkrF/q3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGJmZDAzNDUtNzk3OC00MGI5LWExMzYtYWNhMzZkYzVkNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxaTw+fp5J0vFEheLmeMwoR7rgXVi2pdd5jc snC9mNJk99rIWN9+Tgha5nRwfg2qliAxBUZIyUjl4RtFBLKOGMr9fgoe4yIbTZ6e HigB3oOWwK9jT0UShnll4IjPEuonmRz231ENJeCZapMHb/KgeS7pync2N6WoWgJ5 CERlw6Jw1waGN69wUU+Uz7P2OODRA8fW36hsOl+mIGiHpM/LJtcFVbPwbbuGvFbx /CHGerTWzYG7hdN1cbo0FQwPyVVD+h+Z/HElT/Hl9s5+JyKPKf0g3O0xVmEWfR1g IluwCFv77zdxH8pR32KRKN4J4TIVaGce18yZ5bYrJWYVsDWLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjzwQczLtRzcgCFNhl9/8tTqkl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmM4YzFmNWEtYzRlNi0z NTFiLThlN2YtZTE0OTc2MzlhM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5U5iXfPJ3eyZk5TzIiAK2r/CRCO1aPNQvW31ZelOsZqQZdl0JJbtHs MGIj252L5Emj2wltKzJzOW/xpNJgu35yjiRE7Purpqs3pys3gEN3kGogldnldLHg g3tBL3mDjqb4nMOPr0nGtnWu9enlLzXx0VdNV1AN71fzNSiW2xQZ+eO7J1kF6s2e utQERVST1tPHuMHKYoPOYoWmubS0OvP+E9UgWVwf4d/zFgCpWkrJWoSyBVhonREy rKMBrbgCVkzzOmPVUyzGvRer/nXPOiofL2r89Og1Vc3OR+NUEnbrsIu+hFzfTK+A /BXQ1QOU5FCmEnI5Rhf0F3eFvoJl13g= -----END CERTIFICATE-----Generated at Sun May 4 18:29:50 2025 by rpki-client