$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa File: 0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa (raw, json) Hash identifier: Wd2f26dpNR9mJkCkuzHZKvVgQPOHp0Sw5OkFYqPzM/Y= Subject key identifier: F3:64:F3:6B:B7:AB:38:AA:F9:5C:45:CC:50:CA:2A:9C:08:73:C9:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851C48D1A6EB90539142C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.95.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1c:48:d1:a6:eb:90:53:91:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fb6e5fc7-bc17-4845-86f9-bd21a002c10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:8b:97:f3:de:67:8f:b3:26:2f:2c:00:47: 66:a7:db:e5:08:5f:27:de:7b:b2:54:0e:d7:19:95: ef:0f:bc:89:b9:a6:ec:b5:ad:47:54:c6:8b:5a:c8: ee:fb:00:d0:44:ca:42:d2:c3:67:95:18:4d:9a:38: e6:70:a8:5d:33:85:ac:a9:22:83:5a:0e:01:3d:a4: ce:10:cd:3c:6d:d5:32:64:ab:00:0c:41:1c:33:75: 48:87:dd:75:97:36:e9:1b:3c:8e:a0:26:6f:98:9c: 5e:d8:a4:52:a9:5e:7a:77:58:29:ca:23:9f:03:b2: 7b:00:ff:2d:57:c8:3a:47:23:2a:03:de:ed:d8:02: 15:b6:b8:b7:bf:11:52:15:72:d2:af:a7:3b:ea:cc: 76:83:8b:1e:13:84:41:b8:d1:78:43:1a:4e:6d:f1: 33:fa:96:97:35:09:5a:c1:a5:f5:4f:52:b8:9f:64: 97:8e:26:1e:c0:67:f9:e2:b5:e1:64:6b:de:8e:24: 27:07:2a:3d:1c:3a:31:cb:6e:8b:ae:fe:67:06:87: 95:df:02:bc:72:3e:e1:6d:11:0d:1d:1a:8f:1e:fb: 35:f6:7c:a6:7f:6d:33:e1:a1:86:78:55:68:dc:0d: ec:c4:e9:dd:9c:93:3a:c7:ad:b2:44:50:f7:b9:1f: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:64:F3:6B:B7:AB:38:AA:F9:5C:45:CC:50:CA:2A:9C:08:73:C9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0aff21a2-80a8-335b-ad67-4b7d931ca0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:6c:d8:90:2d:9d:c2:b7:4a:75:22:fb:f5:0a:b7:50:f5: 02:08:23:18:35:1f:9f:7f:8f:4f:ce:fc:10:df:35:59:ff:9e: c7:99:30:f2:6e:0b:63:d4:b4:98:78:36:c8:83:29:7a:60:77: 41:36:c9:48:fd:8b:e3:18:b3:c8:dc:09:50:63:e2:ab:f8:20: e8:25:bf:90:55:c2:63:9f:47:67:b8:b2:fa:f2:39:1d:53:db: dc:b1:93:dd:5e:aa:df:de:0e:f2:54:1b:ef:7a:d0:0f:e1:41: ef:9f:86:af:70:5b:3c:21:9e:f8:9b:05:2c:be:e7:db:27:3f: 04:92:84:44:39:01:b9:17:ea:90:6e:96:e5:da:fb:10:95:ae: f6:ca:63:50:eb:7e:5e:d2:af:0e:00:11:67:ad:ee:c8:5b:e8: b2:68:9d:89:53:4e:08:c6:52:db:be:fb:58:4f:23:2b:0f:1c: b7:36:e6:2b:c2:d0:ae:d7:60:92:53:2b:96:9f:90:fa:16:bc: 48:0c:c8:3a:b7:7f:90:ca:74:dd:32:c8:0f:73:a0:bc:73:ab: 6f:41:c4:b1:9e:f8:6e:c6:f3:77:74:58:df:21:28:ab:cf:1b: b0:10:4d:6b:55:64:fd:99:5b:57:4a:7f:1e:46:04:91:38:41: 8c:41:b7:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRxI0abrkFORQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmI2ZTVmYzctYmMxNy00ODQ1LTg2ZjktYmQyMWEwMDJjMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueGLl/PeZ4+zJi8sAEdmp9vlCF8n3nuyVA7X GZXvD7yJuabsta1HVMaLWsju+wDQRMpC0sNnlRhNmjjmcKhdM4WsqSKDWg4BPaTO EM08bdUyZKsADEEcM3VIh911lzbpGzyOoCZvmJxe2KRSqV56d1gpyiOfA7J7AP8t V8g6RyMqA97t2AIVtri3vxFSFXLSr6c76sx2g4seE4RBuNF4QxpObfEz+paXNQla waX1T1K4n2SXjiYewGf54rXhZGvejiQnByo9HDoxy26Lrv5nBoeV3wK8cj7hbREN HRqPHvs19nymf20z4aGGeFVo3A3sxOndnJM6x62yRFD3uR+rRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNk82u3qziq+VxFzFDKKpwIc8mOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGFmZjIxYTItODBhOC0z MzViLWFkNjctNGI3ZDkzMWNhMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIl9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH70bNiQLZ3Ct0p1Ivv1CrdQ9QIIIxg1H59/j0/O/BDfNVn/nseZMPJu C2PUtJh4NsiDKXpgd0E2yUj9i+MYs8jcCVBj4qv4IOglv5BVwmOfR2e4svryOR1T 29yxk91eqt/eDvJUG+960A/hQe+fhq9wWzwhnvibBSy+59snPwSShEQ5AbkX6pBu luXa+xCVrvbKY1Drfl7Srw4AEWet7shb6LJonYlTTgjGUtu++1hPIysPHLc25ivC 0K7XYJJTK5afkPoWvEgMyDq3f5DKdN0yyA9zoLxzq29BxLGe+G7G83d0WN8hKKvP G7AQTWtVZP2ZW1dKfx5GBJE4QYxBt4E= -----END CERTIFICATE-----Generated at Sun May 4 18:58:59 2025 by rpki-client