$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b0ff57d-02fb-34c8-8e43-a0992264d96a.roa File: 1b0ff57d-02fb-34c8-8e43-a0992264d96a.roa (raw, json) Hash identifier: N2w2YPzafv38Qczsc0mpmKFzSVR4ulvl6dHrsAHZlgY= Subject key identifier: E8:17:1E:6F:66:42:8B:C2:05:A4:D5:A9:6F:5A:A0:EA:74:AC:41:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B179B8C37CD10DE0B056A480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b0ff57d-02fb-34c8-8e43-a0992264d96a.roa Signing time: Wed 30 Apr 2025 02:37:09 +0000 ROA not before: Wed 30 Apr 2025 02:37:09 +0000 ROA not after: Tue 29 Jul 2025 02:37:09 +0000 asID: 396982 IP address blocks: 34.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:79:b8:c3:7c:d1:0d:e0:b0:56:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:37:09 2025 GMT Not After : Jul 29 02:37:09 2025 GMT Subject: CN=0ed4fd6b-ffb9-4ae1-a77e-a8a33a547d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:70:28:72:bb:3f:2d:a3:6e:6a:2a:20:f8: f8:1c:01:10:d9:18:f5:e4:78:c2:e7:64:ec:66:f1: 3d:56:4c:51:15:91:08:34:9f:43:13:da:e1:28:de: 2f:f6:08:2d:fd:dd:3a:9b:9f:1b:bb:be:52:10:b4: cf:55:b7:b6:61:e4:e4:e9:c1:dc:ea:44:40:c4:fc: 55:81:9e:72:a8:2e:b3:55:12:ec:b8:d5:41:b6:46: 3e:b5:24:7d:3c:04:ff:9b:ba:af:74:63:72:28:9c: 42:ec:7a:33:f7:b3:6e:22:11:5b:6e:8c:78:84:e5: 78:9f:ff:1c:85:06:63:84:61:27:ec:9d:d0:13:1c: 4a:ca:6c:e8:ad:36:be:7e:fd:3d:89:c0:66:2a:5f: f9:7a:7f:24:63:39:a4:d3:ca:bb:84:84:a6:43:b7: a2:1f:dd:f1:23:8e:88:c8:62:1c:3a:42:dc:7d:bb: 96:76:ac:28:55:9e:c6:97:a4:22:f3:5e:b6:53:4a: 2e:17:43:aa:10:aa:75:72:be:89:45:6d:b5:33:c2: a7:3a:54:54:32:90:c4:be:dc:30:19:a7:2c:f3:f6: 18:bd:a2:9a:d8:bb:90:5d:a1:b7:2c:b5:12:d0:bb: cd:db:92:9a:7c:e2:1d:e3:51:ab:29:a1:33:98:8c: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:17:1E:6F:66:42:8B:C2:05:A4:D5:A9:6F:5A:A0:EA:74:AC:41:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b0ff57d-02fb-34c8-8e43-a0992264d96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:82:38:cf:ef:ed:34:96:b7:65:69:84:0e:8d:9e:96:39:f9: 13:81:16:b6:ff:4a:30:eb:0c:34:10:8b:6b:f8:4a:49:74:2c: 78:e2:cc:40:bc:be:60:90:a4:cb:d5:6b:95:16:ff:f7:a4:1a: 03:44:53:fa:9e:70:41:f0:1d:ea:35:28:ab:6b:78:4a:67:84: 70:09:0c:b4:1d:53:a6:4c:73:15:54:33:d2:08:f7:84:cc:fc: 8d:55:5b:36:9e:89:c5:80:f5:0d:f4:01:3f:19:9e:2a:26:60: a7:47:bb:97:44:39:6b:d3:17:24:8f:83:7f:b2:eb:d2:d7:b2: 2a:41:32:32:99:66:06:c9:5a:b6:69:63:32:d5:e3:09:51:4a: ac:c7:00:fa:9f:13:ee:7e:57:fd:09:72:d3:21:b0:70:16:55: 9f:20:5a:66:d7:38:9a:84:f7:1e:14:a2:48:5d:8c:d8:ec:05: e2:f7:9b:12:19:6a:92:31:ef:12:48:8a:dd:ef:48:8e:ca:80: 7d:50:2e:c5:69:c8:6b:7e:db:9d:af:dc:ce:84:51:09:64:7f: c4:92:09:35:61:0e:61:26:1d:3e:61:c9:6f:a9:53:3d:0b:b9: e5:96:02:0d:e5:a0:32:fd:9a:a9:60:94:8a:0f:d0:7d:7b:ef: f3:36:89:bd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxebjDfNEN4LBWpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzcwOVoXDTI1MDcyOTAyMzcwOVowLzEtMCsGA1UEAxMk MGVkNGZkNmItZmZiOS00YWUxLWE3N2UtYThhMzNhNTQ3ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbtwKHK7Py2jbmoqIPj4HAEQ2Rj15HjC52Ts ZvE9VkxRFZEINJ9DE9rhKN4v9ggt/d06m58bu75SELTPVbe2YeTk6cHc6kRAxPxV gZ5yqC6zVRLsuNVBtkY+tSR9PAT/m7qvdGNyKJxC7Hoz97NuIhFbbox4hOV4n/8c hQZjhGEn7J3QExxKymzorTa+fv09icBmKl/5en8kYzmk08q7hISmQ7eiH93xI46I yGIcOkLcfbuWdqwoVZ7Gl6Qi8162U0ouF0OqEKp1cr6JRW21M8KnOlRUMpDEvtww Gacs8/YYvaKa2LuQXaG3LLUS0LvN25KafOId41GrKaEzmIwGSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOgXHm9mQovCBaTVqW9aoOp0rEH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIwZmY1N2QtMDJmYi0z NGM4LThlNDMtYTA5OTIyNjRkOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALoI4z+/tNJa3ZWmEDo2eljn5E4EWtv9KMOsMNBCLa/hKSXQseOLMQLy+ YJCky9VrlRb/96QaA0RT+p5wQfAd6jUoq2t4SmeEcAkMtB1TpkxzFVQz0gj3hMz8 jVVbNp6JxYD1DfQBPxmeKiZgp0e7l0Q5a9MXJI+Df7Lr0teyKkEyMplmBslatmlj MtXjCVFKrMcA+p8T7n5X/Qly0yGwcBZVnyBaZtc4moT3HhSiSF2M2OwF4vebEhlq kjHvEkiK3e9IjsqAfVAuxWnIa37bna/czoRRCWR/xJIJNWEOYSYdPmHJb6lTPQu5 5ZYCDeWgMv2aqWCUig/QfXvv8zaJvQ== -----END CERTIFICATE-----Generated at Sun May 4 18:24:19 2025 by rpki-client