$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cab29e8-7037-3c42-86c5-a019d15e6983.roa File: 2cab29e8-7037-3c42-86c5-a019d15e6983.roa (raw, json) Hash identifier: oM46PCA629K7kvjkJbalTWjy3TOslkAkwhcpC+aXPc8= Subject key identifier: B3:EF:41:FA:C6:F6:6F:31:26:AB:DE:68:FB:48:39:08:D6:C6:B6:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B179A51DDDAE8D3D4BA51D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cab29e8-7037-3c42-86c5-a019d15e6983.roa Signing time: Wed 30 Apr 2025 02:37:00 +0000 ROA not before: Wed 30 Apr 2025 02:37:00 +0000 ROA not after: Tue 29 Jul 2025 02:37:00 +0000 asID: 396982 IP address blocks: 34.136.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:79:a5:1d:dd:ae:8d:3d:4b:a5:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:37:00 2025 GMT Not After : Jul 29 02:37:00 2025 GMT Subject: CN=fc204bdc-2103-445f-ab92-9e4ec0c0026d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:e0:d1:e0:db:87:70:ef:54:cc:83:26:78: 04:ff:af:f7:4d:4e:44:ac:0b:3f:9c:d3:87:32:e4: 11:a4:6e:d0:ab:41:d0:8d:69:c3:02:e2:bc:92:e0: 13:1a:14:08:a2:2d:40:9a:09:0e:df:e4:72:07:5d: 85:7e:af:d8:a0:e0:74:84:c7:de:ff:01:9e:37:1f: 48:ea:8e:eb:77:bf:4b:e8:1c:e3:6a:73:9c:71:ab: 2a:fc:08:77:8f:bf:d3:2d:11:57:95:02:a3:73:2b: 36:cf:85:d5:ea:a1:d0:98:ed:11:72:9f:f7:f7:55: ec:3f:71:da:d5:db:b1:e8:89:c5:79:6c:5c:31:3a: 1a:2c:cb:f8:0e:4a:69:d4:82:39:3a:00:a4:cf:98: f1:a0:8a:ef:66:f4:81:15:22:c2:cd:2d:ec:dd:1d: b6:2b:4c:6b:7f:0b:82:65:25:9d:7c:e1:d6:e2:f8: b7:66:40:15:c4:74:99:27:d4:69:7f:81:4f:01:7e: ec:b1:4d:47:dd:e6:9e:f6:d7:6c:0f:ea:0a:03:34: a5:31:6d:07:f6:af:7f:eb:8d:f6:50:ce:c0:09:1a: 7b:2d:43:2f:56:c4:8f:de:60:c2:50:9e:78:33:d9: e8:5a:79:ea:70:7b:85:dc:61:59:d7:ef:5e:69:40: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EF:41:FA:C6:F6:6F:31:26:AB:DE:68:FB:48:39:08:D6:C6:B6:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2cab29e8-7037-3c42-86c5-a019d15e6983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2f:0b:c9:54:34:37:79:18:8e:e8:4e:73:17:47:71:50:c2: 6f:2f:f1:ac:d9:0f:11:4c:c2:27:f0:e7:24:87:1d:46:72:7c: 74:99:45:cd:ea:55:e0:7f:e4:b8:b1:3a:f4:18:55:7c:10:39: bc:e8:14:5f:c8:04:d6:15:89:41:77:5e:8f:a9:4a:07:59:19: 3e:82:9a:4b:43:49:ec:1d:f3:57:0a:a9:7d:77:6f:d8:2a:6c: 8d:3a:09:be:41:0f:b9:ea:19:75:5e:9f:04:47:42:1e:69:b7: 10:a1:35:f5:b1:a1:ae:5a:2e:1a:ea:16:78:de:ed:49:8a:3b: ba:bc:18:ac:43:af:0c:71:d4:e7:d4:ba:12:4e:80:42:c8:8b: d6:b3:d6:de:1a:d1:c5:a1:50:bf:07:36:6b:f6:25:61:9d:65: c9:54:62:6a:93:03:7e:ed:0d:a0:4e:02:54:4a:2b:b8:ca:3d: 91:b5:62:37:6d:42:1a:d1:03:7e:8f:14:89:50:50:82:af:85: 3e:f8:a5:34:74:b7:2a:78:1e:21:c4:c6:32:c8:3c:74:77:38: 3d:31:5b:a3:68:5c:c6:d0:7e:51:76:13:6c:38:be:12:24:fb: 41:20:e3:23:c5:e7:bb:e7:6e:f2:b1:b9:43:31:66:5d:b1:33: 28:ce:38:2a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxeaUd3a6NPUulHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzcwMFoXDTI1MDcyOTAyMzcwMFowLzEtMCsGA1UEAxMk ZmMyMDRiZGMtMjEwMy00NDVmLWFiOTItOWU0ZWMwYzAwMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoszg0eDbh3DvVMyDJngE/6/3TU5ErAs/nNOH MuQRpG7Qq0HQjWnDAuK8kuATGhQIoi1AmgkO3+RyB12Ffq/YoOB0hMfe/wGeNx9I 6o7rd79L6BzjanOccasq/Ah3j7/TLRFXlQKjcys2z4XV6qHQmO0Rcp/391XsP3Ha 1dux6InFeWxcMToaLMv4Dkpp1II5OgCkz5jxoIrvZvSBFSLCzS3s3R22K0xrfwuC ZSWdfOHW4vi3ZkAVxHSZJ9Rpf4FPAX7ssU1H3eae9tdsD+oKAzSlMW0H9q9/6432 UM7ACRp7LUMvVsSP3mDCUJ54M9noWnnqcHuF3GFZ1+9eaUAs6wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLPvQfrG9m8xJqveaPtIOQjWxrbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNhYjI5ZTgtNzAzNy0z YzQyLTg2YzUtYTAxOWQxNWU2OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIogwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXC8LyVQ0N3kYjuhOcxdHcVDCby/xrNkPEUzCJ/DnJIcdRnJ8dJlFzepV 4H/kuLE69BhVfBA5vOgUX8gE1hWJQXdej6lKB1kZPoKaS0NJ7B3zVwqpfXdv2Cps jToJvkEPueoZdV6fBEdCHmm3EKE19bGhrlouGuoWeN7tSYo7urwYrEOvDHHU59S6 Ek6AQsiL1rPW3hrRxaFQvwc2a/YlYZ1lyVRiapMDfu0NoE4CVEoruMo9kbViN21C GtEDfo8UiVBQgq+FPvilNHS3KngeIcTGMsg8dHc4PTFbo2hcxtB+UXYTbDi+EiT7 QSDjI8Xnu+du8rG5QzFmXbEzKM44Kg== -----END CERTIFICATE-----Generated at Sun May 4 18:41:12 2025 by rpki-client