$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33820425-9c2c-3550-8b95-cacae3126460.roa File: 33820425-9c2c-3550-8b95-cacae3126460.roa (raw, json) Hash identifier: +oGWAfTNCqdVOBE2QVh9HRHIVa3n+EP3PP+VyTutLrc= Subject key identifier: 95:50:F6:E9:B4:2A:5D:EE:B7:A7:DE:BC:4A:A1:6D:94:EE:8C:8B:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C5051F41EF4220789EABE5A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33820425-9c2c-3550-8b95-cacae3126460.roa Signing time: Wed 07 May 2025 02:38:23 +0000 ROA not before: Wed 07 May 2025 02:38:23 +0000 ROA not after: Tue 05 Aug 2025 02:38:23 +0000 asID: 19527 IP address blocks: 34.191.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:05:1f:41:ef:42:20:78:9e:ab:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:38:23 2025 GMT Not After : Aug 5 02:38:23 2025 GMT Subject: CN=541980e1-9f70-46c1-b363-4683f9565193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:9d:80:54:c2:bb:80:d5:96:d4:d4:1e:3f: 24:13:dd:25:66:34:b5:98:bc:65:f7:60:eb:00:7c: 97:b3:5d:75:56:96:9e:4c:94:bd:a0:24:34:3f:59: 54:d8:45:da:13:04:fa:a2:fd:b1:5e:3a:5c:97:58: bc:9e:e4:e9:a7:17:3f:13:83:f1:94:90:bc:95:3e: 5c:5a:87:3e:38:03:4d:7c:dc:6a:f6:7d:b2:59:ea: 38:2d:5e:4e:e5:3e:9a:4c:44:b7:ee:6d:a5:e7:ba: 6a:df:77:5e:e5:f1:dd:67:e2:64:a3:19:62:f1:be: 0b:ff:8e:89:69:78:8c:c2:8b:b7:c7:2f:70:cd:a3: 5b:9f:15:1d:84:70:62:90:82:69:cb:91:e5:0b:92: db:4e:ee:fd:2e:05:75:16:ce:02:18:f0:8a:03:aa: 68:e5:23:0f:29:0d:60:83:84:b6:78:d2:5a:1c:3f: 10:c7:f2:0a:99:1c:1d:0a:b5:73:42:f4:68:5a:a3: ac:3d:b8:9d:e3:c7:a9:0c:10:f9:87:68:e0:01:3f: fe:67:12:17:11:4d:6d:08:d8:ad:45:41:86:c5:b0: 1f:37:dc:3b:0d:c4:0e:5b:91:4c:ec:30:00:52:76: d1:d7:d1:f6:41:86:c3:a0:13:32:8e:0d:fd:ff:62: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:50:F6:E9:B4:2A:5D:EE:B7:A7:DE:BC:4A:A1:6D:94:EE:8C:8B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33820425-9c2c-3550-8b95-cacae3126460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.191.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:56:52:8f:8b:ef:78:ac:8b:5c:0e:30:30:6d:de:c6:d7:8e: 32:a9:fc:03:b6:e8:c2:da:31:81:c7:3e:28:58:d0:b0:60:06: d5:af:e0:41:88:2a:9c:0f:b3:86:49:fa:ac:8f:a1:8a:79:e0: d5:b2:6d:72:ca:65:ed:20:0e:7a:4f:7d:e4:76:5d:91:0a:fe: e3:f3:64:46:95:23:53:f4:9c:11:f9:e4:ff:e0:40:0e:01:80: 38:c0:8a:7b:d3:21:7c:ff:d3:e6:62:52:32:0f:75:44:76:c7: 53:ea:b4:73:79:23:b5:92:72:12:36:48:01:98:a4:64:9e:9c: c0:f7:24:57:6f:51:54:a4:02:19:19:99:91:6d:83:a4:53:35: 79:24:32:df:be:52:f9:ac:e3:b0:73:db:5c:c6:fd:90:ae:7d: f2:10:48:2d:ad:ba:2a:24:49:31:9f:ce:a2:ba:ea:01:66:c3: a8:87:e6:27:b1:94:b3:9e:3f:54:73:1c:64:bb:76:e5:16:75: 07:60:50:e2:cb:c6:30:d7:2f:b3:c9:dd:43:85:b9:0f:a9:8d: f0:01:dd:09:84:8e:eb:ca:c2:53:b3:06:e4:e9:aa:9e:9c:0f: be:4c:c8:98:22:48:82:c0:db:f2:20:44:29:4e:84:b0:6d:6f: 4c:49:20:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFBR9B70IgeJ6r5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyMzgyM1oXDTI1MDgwNTAyMzgyM1owLzEtMCsGA1UEAxMk NTQxOTgwZTEtOWY3MC00NmMxLWIzNjMtNDY4M2Y5NTY1MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUedgFTCu4DVltTUHj8kE90lZjS1mLxl92Dr AHyXs111VpaeTJS9oCQ0P1lU2EXaEwT6ov2xXjpcl1i8nuTppxc/E4PxlJC8lT5c Woc+OANNfNxq9n2yWeo4LV5O5T6aTES37m2l57pq33de5fHdZ+Jkoxli8b4L/46J aXiMwou3xy9wzaNbnxUdhHBikIJpy5HlC5LbTu79LgV1Fs4CGPCKA6po5SMPKQ1g g4S2eNJaHD8Qx/IKmRwdCrVzQvRoWqOsPbid48epDBD5h2jgAT/+ZxIXEU1tCNit RUGGxbAfN9w7DcQOW5FM7DAAUnbR19H2QYbDoBMyjg39/2KT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVQ9um0Kl3ut6fevEqhbZTujIsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzM4MjA0MjUtOWMyYy0z NTUwLThiOTUtY2FjYWUzMTI2NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr84MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9WUo+L73isi1wOMDBt3sbXjjKp/AO26MLaMYHHPihY0LBgBtWv4EGI KpwPs4ZJ+qyPoYp54NWybXLKZe0gDnpPfeR2XZEK/uPzZEaVI1P0nBH55P/gQA4B gDjAinvTIXz/0+ZiUjIPdUR2x1PqtHN5I7WSchI2SAGYpGSenMD3JFdvUVSkAhkZ mZFtg6RTNXkkMt++Uvms47Bz21zG/ZCuffIQSC2tuiokSTGfzqK66gFmw6iH5iex lLOeP1RzHGS7duUWdQdgUOLLxjDXL7PJ3UOFuQ+pjfAB3QmEjuvKwlOzBuTpqp6c D75MyJgiSILA2/IgRClOhLBtb0xJIMk= -----END CERTIFICATE-----Generated at Sun May 11 10:47:45 2025 by rpki-client