$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa File: 33f7bbe6-9997-3a80-85e2-40e243874534.roa (raw, json) Hash identifier: M/pCFJhrt/QaMcnFDXyI/3dIgtsHDj6jH6oVfEPTOFs= Subject key identifier: 1D:6F:DB:54:83:25:D7:40:EA:EB:23:5F:74:CD:8A:BE:0B:E3:CD:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAB98D200E9DD8A1C5AC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.103.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b9:8d:20:0e:9d:d8:a1:c5:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e62759e3-f7d4-4941-820b-4fdf2f2ee810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:02:d5:e5:57:b2:d1:34:7e:a0:81:2e:da: 1e:89:6d:b9:f1:11:ce:d6:e7:b5:c4:95:37:0c:34: 99:c4:b2:0d:0a:93:65:53:30:f4:0d:86:c6:73:55: 89:41:31:5b:11:40:b1:52:ff:0f:51:36:5f:88:7b: 75:df:30:62:ee:f3:b3:d8:d7:44:e2:ef:e7:ab:b3: c6:cc:37:29:30:8c:d5:65:d8:36:15:c9:f5:b2:75: 5a:8a:93:b3:d3:d6:a2:be:10:4b:38:4d:1a:ec:ae: b0:19:88:90:4b:da:fb:e4:41:52:82:cf:00:ac:9e: 89:b7:b7:0b:71:0b:2e:bf:57:9c:31:ef:bb:1d:24: 59:e9:48:f4:28:8e:a1:c0:a8:31:7f:21:2f:6f:0b: 35:e1:b2:79:e8:d3:6b:76:9a:ef:85:70:d9:89:d5: 6d:af:94:2a:8e:d5:b4:77:88:08:40:21:5a:c9:e3: 49:0d:c5:97:6d:50:10:8a:c7:8c:d3:eb:97:82:b9: 69:5c:3b:47:40:11:a8:a4:ef:ee:42:78:7e:2c:d0: 61:a5:ce:27:fa:63:cc:66:6a:4e:98:eb:96:94:d1: 1d:74:e4:c2:db:8b:9e:16:8a:bc:9a:72:ce:c8:72: 70:d6:39:b3:64:2c:9c:8b:7e:96:56:f8:a2:56:d8: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:DB:54:83:25:D7:40:EA:EB:23:5F:74:CD:8A:BE:0B:E3:CD:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33f7bbe6-9997-3a80-85e2-40e243874534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.103.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:34:72:f8:b7:7b:24:c5:4c:25:43:ad:03:68:8d:dd:ee:5b: 27:16:c7:f1:83:86:1e:13:31:85:26:56:98:2a:59:5c:b7:d4: 43:ce:73:a7:ed:82:81:fc:b1:f9:1c:10:19:69:2b:07:96:9a: 10:e5:9d:d1:8b:5e:fd:af:e5:82:a6:ce:97:44:a7:f1:1c:dc: 31:8d:40:56:a4:67:ab:14:75:1c:d5:8a:4d:7b:f2:1d:eb:14: 89:90:9a:b7:9c:4a:3a:30:e3:74:e2:00:35:0a:0c:8a:84:fb: 6f:61:57:7f:d7:6a:2c:0b:92:d8:4a:47:50:97:53:c8:27:2b: 88:94:78:cd:d3:15:85:5b:d1:4c:e6:6d:d9:68:3c:4c:2b:ab: 07:53:c5:43:43:7c:28:bd:07:c6:25:29:17:a5:cd:30:39:97: 02:d0:b7:45:88:14:a9:e3:23:7f:b2:d5:7f:f7:12:e9:18:c9: d5:fe:c7:86:bb:de:44:9a:47:63:49:17:66:8f:0d:93:ed:f3: 74:9f:d6:ec:4c:af:a3:a0:d7:d7:d9:45:69:11:43:1d:ce:b3: e4:fd:7f:b6:89:50:44:6a:0a:d5:3b:0b:82:61:2d:c3:f3:a0: 3c:f8:bd:94:57:f3:10:a5:7c:7e:07:4e:10:e3:9d:d0:60:11: 1e:50:3e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurmNIA6d2KHFrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTYyNzU5ZTMtZjdkNC00OTQxLTgyMGItNGZkZjJmMmVlODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLMC1eVXstE0fqCBLtoeiW258RHO1ue1xJU3 DDSZxLINCpNlUzD0DYbGc1WJQTFbEUCxUv8PUTZfiHt13zBi7vOz2NdE4u/nq7PG zDcpMIzVZdg2Fcn1snVaipOz09aivhBLOE0a7K6wGYiQS9r75EFSgs8ArJ6Jt7cL cQsuv1ecMe+7HSRZ6Uj0KI6hwKgxfyEvbws14bJ56NNrdprvhXDZidVtr5QqjtW0 d4gIQCFayeNJDcWXbVAQiseM0+uXgrlpXDtHQBGopO/uQnh+LNBhpc4n+mPMZmpO mOuWlNEddOTC24ueFoq8mnLOyHJw1jmzZCyci36WVviiVtjXUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1v21SDJddA6usjX3TNir4L481nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNmN2JiZTYtOTk5Ny0z YTgwLTg1ZTItNDBlMjQzODc0NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs0cvi3eyTFTCVDrQNojd3uWycWx/GDhh4TMYUmVpgqWVy31EPOc6ft goH8sfkcEBlpKweWmhDlndGLXv2v5YKmzpdEp/Ec3DGNQFakZ6sUdRzVik178h3r FImQmrecSjow43TiADUKDIqE+29hV3/XaiwLkthKR1CXU8gnK4iUeM3TFYVb0Uzm bdloPEwrqwdTxUNDfCi9B8YlKRelzTA5lwLQt0WIFKnjI3+y1X/3EukYydX+x4a7 3kSaR2NJF2aPDZPt83Sf1uxMr6Og19fZRWkRQx3Os+T9f7aJUERqCtU7C4JhLcPz oDz4vZRX8xClfH4HThDjndBgER5QPmM= -----END CERTIFICATE-----Generated at Sun May 4 19:48:28 2025 by rpki-client