$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ac39edd-2e5a-31b0-a40f-1f1ea5ca5612.roa File: 3ac39edd-2e5a-31b0-a40f-1f1ea5ca5612.roa (raw, json) Hash identifier: nByGaRNpkLQgEQYvd3E/BPWnm1xfkI++yEquFMixYJ4= Subject key identifier: 51:1C:4D:DA:D1:65:66:93:D2:06:0C:CE:85:95:3E:B3:C0:37:98:B2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17A6092424F763399E71F60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ac39edd-2e5a-31b0-a40f-1f1ea5ca5612.roa Signing time: Wed 30 Apr 2025 02:38:29 +0000 ROA not before: Wed 30 Apr 2025 02:38:29 +0000 ROA not after: Tue 29 Jul 2025 02:38:29 +0000 asID: 396982 IP address blocks: 34.128.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7a:60:92:42:4f:76:33:99:e7:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:38:29 2025 GMT Not After : Jul 29 02:38:29 2025 GMT Subject: CN=3dd7553e-a0da-4506-9a67-30fb89b3a07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:f3:7e:ac:db:58:4d:49:3f:ed:c0:4b:b6: 9e:cb:07:5a:c5:2e:06:80:ce:fc:e5:cd:91:09:08: 2e:9c:5c:49:32:5a:9a:37:a7:a2:6d:13:bb:22:c0: 35:59:9d:ca:dd:d9:0f:72:69:c0:da:83:66:48:4e: 9b:31:1a:2a:e6:77:62:f6:42:a8:ee:54:81:7b:1e: 5c:d8:87:31:52:42:0c:07:e7:10:bb:e1:63:a0:fe: c9:96:dc:88:60:f8:a0:cc:3d:b0:9d:de:1f:2f:6b: 64:04:37:91:c5:8d:5f:5e:12:fe:7f:3a:bb:9f:bc: 0d:55:ef:c5:23:52:af:2b:84:58:ca:89:1a:bc:68: 0e:18:ce:72:58:fd:d4:d8:a0:39:30:60:73:ea:37: 12:e6:b1:ae:ab:dc:9d:ae:b7:c0:e5:97:b9:07:19: 09:6a:50:e5:95:2f:8a:31:11:33:85:43:fa:43:ee: 70:78:be:fc:3a:87:0e:58:a3:75:7c:11:80:4e:0c: 1a:a6:cb:0f:0b:00:40:91:84:bc:e3:51:69:42:35: 9e:65:6d:8e:4c:18:29:20:74:08:79:56:25:bd:c1: 94:3e:d2:d4:9d:67:a0:7c:75:9f:b3:6d:d2:0e:be: 35:37:a8:2a:8c:23:cd:68:e5:1e:35:22:0b:4f:76: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1C:4D:DA:D1:65:66:93:D2:06:0C:CE:85:95:3E:B3:C0:37:98:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ac39edd-2e5a-31b0-a40f-1f1ea5ca5612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b5:a1:a0:45:7a:51:25:04:52:6f:ff:5c:e0:61:78:77:bf: c2:a8:38:e4:bc:92:f2:67:ac:ac:f6:0e:83:f0:a7:64:9d:be: 12:85:4b:6b:09:95:2f:99:6d:90:bd:40:d0:87:5b:2e:df:11: ad:3c:3a:11:68:79:10:17:e8:43:e3:80:c7:95:00:a8:33:f9: 72:3c:7a:c1:03:7f:7e:91:6a:95:e7:b3:d1:b2:80:02:32:12: 4f:10:13:f3:0a:d3:b6:e6:de:82:3a:26:dc:a3:a6:c0:2b:7f: b1:ea:e2:6e:b8:c5:9a:f7:20:b8:c2:8b:ab:5b:f0:ed:93:cd: f9:75:fb:ea:b6:de:5b:c1:62:62:65:33:33:1e:6b:c9:00:e8: 90:de:a9:0f:68:04:49:67:82:81:db:be:f8:34:12:b3:34:bd: 30:91:79:6e:2d:a3:a6:60:b3:3f:3d:8f:65:da:b8:88:68:24: 6b:6b:13:34:8f:62:78:a0:ca:cf:b6:83:bb:57:6f:ea:af:dd: 6f:a0:a1:12:83:ce:fe:f9:52:b1:7c:be:3b:65:58:0c:90:f9: 84:c1:71:63:72:4c:74:06:0e:c8:3d:ed:60:74:34:d0:ce:8e: 7b:57:15:c7:5f:47:ed:59:f3:a9:24:50:bd:25:32:bc:a9:23: 9c:a2:80:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxemCSQk92M5nnH2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzgyOVoXDTI1MDcyOTAyMzgyOVowLzEtMCsGA1UEAxMk M2RkNzU1M2UtYTBkYS00NTA2LTlhNjctMzBmYjg5YjNhMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/zfqzbWE1JP+3AS7aeywdaxS4GgM785c2R CQgunFxJMlqaN6eibRO7IsA1WZ3K3dkPcmnA2oNmSE6bMRoq5ndi9kKo7lSBex5c 2IcxUkIMB+cQu+FjoP7JltyIYPigzD2wnd4fL2tkBDeRxY1fXhL+fzq7n7wNVe/F I1KvK4RYyokavGgOGM5yWP3U2KA5MGBz6jcS5rGuq9ydrrfA5Ze5BxkJalDllS+K MREzhUP6Q+5weL78OocOWKN1fBGATgwapssPCwBAkYS841FpQjWeZW2OTBgpIHQI eVYlvcGUPtLUnWegfHWfs23SDr41N6gqjCPNaOUeNSILT3aRTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFEcTdrRZWaT0gYMzoWVPrPAN5iyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2FjMzllZGQtMmU1YS0z MWIwLWE0MGYtMWYxZWE1Y2E1NjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDIoAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiLWhoEV6USUEUm//XOBheHe/wqg45LyS8mesrPYOg/CnZJ2+EoVLawmV L5ltkL1A0IdbLt8RrTw6EWh5EBfoQ+OAx5UAqDP5cjx6wQN/fpFqleez0bKAAjIS TxAT8wrTtubegjom3KOmwCt/seribrjFmvcguMKLq1vw7ZPN+XX76rbeW8FiYmUz Mx5ryQDokN6pD2gESWeCgdu++DQSszS9MJF5bi2jpmCzPz2PZdq4iGgka2sTNI9i eKDKz7aDu1dv6q/db6ChEoPO/vlSsXy+O2VYDJD5hMFxY3JMdAYOyD3tYHQ00M6O e1cVx19H7VnzqSRQvSUyvKkjnKKAiQ== -----END CERTIFICATE-----Generated at Sun May 4 21:02:12 2025 by rpki-client