$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa File: 3afd4069-a658-306e-a6bf-36f942b2600a.roa (raw, json) Hash identifier: vyb3U38YPr8OcryIaXstyktGD2zTr5nyBYNfz4LctRc= Subject key identifier: C5:BD:95:B5:E6:B4:2B:87:E2:0D:20:53:8E:25:0F:3B:3F:CA:50:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD49B8BD417E56CC05300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.100.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d4:9b:8b:d4:17:e5:6c:c0:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ae4622d0-6eb7-4d58-a9db-3eebf6001d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e6:05:f2:82:91:32:fa:d1:f2:6a:91:56:9c: 3c:0f:4b:58:1f:39:6a:1c:08:65:25:3b:6e:54:f5: 29:c5:ff:c8:d1:4f:d7:02:fd:c2:08:67:e8:6e:55: 5d:0d:ce:3c:68:be:c3:6a:5d:d5:3c:9a:72:9f:d1: 93:46:7b:89:29:76:c2:4b:2a:bc:1a:cc:61:a5:d4: e7:d9:ab:4f:cb:98:f9:e3:fc:37:3e:08:1f:66:f1: 7d:2b:94:dd:a2:a9:32:51:8e:98:db:a3:14:f4:8e: 4a:3b:04:6c:2a:b3:f2:a0:37:c7:3e:5d:dc:de:16: f9:21:db:38:5c:c1:eb:a4:cd:ed:a3:18:5c:3c:6d: e2:59:2d:78:06:31:d9:6d:f0:7e:a5:d7:a4:6d:74: 4a:be:39:91:0b:6f:06:00:7e:23:23:63:c4:cd:3b: 58:63:2e:41:97:e1:01:1a:90:c7:16:28:48:68:7f: 09:9e:ca:57:2a:8c:d5:e0:a9:ed:99:d5:1e:0c:76: d6:2a:5f:f6:b8:3d:22:3c:d1:00:8a:c9:21:e8:2e: f3:1c:16:95:c4:45:e7:59:ae:bd:83:af:f9:6e:5e: 5b:6e:cd:e0:24:7f:96:ab:9c:9a:2c:7d:0a:3e:a0: 54:1b:f8:0e:3a:ce:1e:ec:f2:2d:e5:b1:42:92:d0: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BD:95:B5:E6:B4:2B:87:E2:0D:20:53:8E:25:0F:3B:3F:CA:50:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3afd4069-a658-306e-a6bf-36f942b2600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9e:74:d1:e1:28:21:33:97:bb:76:77:da:c3:0f:37:2e:68: 0a:db:91:c6:50:0c:e0:c9:3f:81:7d:0a:9a:dc:35:a8:57:d6: fb:43:18:49:7a:bf:a6:b6:0d:86:a1:f1:56:fb:0b:5d:70:76: 57:85:cb:ff:bb:3b:80:a0:7a:f2:d1:a2:00:01:a5:99:ec:7b: 0e:c6:58:c7:e6:23:1b:ff:41:35:18:be:c0:3c:28:b5:92:0b: 77:86:ac:77:e9:bb:d6:2d:6a:a9:ae:2b:d8:25:dd:f1:9c:57: 9c:94:c7:75:c8:a9:ac:97:db:a7:d1:44:5e:5a:79:95:94:03: 15:e8:c2:22:6c:13:59:02:c5:42:92:a3:3e:e5:df:93:46:04: 79:87:a1:af:34:cc:9f:b5:b2:ec:9d:2f:04:da:3a:89:87:27: d7:04:29:19:da:f3:f1:6e:7e:96:27:6e:ef:a7:49:a1:f2:57: fe:fa:39:17:1d:47:8d:10:ca:00:ea:42:c0:60:b2:6a:68:8a: 72:32:8b:77:bb:79:89:be:fb:32:74:2f:43:8e:26:3c:eb:e6: c6:9a:f2:aa:4a:eb:1c:4f:b6:38:fe:1a:43:19:27:b7:af:f8: ea:60:2a:fd:22:8e:1e:4a:8a:28:3d:df:48:7c:93:09:68:39: 92:f8:35:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutSbi9QX5WzAUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWU0NjIyZDAtNmViNy00ZDU4LWE5ZGItM2VlYmY2MDAxZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+YF8oKRMvrR8mqRVpw8D0tYHzlqHAhlJTtu VPUpxf/I0U/XAv3CCGfoblVdDc48aL7Dal3VPJpyn9GTRnuJKXbCSyq8GsxhpdTn 2atPy5j54/w3PggfZvF9K5TdoqkyUY6Y26MU9I5KOwRsKrPyoDfHPl3c3hb5Ids4 XMHrpM3toxhcPG3iWS14BjHZbfB+pdekbXRKvjmRC28GAH4jI2PEzTtYYy5Bl+EB GpDHFihIaH8JnspXKozV4KntmdUeDHbWKl/2uD0iPNEAiskh6C7zHBaVxEXnWa69 g6/5bl5bbs3gJH+Wq5yaLH0KPqBUG/gOOs4e7PIt5bFCktCH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMW9lbXmtCuH4g0gU44lDzs/ylAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2FmZDQwNjktYTY1OC0z MDZlLWE2YmYtMzZmOTQyYjI2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGedNHhKCEzl7t2d9rDDzcuaArbkcZQDODJP4F9CprcNahX1vtDGEl6 v6a2DYah8Vb7C11wdleFy/+7O4CgevLRogABpZnsew7GWMfmIxv/QTUYvsA8KLWS C3eGrHfpu9YtaqmuK9gl3fGcV5yUx3XIqayX26fRRF5aeZWUAxXowiJsE1kCxUKS oz7l35NGBHmHoa80zJ+1suydLwTaOomHJ9cEKRna8/FufpYnbu+nSaHyV/76ORcd R40QygDqQsBgsmpoinIyi3e7eYm++zJ0L0OOJjzr5saa8qpK6xxPtjj+GkMZJ7ev +OpgKv0ijh5Kiig930h8kwloOZL4NTE= -----END CERTIFICATE-----Generated at Sun May 4 20:57:28 2025 by rpki-client