$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa File: 3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa (raw, json) Hash identifier: L44Ud7kRdqdgKecK2g7nWg7z5FGZ465uuM2RBWWb9Eo= Subject key identifier: 39:51:D0:32:98:6B:5F:F8:DE:5C:AB:36:4A:DF:0A:8D:49:1B:8A:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78504BCAD3D71CC29DEC500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.85.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:04:bc:ad:3d:71:cc:29:de:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e41617ae-ae2c-433d-bea1-3b501f350e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:95:50:86:df:c3:fb:91:ad:3b:e2:35:81: 1c:57:7c:65:40:86:b4:b3:7f:7b:bf:53:16:3e:78: 51:7d:cb:60:09:72:8f:ee:34:6b:3e:f9:d3:5c:27: d8:d5:70:02:ac:56:79:d7:c2:70:34:bd:d6:ac:46: 70:f6:23:ed:3b:95:f9:e6:34:1a:4e:40:6e:51:90: 27:4f:12:b9:ab:ae:a7:49:69:3d:34:d8:e5:7b:c0: 49:65:f3:62:bf:81:6d:12:99:83:01:53:d8:f2:3a: dd:0e:97:f7:dd:d6:af:c0:96:a4:d5:0c:4f:2a:36: 29:e8:4e:b9:e8:23:8b:45:fa:74:83:c3:06:89:0a: 30:55:09:c4:30:cd:75:6e:94:1c:06:cf:ac:57:1f: db:ae:d7:c2:b7:da:61:9c:7c:12:91:1c:58:13:de: 72:58:27:f8:90:ef:f6:58:c0:05:58:c8:67:70:e7: 98:44:56:f0:e9:bc:05:a0:fb:34:52:b1:f8:47:1e: 45:8a:ba:61:96:e2:c9:45:ad:6e:84:ec:b7:16:83: 12:1e:d9:2d:eb:f5:54:d6:e5:d2:d0:49:7a:04:b0: 59:70:fc:3f:23:ee:1b:bd:66:d3:8c:b5:5e:8f:e4: 23:51:8f:29:3d:39:e3:c9:1d:64:a8:60:ee:2e:04: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:D0:32:98:6B:5F:F8:DE:5C:AB:36:4A:DF:0A:8D:49:1B:8A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cdbe9a6-1024-36b5-87dc-406e4deb89e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fb:6b:d1:99:af:2a:b3:25:58:07:2e:fe:1e:87:7a:fa:85: 48:bc:dc:72:25:59:fc:d4:99:d2:61:12:48:a0:c1:42:1e:1a: 7d:df:9e:3e:97:2e:c9:d9:f6:68:6f:dd:40:9c:26:ff:02:83: c2:d5:39:c9:eb:5a:24:7c:dc:ee:4e:55:4d:44:ed:84:6a:05: 13:65:f9:6c:ac:3c:9a:f0:60:57:8b:6c:d4:c4:c6:dc:f3:1e: f5:c9:c4:a8:81:e4:2a:13:6b:43:36:5c:2c:4b:dd:48:d0:b8: 1f:3c:83:b2:87:30:cc:52:36:9f:bd:ac:d2:e3:c3:7b:d8:27: bf:9d:09:a2:fa:d0:26:bb:77:36:44:02:9a:b5:1d:2e:e3:29: 1a:d5:7d:65:81:a2:97:cf:3d:f6:17:d9:f8:ff:ea:de:b5:68: 3e:1b:c7:3d:d1:e1:3d:49:8b:17:fc:4c:36:ee:8c:4b:21:c7: c3:09:d1:dd:c2:55:c7:8d:a6:e1:8e:4d:47:6a:02:e2:b5:b2: 45:8f:d5:1d:98:3c:9c:ab:ed:6d:53:7a:67:2d:e3:86:0c:d9: 2b:be:3e:84:ac:1b:3b:3d:cc:ee:15:a1:7f:fa:bb:7a:00:74: 7d:05:c9:47:86:7e:0e:b3:a2:36:f5:b7:36:c1:7c:5f:23:9e: dd:58:12:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQS8rT1xzCnexQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTQxNjE3YWUtYWUyYy00MzNkLWJlYTEtM2I1MDFmMzUwZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS+VUIbfw/uRrTviNYEcV3xlQIa0s397v1MW PnhRfctgCXKP7jRrPvnTXCfY1XACrFZ518JwNL3WrEZw9iPtO5X55jQaTkBuUZAn TxK5q66nSWk9NNjle8BJZfNiv4FtEpmDAVPY8jrdDpf33davwJak1QxPKjYp6E65 6COLRfp0g8MGiQowVQnEMM11bpQcBs+sVx/brtfCt9phnHwSkRxYE95yWCf4kO/2 WMAFWMhncOeYRFbw6bwFoPs0UrH4Rx5FirphluLJRa1uhOy3FoMSHtkt6/VU1uXS 0El6BLBZcPw/I+4bvWbTjLVej+QjUY8pPTnjyR1kqGDuLgRWOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlR0DKYa1/43lyrNkrfCo1JG4pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NkYmU5YTYtMTAyNC0z NmI1LTg3ZGMtNDA2ZTRkZWI4OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX7a9GZryqzJVgHLv4eh3r6hUi83HIlWfzUmdJhEkigwUIeGn3fnj6X LsnZ9mhv3UCcJv8Cg8LVOcnrWiR83O5OVU1E7YRqBRNl+WysPJrwYFeLbNTExtzz HvXJxKiB5CoTa0M2XCxL3UjQuB88g7KHMMxSNp+9rNLjw3vYJ7+dCaL60Ca7dzZE Apq1HS7jKRrVfWWBopfPPfYX2fj/6t61aD4bxz3R4T1Jixf8TDbujEshx8MJ0d3C VceNpuGOTUdqAuK1skWP1R2YPJyr7W1Temct44YM2Su+PoSsGzs9zO4VoX/6u3oA dH0FyUeGfg6zojb1tzbBfF8jnt1YEkI= -----END CERTIFICATE-----Generated at Fri May 9 10:31:16 2025 by rpki-client