$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa File: 3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa (raw, json) Hash identifier: BjO3nbHlYfYYPn7DLPP8tvldXresj4g5WMtareoGAqA= Subject key identifier: 76:68:BF:58:83:EE:19:8C:BF:99:F4:FB:47:DD:D1:67:09:05:45:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E067D51C9F407AF2FC40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e0:67:d5:1c:9f:40:7a:f2:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f3f8cc97-1b25-4f9a-8e3c-e06219eeed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:65:0b:1d:b1:3e:08:7e:48:92:b7:b1:36: 3c:7f:a5:14:ef:25:5b:e3:05:f7:9e:9b:f1:2d:e6: c2:15:ba:4b:d2:40:0f:82:52:61:20:16:f6:00:f9: 2b:bc:bc:6e:32:81:f8:25:cb:79:d4:1f:8a:91:a7: aa:c4:d6:42:b1:aa:d6:96:3e:b5:34:89:1d:90:81: 96:29:69:31:bd:a0:2e:67:25:84:7d:ac:b2:fb:19: 35:a2:27:b2:fc:22:57:ec:ea:e5:44:78:e8:74:90: 3a:78:36:27:54:45:44:dd:b6:88:86:3a:45:01:4a: ca:aa:0b:dd:83:0e:ca:9c:34:5f:0c:a8:3e:97:92: 52:5d:6e:34:be:8f:3d:7e:c7:88:c8:bf:47:6c:61: 48:8e:8e:dc:a9:07:5c:e7:d5:4f:a0:4e:d8:2c:29: d2:e0:1e:10:b4:43:28:9a:4e:91:65:16:8b:ac:d8: 61:5b:4f:21:7e:56:46:cc:8e:f3:87:f2:fe:61:79: 29:64:b4:c0:cb:5b:80:47:57:06:ac:2c:0b:1b:5c: c1:9a:ed:93:1c:21:8f:a5:bb:aa:0f:6f:2a:52:37: 1d:14:6b:9f:59:9e:45:22:bc:94:33:66:c6:07:58: 5c:b1:90:5f:41:14:8e:f8:8e:ee:a4:db:af:00:0e: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:68:BF:58:83:EE:19:8C:BF:99:F4:FB:47:DD:D1:67:09:05:45:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2b:1b:d1:da:90:a4:12:58:35:0e:3d:4f:54:2d:1a:00:b8: 40:ce:4e:db:71:3d:23:24:61:e3:08:0c:23:79:38:4a:34:e3: 44:26:71:67:72:9d:df:a6:69:96:4d:b0:9a:93:22:f1:6b:cd: a9:c2:f0:b3:2b:45:4e:06:39:f2:b5:b6:83:f5:21:67:57:a5: d8:bc:40:5c:27:55:31:19:39:5a:6f:51:b9:17:fc:42:42:96: 8a:da:d8:89:a2:b4:44:2e:ba:30:4c:63:4b:b9:19:6e:9b:e4: 5c:3a:52:86:1b:c0:25:0f:fa:fa:1f:9f:1c:85:82:59:e9:14: 1d:7e:1f:6f:cc:35:bd:7c:c4:34:10:5b:72:36:32:3b:2f:46: a1:5c:75:19:54:8f:8d:c1:ad:16:44:fd:99:b6:16:5b:c3:f4: 72:fd:16:aa:88:d5:fa:8c:4d:21:c0:01:22:60:df:c5:79:43: 7d:10:bd:d8:c2:35:33:23:fc:7a:ec:7e:11:21:66:82:67:8a: 4a:d6:6b:35:38:ae:67:38:6d:42:8f:8e:0b:54:1e:39:65:37: 52:e4:27:11:60:10:d7:bd:68:4b:df:04:00:84:97:ab:e0:1d: dc:b6:be:48:66:1c:22:d9:34:b9:16:10:01:2e:c6:10:ad:f1: 91:cd:d2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOBn1RyfQHry/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjNmOGNjOTctMWIyNS00ZjlhLThlM2MtZTA2MjE5ZWVlZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUhlCx2xPgh+SJK3sTY8f6UU7yVb4wX3npvx LebCFbpL0kAPglJhIBb2APkrvLxuMoH4Jct51B+KkaeqxNZCsarWlj61NIkdkIGW KWkxvaAuZyWEfayy+xk1oiey/CJX7OrlRHjodJA6eDYnVEVE3baIhjpFAUrKqgvd gw7KnDRfDKg+l5JSXW40vo89fseIyL9HbGFIjo7cqQdc59VPoE7YLCnS4B4QtEMo mk6RZRaLrNhhW08hflZGzI7zh/L+YXkpZLTAy1uAR1cGrCwLG1zBmu2THCGPpbuq D28qUjcdFGufWZ5FIryUM2bGB1hcsZBfQRSO+I7upNuvAA4+hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZov1iD7hmMv5n0+0fd0WcJBUV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2YzZDQ1NWQtNWZhYS0z ZGMxLWI4NjctNWEzMzc3ZjBlNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKArG9HakKQSWDUOPU9ULRoAuEDOTttxPSMkYeMIDCN5OEo040QmcWdy nd+maZZNsJqTIvFrzanC8LMrRU4GOfK1toP1IWdXpdi8QFwnVTEZOVpvUbkX/EJC lora2ImitEQuujBMY0u5GW6b5Fw6UoYbwCUP+vofnxyFglnpFB1+H2/MNb18xDQQ W3I2MjsvRqFcdRlUj43BrRZE/Zm2FlvD9HL9FqqI1fqMTSHAASJg38V5Q30QvdjC NTMj/HrsfhEhZoJnikrWazU4rmc4bUKPjgtUHjllN1LkJxFgENe9aEvfBACEl6vg Hdy2vkhmHCLZNLkWEAEuxhCt8ZHN0sk= -----END CERTIFICATE-----Generated at Sun May 4 19:35:48 2025 by rpki-client