$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa File: 3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa (raw, json) Hash identifier: sl9AlVmmVuNueAculp6U0YY0SdrI7eiGDDghTnyUwLM= Subject key identifier: CB:6F:C1:DE:84:A9:FD:BE:26:DC:9E:D7:29:22:4A:95:4B:8E:98:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D90241383AA9D76B52C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.95.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d9:02:41:38:3a:a9:d7:6b:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=42285e23-3173-48ba-b6a0-77ee1cd4a3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:98:23:cc:8c:26:7a:cc:22:a5:36:a5:f1:ac: ff:74:44:e5:45:fa:55:81:1e:c6:18:64:85:61:cd: 80:02:2e:16:e3:f7:a4:5c:c0:5d:75:04:a8:9b:3f: c8:79:e2:7f:2d:b4:b6:1b:f9:08:f1:f9:79:25:04: 05:11:b1:ec:ea:a1:8f:fc:bf:c5:51:40:e3:d6:2d: c9:da:41:c0:66:00:37:96:70:6c:a3:2b:7a:9d:c5: 98:aa:81:0a:d3:2c:5a:7b:62:f8:4b:71:13:c5:d0: 73:9d:5c:b8:50:c3:5b:60:97:99:39:a3:ca:8e:d3: 9f:e6:c6:03:9c:08:34:cb:b3:89:80:aa:72:f7:c0: 28:1f:6f:c7:d8:b0:69:44:e6:70:fd:66:3c:5b:8e: 66:85:38:c7:be:ae:b0:7f:4f:85:22:b4:df:58:d3: af:6d:7b:3d:de:52:28:f0:a5:34:8a:c4:e5:35:c9: 34:a0:a8:94:38:54:35:37:94:d3:61:99:f9:c6:4d: d4:f9:82:04:ff:10:5d:4e:00:53:44:5f:f2:1e:f5: 63:1d:b9:03:06:6f:21:70:0e:86:e7:35:91:a8:b6: 1f:fc:9a:8a:4e:d7:5d:36:eb:22:8c:6f:7f:e9:48: 23:46:a3:ac:d8:0e:6a:2c:bf:fc:52:60:c4:18:1e: a7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6F:C1:DE:84:A9:FD:BE:26:DC:9E:D7:29:22:4A:95:4B:8E:98:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f5597a9-3a5a-3b61-83d2-0a823bc09450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:2a:07:d6:b9:9d:3b:4b:46:f5:bd:2f:1a:c8:33:85:39:7e: b3:c4:02:a7:21:f8:bd:dc:0a:01:6b:98:1d:48:9b:29:47:db: 2e:20:94:94:b6:a9:06:a9:cd:80:f5:14:ad:d1:ba:a7:2c:c4: 37:f0:db:92:00:bf:76:a4:da:3e:ab:1a:22:37:5c:88:99:20: 88:e8:e8:a8:1f:85:6c:15:da:29:f2:52:90:8f:76:73:39:e7: c4:87:2a:e4:de:50:36:a5:26:a0:32:fe:55:06:59:b9:ee:4d: 7e:e9:2d:ce:0b:51:dc:b0:cc:41:b5:25:b9:e8:28:9d:29:a3: 47:0e:e0:97:30:59:88:80:15:30:39:e1:9e:9a:7b:6b:22:a2: 42:44:8a:03:c9:13:37:b9:24:a1:92:5c:76:82:47:7f:7b:20: 7b:ce:36:13:1f:33:ac:13:2a:04:97:be:6e:01:a6:03:ed:82: f0:96:23:d0:c7:cc:74:ac:03:0e:1d:41:22:e8:a2:e1:dd:81: 5c:05:35:ea:ae:8d:cc:2a:21:71:8c:11:23:7b:68:6a:9f:b6: 5b:72:59:79:80:fa:08:45:8a:00:39:40:41:20:15:4d:7e:17: 76:23:62:fb:86:b7:eb:e9:90:d7:bf:60:75:48:4c:fc:ee:c2: b2:b0:96:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNkCQTg6qddrUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDIyODVlMjMtMzE3My00OGJhLWI2YTAtNzdlZTFjZDRhM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pgjzIwmeswipTal8az/dETlRfpVgR7GGGSF Yc2AAi4W4/ekXMBddQSomz/IeeJ/LbS2G/kI8fl5JQQFEbHs6qGP/L/FUUDj1i3J 2kHAZgA3lnBsoyt6ncWYqoEK0yxae2L4S3ETxdBznVy4UMNbYJeZOaPKjtOf5sYD nAg0y7OJgKpy98AoH2/H2LBpROZw/WY8W45mhTjHvq6wf0+FIrTfWNOvbXs93lIo 8KU0isTlNck0oKiUOFQ1N5TTYZn5xk3U+YIE/xBdTgBTRF/yHvVjHbkDBm8hcA6G 5zWRqLYf/JqKTtddNusijG9/6UgjRqOs2A5qLL/8UmDEGB6nDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtvwd6Eqf2+Jtye1ykiSpVLjpjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y1NTk3YTktM2E1YS0z YjYxLTgzZDItMGE4MjNiYzA5NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoqB9a5nTtLRvW9LxrIM4U5frPEAqch+L3cCgFrmB1ImylH2y4glJS2 qQapzYD1FK3RuqcsxDfw25IAv3ak2j6rGiI3XIiZIIjo6KgfhWwV2inyUpCPdnM5 58SHKuTeUDalJqAy/lUGWbnuTX7pLc4LUdywzEG1JbnoKJ0po0cO4JcwWYiAFTA5 4Z6ae2siokJEigPJEze5JKGSXHaCR397IHvONhMfM6wTKgSXvm4BpgPtgvCWI9DH zHSsAw4dQSLoouHdgVwFNequjcwqIXGMESN7aGqftltyWXmA+ghFigA5QEEgFU1+ F3YjYvuGt+vpkNe/YHVITPzuwrKwlv0= -----END CERTIFICATE-----Generated at Sun May 4 18:59:52 2025 by rpki-client