$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f95e1d5-dcf9-3343-849e-5601317aa93b.roa File: 3f95e1d5-dcf9-3343-849e-5601317aa93b.roa (raw, json) Hash identifier: 1u2Q9MNUSn0VVN4Vk79YRt9R9aUeC9smy4W4bzpxV9k= Subject key identifier: 94:10:2D:49:83:BD:34:4B:3F:EA:71:7E:36:5A:3A:7A:AA:6A:6E:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C50552CC24CDE7358F5C6000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f95e1d5-dcf9-3343-849e-5601317aa93b.roa Signing time: Wed 07 May 2025 02:38:48 +0000 ROA not before: Wed 07 May 2025 02:38:48 +0000 ROA not after: Tue 05 Aug 2025 02:38:48 +0000 asID: 19527 IP address blocks: 34.190.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:05:52:cc:24:cd:e7:35:8f:5c:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:38:48 2025 GMT Not After : Aug 5 02:38:48 2025 GMT Subject: CN=760c57ed-5599-4a81-ad97-c98c2c244956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:06:c6:42:f9:1f:e5:5d:9b:fe:76:17:00: 05:7c:bc:72:61:b0:9a:e7:41:ea:7e:53:28:96:c6: 3e:cf:bb:9b:85:d5:a7:fa:ae:fc:60:2d:af:74:aa: 07:f5:c5:be:c7:33:88:47:c2:89:a9:84:f2:22:d8: 67:01:62:77:ba:d8:ee:0b:82:68:4a:f2:d0:82:53: 51:c9:09:3e:92:0c:f9:4b:22:c1:33:b1:cd:a6:3e: 9b:af:31:70:1d:26:3a:8d:3f:05:5b:2e:57:6f:0f: 78:8a:e3:6a:bd:27:0c:86:1a:2a:2e:40:11:bf:11: 65:f2:55:ad:c7:ea:00:ea:9d:28:9f:ab:02:b7:ad: f3:ac:ef:93:95:7c:05:e7:4e:ae:7d:4e:d1:86:98: 7d:05:7b:2b:b3:df:08:6d:8d:27:61:ff:e2:dc:40: 81:31:51:e2:b0:d9:6a:8f:75:d4:82:ce:2c:4a:41: 14:be:1a:4a:7e:82:1e:42:c5:25:c5:81:38:8a:21: 32:36:81:d6:3b:50:bb:cd:ab:c1:0b:c7:12:b9:fd: 82:39:47:f2:8f:b3:82:5e:f9:d6:05:4a:da:4d:0c: 8b:4a:ce:58:50:45:ef:da:f0:7e:ab:c7:ce:ad:45: c0:06:02:a3:91:95:26:1e:2b:a6:4c:d6:b9:7f:24: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:2D:49:83:BD:34:4B:3F:EA:71:7E:36:5A:3A:7A:AA:6A:6E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f95e1d5-dcf9-3343-849e-5601317aa93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:56:88:cc:4a:c5:0a:5e:82:1d:32:14:18:4d:8b:e8:a9:3d: 81:24:4c:ca:6c:00:dc:8f:44:91:10:ea:23:e1:c0:1f:cc:81: f3:84:b6:23:80:c4:26:1e:41:ff:95:59:48:8e:04:9a:58:2d: d8:a8:83:4e:f1:7a:f2:c4:db:63:92:1b:e0:67:40:bf:82:cc: ae:38:6e:41:3c:2a:7d:81:bb:a2:55:71:49:a6:5e:8e:d6:a8: c1:3c:de:d0:5c:42:55:57:dc:98:f3:7c:b3:39:f5:30:a2:ff: 34:ea:2a:73:03:2f:8b:41:76:29:85:00:d9:24:ae:53:9c:0d: 24:ee:59:ca:33:b7:2a:7a:67:e5:ce:56:74:51:2a:c0:22:f1: 93:48:3f:da:3e:75:4c:17:b0:bb:d7:c7:4f:86:d1:8c:56:98: 88:cf:5c:9b:2b:4b:1c:35:76:c1:2d:10:a7:cc:8b:fd:71:1a: fc:cf:b2:f0:14:4b:ea:e0:5d:42:dc:31:bf:84:56:83:0b:53: 0f:91:ba:9b:67:3a:b2:02:0e:d6:d8:71:9f:59:e6:da:2f:63: 49:ba:47:a3:6e:0b:fc:42:da:62:17:2c:51:ea:83:38:c3:35: 57:43:f9:78:69:b1:a9:63:57:2b:5d:c4:25:6b:75:61:7e:24: 98:e4:8b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFBVLMJM3nNY9cYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyMzg0OFoXDTI1MDgwNTAyMzg0OFowLzEtMCsGA1UEAxMk NzYwYzU3ZWQtNTU5OS00YTgxLWFkOTctYzk4YzJjMjQ0OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks4GxkL5H+Vdm/52FwAFfLxyYbCa50HqflMo lsY+z7ubhdWn+q78YC2vdKoH9cW+xzOIR8KJqYTyIthnAWJ3utjuC4JoSvLQglNR yQk+kgz5SyLBM7HNpj6brzFwHSY6jT8FWy5Xbw94iuNqvScMhhoqLkARvxFl8lWt x+oA6p0on6sCt63zrO+TlXwF506ufU7Rhph9BXsrs98IbY0nYf/i3ECBMVHisNlq j3XUgs4sSkEUvhpKfoIeQsUlxYE4iiEyNoHWO1C7zavBC8cSuf2COUfyj7OCXvnW BUraTQyLSs5YUEXv2vB+q8fOrUXABgKjkZUmHiumTNa5fyTaxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQQLUmDvTRLP+pxfjZaOnqqam61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y5NWUxZDUtZGNmOS0z MzQzLTg0OWUtNTYwMTMxN2FhOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARWiMxKxQpegh0yFBhNi+ipPYEkTMpsANyPRJEQ6iPhwB/MgfOEtiOA xCYeQf+VWUiOBJpYLdiog07xevLE22OSG+BnQL+CzK44bkE8Kn2Bu6JVcUmmXo7W qME83tBcQlVX3JjzfLM59TCi/zTqKnMDL4tBdimFANkkrlOcDSTuWcoztyp6Z+XO VnRRKsAi8ZNIP9o+dUwXsLvXx0+G0YxWmIjPXJsrSxw1dsEtEKfMi/1xGvzPsvAU S+rgXULcMb+EVoMLUw+RuptnOrICDtbYcZ9Z5tovY0m6R6NuC/xC2mIXLFHqgzjD NVdD+XhpsaljVytdxCVrdWF+JJjki5c= -----END CERTIFICATE-----Generated at Sat May 10 13:25:57 2025 by rpki-client