$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c9a0a96-92b1-3491-bba6-3284104541ec.roa File: 4c9a0a96-92b1-3491-bba6-3284104541ec.roa (raw, json) Hash identifier: Krw6e+Ip7XKcu02pSlI9WUsbRsZbYSuvMIscjkEbP/Y= Subject key identifier: 8D:27:08:6E:50:7C:1C:0D:26:C0:CF:30:BB:07:0D:75:24:AD:DB:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C507BD4D09BC5F50B4074780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c9a0a96-92b1-3491-bba6-3284104541ec.roa Signing time: Wed 07 May 2025 02:43:40 +0000 ROA not before: Wed 07 May 2025 02:43:40 +0000 ROA not after: Tue 05 Aug 2025 02:43:40 +0000 asID: 15169 IP address blocks: 34.190.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:07:bd:4d:09:bc:5f:50:b4:07:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:43:40 2025 GMT Not After : Aug 5 02:43:40 2025 GMT Subject: CN=441f0707-4b5a-4f6f-a223-8f3f0628d879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:61:a6:30:75:c3:87:1a:30:09:e1:dd:0f:1b: ae:2d:21:fc:91:ca:cc:0d:89:92:50:3f:eb:a3:7a: 3b:b6:2e:f0:f9:a4:fe:d3:42:cb:3d:1b:fb:8c:d5: 59:2e:f2:b1:9b:28:42:01:a1:c7:81:1b:a0:01:45: 46:d8:ce:cb:4f:af:ea:5d:cf:f7:0c:dd:61:34:33: d4:63:64:da:b9:f7:27:41:d3:a7:ad:7b:d4:82:7a: a3:42:83:bc:4b:f8:cd:d8:2a:48:15:8a:44:a0:fb: c7:2f:b8:25:43:ee:f5:21:fd:09:9e:fe:f6:2c:36: 16:d2:c2:5f:d3:23:33:4e:fa:d1:f3:15:f6:b0:b6: c7:45:ac:99:c9:d5:bf:bb:de:c2:fb:98:94:6c:d2: 50:04:33:13:20:a6:24:28:d6:ea:94:12:36:7a:28: 89:b2:64:68:5a:21:a6:41:33:36:db:90:5e:70:8c: d5:8d:3b:47:47:6d:ff:94:54:1d:79:70:6a:bb:16: 18:ae:49:3f:8d:1f:e7:57:34:15:ec:c6:db:bb:4b: 5d:55:82:40:bb:bd:67:a0:33:56:91:12:c9:3b:c7: ab:40:c5:e9:14:cd:63:61:26:25:94:cc:67:29:f5: e3:c6:b8:d6:30:2d:28:5d:af:6c:39:f7:e0:40:e7: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:27:08:6E:50:7C:1C:0D:26:C0:CF:30:BB:07:0D:75:24:AD:DB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c9a0a96-92b1-3491-bba6-3284104541ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:43:fe:6f:3c:f5:72:d6:ff:18:52:be:89:42:6c:69:6c:0f: 07:b3:05:b3:d3:02:71:62:45:a8:78:c1:e1:6d:50:d9:1a:51: 54:0d:d4:8c:96:89:95:01:6b:56:5d:ad:cd:1d:22:5c:23:09: 80:fc:dd:85:e7:37:2f:f9:b7:0e:75:7f:ab:00:24:77:fe:ce: 83:2c:11:f9:90:0b:03:88:fc:b1:64:3e:11:87:c1:b4:d2:f5: 4f:26:cf:7e:ab:ff:97:d2:31:37:65:b5:54:f8:61:66:d6:99: f8:69:ac:3d:6d:6c:15:3a:c3:75:c4:e3:14:04:1a:9b:42:dc: 05:ce:31:44:0a:d2:24:0d:d2:15:40:30:dd:b1:10:d0:42:21: de:2e:c4:9e:d2:5d:ac:87:4f:1b:e6:2f:0d:eb:e9:5b:11:b4: 99:40:0b:6f:74:c5:b2:41:c0:00:f1:2c:79:28:2f:80:d0:4b: e5:8c:91:66:17:e2:61:3a:43:c3:47:1a:72:5e:78:43:f0:c0: 1f:b2:73:c4:9b:b4:ea:c0:99:35:b1:0c:50:f4:a4:8f:ab:be: ba:fd:9f:3c:20:b2:c8:45:f9:31:bc:0b:d4:40:e8:8b:6d:6b: 2e:b1:a8:62:48:3f:f1:76:30:69:c9:fa:a9:06:71:28:92:b5: bb:06:4a:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFB71NCbxfULQHR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyNDM0MFoXDTI1MDgwNTAyNDM0MFowLzEtMCsGA1UEAxMk NDQxZjA3MDctNGI1YS00ZjZmLWEyMjMtOGYzZjA2MjhkODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGGmMHXDhxowCeHdDxuuLSH8kcrMDYmSUD/r o3o7ti7w+aT+00LLPRv7jNVZLvKxmyhCAaHHgRugAUVG2M7LT6/qXc/3DN1hNDPU Y2TaufcnQdOnrXvUgnqjQoO8S/jN2CpIFYpEoPvHL7glQ+71If0Jnv72LDYW0sJf 0yMzTvrR8xX2sLbHRayZydW/u97C+5iUbNJQBDMTIKYkKNbqlBI2eiiJsmRoWiGm QTM225BecIzVjTtHR23/lFQdeXBquxYYrkk/jR/nVzQV7Mbbu0tdVYJAu71noDNW kRLJO8erQMXpFM1jYSYllMxnKfXjxrjWMC0oXa9sOffgQOeDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0nCG5QfBwNJsDPMLsHDXUkrdtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGM5YTBhOTYtOTJiMS0z NDkxLWJiYTYtMzI4NDEwNDU0MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFD/m889XLW/xhSvolCbGlsDwezBbPTAnFiRah4weFtUNkaUVQN1IyW iZUBa1Zdrc0dIlwjCYD83YXnNy/5tw51f6sAJHf+zoMsEfmQCwOI/LFkPhGHwbTS 9U8mz36r/5fSMTdltVT4YWbWmfhprD1tbBU6w3XE4xQEGptC3AXOMUQK0iQN0hVA MN2xENBCId4uxJ7SXayHTxvmLw3r6VsRtJlAC290xbJBwADxLHkoL4DQS+WMkWYX 4mE6Q8NHGnJeeEPwwB+yc8SbtOrAmTWxDFD0pI+rvrr9nzwgsshF+TG8C9RA6Itt ay6xqGJIP/F2MGnJ+qkGcSiStbsGSoU= -----END CERTIFICATE-----Generated at Sun May 11 15:13:03 2025 by rpki-client