$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d1a25c3-ec6d-3c9a-8a13-52e232109560.roa File: 4d1a25c3-ec6d-3c9a-8a13-52e232109560.roa (raw, json) Hash identifier: 5DisJ0sVPM32bTfH+NX82fDKFRUHpoZseBfs4nYRUWg= Subject key identifier: 0C:56:3D:59:94:85:1F:E3:85:37:31:55:0B:C6:B6:9D:46:EB:0B:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17B4C44446A4F48049B5378 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d1a25c3-ec6d-3c9a-8a13-52e232109560.roa Signing time: Wed 30 Apr 2025 02:40:20 +0000 ROA not before: Wed 30 Apr 2025 02:40:20 +0000 ROA not after: Tue 29 Jul 2025 02:40:20 +0000 asID: 396982 IP address blocks: 34.165.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7b:4c:44:44:6a:4f:48:04:9b:53:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:40:20 2025 GMT Not After : Jul 29 02:40:20 2025 GMT Subject: CN=e9093e81-c3a3-4336-ace9-a6f15d72babc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:5a:82:df:c0:2f:bc:a2:60:cf:6c:7d:ad: b7:c1:af:3b:b2:0a:92:6b:f0:d3:59:5a:1d:fa:fb: 14:72:dc:5b:34:c9:54:06:e4:10:f7:5d:10:dc:b1: 17:00:ae:6b:3e:0e:eb:72:61:1e:da:9c:13:b5:fe: cf:fe:7e:05:45:ac:b4:d6:d7:9a:7c:7f:47:b4:ff: 02:a9:45:a4:18:ad:f3:27:95:cd:19:75:76:fc:60: ce:7d:87:95:a3:07:85:88:4b:87:37:29:ed:dc:db: 48:63:71:d5:19:b9:c9:4f:26:00:e8:01:4b:7c:eb: 0c:8b:83:01:83:f5:69:9d:97:09:4e:68:3f:c6:eb: 65:c5:fc:ca:cd:20:9d:81:f6:89:79:a1:a0:2e:2c: 9d:90:e5:c7:5c:2c:b3:f8:26:8a:02:3c:9e:e4:5b: ee:14:ee:57:b3:66:62:ea:eb:2b:cc:6c:c3:d4:7b: cc:16:69:23:9b:42:4b:6c:78:6f:ad:94:fb:80:ac: b7:e2:6e:3d:52:b2:96:c1:b9:d9:06:2e:ec:01:07: ad:73:68:9c:c2:d5:a1:9a:4f:30:dc:5a:7b:98:8e: 91:a4:11:4c:51:2e:7c:87:65:27:49:2e:8c:d2:fa: 65:62:c6:d6:a9:0d:02:45:68:27:62:8c:4d:bd:8e: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:3D:59:94:85:1F:E3:85:37:31:55:0B:C6:B6:9D:46:EB:0B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4d1a25c3-ec6d-3c9a-8a13-52e232109560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.165.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:75:c6:92:70:03:4f:5f:5b:37:c7:3f:9f:80:10:9b:13:9c: 44:dd:18:70:82:67:b4:39:b4:40:2c:a0:1d:4c:64:65:29:36: 38:d4:54:c0:f6:42:c1:7e:30:9b:bf:d9:f7:ff:af:de:86:55: 31:4b:a8:5f:4a:c4:26:42:5b:97:84:88:5e:66:63:cc:c1:00: e9:30:87:41:73:22:00:d9:fb:ec:02:b1:2e:d6:e9:95:23:14: ef:3c:f8:44:5a:82:30:53:c3:45:08:ff:91:1b:ca:25:ce:75: aa:c2:a2:95:49:37:ca:75:09:df:5e:7d:a5:83:5a:59:66:42: 0a:54:75:74:69:36:5f:81:c5:7f:0e:04:7e:75:4f:87:b9:5c: 51:c2:1b:fd:e0:c4:b1:e4:de:6f:b9:cd:28:35:9b:24:47:7f: e8:09:c8:d3:5a:82:67:ed:79:83:0b:c4:5c:45:48:a1:67:81: 2d:da:97:40:13:c2:59:f9:37:b6:fd:ff:06:fc:e7:f1:b4:ab: 2d:7b:e6:9a:fd:ee:6f:f1:7e:03:0b:2e:0a:cc:fb:b4:19:29: 4e:e9:4b:9e:ea:2a:f1:1a:0b:b7:59:3e:64:f7:b5:c9:ce:f0: cd:b8:6f:29:f0:13:19:e7:37:2a:cf:4f:13:9e:c5:a9:0f:a3: bd:d4:ca:a6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxe0xERGpPSASbU3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyNDAyMFoXDTI1MDcyOTAyNDAyMFowLzEtMCsGA1UEAxMk ZTkwOTNlODEtYzNhMy00MzM2LWFjZTktYTZmMTVkNzJiYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mJagt/AL7yiYM9sfa23wa87sgqSa/DTWVod +vsUctxbNMlUBuQQ910Q3LEXAK5rPg7rcmEe2pwTtf7P/n4FRay01teafH9HtP8C qUWkGK3zJ5XNGXV2/GDOfYeVoweFiEuHNynt3NtIY3HVGbnJTyYA6AFLfOsMi4MB g/VpnZcJTmg/xutlxfzKzSCdgfaJeaGgLiydkOXHXCyz+CaKAjye5FvuFO5Xs2Zi 6usrzGzD1HvMFmkjm0JLbHhvrZT7gKy34m49UrKWwbnZBi7sAQetc2icwtWhmk8w 3Fp7mI6RpBFMUS58h2UnSS6M0vplYsbWqQ0CRWgnYoxNvY78hwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAxWPVmUhR/jhTcxVQvGtp1G6wuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGQxYTI1YzMtZWM2ZC0z YzlhLThhMTMtNTJlMjMyMTA5NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATHXGknADT19bN8c/n4AQmxOcRN0YcIJntDm0QCygHUxkZSk2ONRUwPZC wX4wm7/Z9/+v3oZVMUuoX0rEJkJbl4SIXmZjzMEA6TCHQXMiANn77AKxLtbplSMU 7zz4RFqCMFPDRQj/kRvKJc51qsKilUk3ynUJ3159pYNaWWZCClR1dGk2X4HFfw4E fnVPh7lcUcIb/eDEseTeb7nNKDWbJEd/6AnI01qCZ+15gwvEXEVIoWeBLdqXQBPC Wfk3tv3/Bvzn8bSrLXvmmv3ub/F+AwsuCsz7tBkpTulLnuoq8RoLt1k+ZPe1yc7w zbhvKfATGec3Ks9PE57FqQ+jvdTKpg== -----END CERTIFICATE-----Generated at Sun May 4 19:29:38 2025 by rpki-client