$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/535ae84c-c11d-3b56-a148-7f42528ad5ff.roa File: 535ae84c-c11d-3b56-a148-7f42528ad5ff.roa (raw, json) Hash identifier: mEllPkTxQpjD5/Y/SUMHiPu+aeHxKGBbFZhkbt/497g= Subject key identifier: 1F:6B:68:9A:E3:90:14:90:33:22:B6:22:09:98:3B:43:07:9B:46:13 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E0D3315CF1224B952900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/535ae84c-c11d-3b56-a148-7f42528ad5ff.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 19527 IP address blocks: 34.4.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e0:d3:31:5c:f1:22:4b:95:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ce1748a1-b40e-4a96-897a-e17565a80e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:60:11:94:53:b9:ac:36:6a:a8:19:52:23: 4c:c6:71:1b:b0:49:03:06:7e:79:1e:df:b3:62:89: 23:c7:aa:78:d5:65:1d:ca:30:be:17:8e:6c:78:ab: fd:13:72:ca:2e:85:d6:84:6a:40:b9:99:b1:72:9c: 97:59:c2:31:57:5a:68:6b:21:7e:c1:6d:4a:c6:40: f1:bb:ef:48:41:05:01:ec:a0:21:36:26:c1:86:3f: 35:69:93:4c:2a:bb:8c:42:09:d8:27:62:4a:3e:78: aa:e6:85:ae:50:23:2c:4d:fb:34:45:2e:ac:b7:41: 60:00:ca:ba:a0:17:4b:aa:99:4e:61:cb:8a:7b:99: 8c:f0:d3:bb:bc:8e:0f:eb:44:2b:15:4b:11:dc:33: 4a:65:65:5c:44:30:9b:e0:a7:92:1d:80:5a:f0:74: f5:d5:65:a3:99:f7:af:58:ac:7f:96:76:4d:26:60: 46:6b:e5:00:f0:2e:9f:86:fd:f9:57:c4:ee:21:bc: 9b:e8:db:e9:2b:d3:8b:32:74:69:95:c9:0b:6d:ad: f6:72:dd:e5:13:9c:38:ea:f2:72:13:da:50:6f:96: 35:72:8d:79:ed:2e:b5:5e:2a:f8:53:db:8c:09:4c: 0b:5b:3b:ff:55:3f:a0:66:24:d5:da:da:c6:b5:9b: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6B:68:9A:E3:90:14:90:33:22:B6:22:09:98:3B:43:07:9B:46:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/535ae84c-c11d-3b56-a148-7f42528ad5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:29:b9:a0:2a:f1:19:7b:9f:a9:c6:37:98:88:d9:49:63:00: 3f:9d:e3:b4:09:9a:87:c9:15:da:12:13:58:27:58:74:6c:b3: 24:de:70:3e:ac:47:02:9f:a3:6e:21:d1:a4:30:f3:2e:af:4d: fe:85:83:ad:a2:67:47:46:d3:a5:3c:ad:98:83:be:48:8a:2e: e8:bc:61:c7:74:fb:09:66:0d:24:c7:be:9e:e3:09:7d:09:a9: 57:2b:b6:de:17:60:32:9f:14:1f:78:f6:a5:26:3d:0e:0b:29: 25:77:0a:5a:87:55:2f:19:7c:23:f9:1d:4d:ca:91:d4:85:d4: 87:1b:0e:c2:ed:53:22:3e:7d:a5:7b:05:85:ab:de:aa:2f:08: c4:96:f6:1f:ef:4e:27:36:3e:53:ec:d7:05:41:f9:69:c9:10: 84:da:08:b6:7a:bb:51:c9:56:f6:db:57:41:de:dc:16:1c:c7: 99:15:9e:d5:08:bc:36:86:f8:fb:43:30:d1:d8:0b:57:f0:ef: 52:b1:be:73:6e:53:87:3b:3e:9c:4d:57:06:2c:ff:55:8d:41: a1:72:d7:68:57:3e:8e:23:39:fb:12:b7:20:e1:52:9a:56:fc: d6:24:35:2b:5e:d3:5b:e9:4b:29:23:ff:33:93:fc:e5:78:da: 39:cc:93:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhODTMVzxIkuVKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2UxNzQ4YTEtYjQwZS00YTk2LTg5N2EtZTE3NTY1YTgwZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzNgEZRTuaw2aqgZUiNMxnEbsEkDBn55Ht+z Yokjx6p41WUdyjC+F45seKv9E3LKLoXWhGpAuZmxcpyXWcIxV1poayF+wW1KxkDx u+9IQQUB7KAhNibBhj81aZNMKruMQgnYJ2JKPniq5oWuUCMsTfs0RS6st0FgAMq6 oBdLqplOYcuKe5mM8NO7vI4P60QrFUsR3DNKZWVcRDCb4KeSHYBa8HT11WWjmfev WKx/lnZNJmBGa+UA8C6fhv35V8TuIbyb6NvpK9OLMnRplckLba32ct3lE5w46vJy E9pQb5Y1co157S61Xir4U9uMCUwLWzv/VT+gZiTV2trGtZsqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9raJrjkBSQMyK2IgmYO0MHm0YTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTM1YWU4NGMtYzExZC0z YjU2LWExNDgtN2Y0MjUyOGFkNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIgRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMpuaAq8Rl7n6nGN5iI2UljAD+d47QJmofJFdoSE1gnWHRssyTecD6s RwKfo24h0aQw8y6vTf6Fg62iZ0dG06U8rZiDvkiKLui8Ycd0+wlmDSTHvp7jCX0J qVcrtt4XYDKfFB949qUmPQ4LKSV3ClqHVS8ZfCP5HU3KkdSF1IcbDsLtUyI+faV7 BYWr3qovCMSW9h/vTic2PlPs1wVB+WnJEITaCLZ6u1HJVvbbV0He3BYcx5kVntUI vDaG+PtDMNHYC1fw71KxvnNuU4c7PpxNVwYs/1WNQaFy12hXPo4jOfsStyDhUppW /NYkNSte01vpSykj/zOT/OV42jnMk/k= -----END CERTIFICATE-----Generated at Sun May 4 18:45:26 2025 by rpki-client