$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa File: 5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa (raw, json) Hash identifier: CqkwYd9m3uDDDkLNNggt7gg9Xf0nU/eqRkjQXqMWfB8= Subject key identifier: 45:8A:31:73:CF:11:18:51:8C:CF:EF:13:6A:78:EB:29:0B:14:48:0B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E26E0E60EF078B363070 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.64.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e2:6e:0e:60:ef:07:8b:36:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1b04fdd3-6710-4e21-90a2-98a50247f945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:e6:6e:bd:20:d9:e0:bb:0a:b1:24:82:3a: c9:25:ba:f9:6b:ab:ba:c7:43:a4:17:13:c3:4e:4b: 7c:ef:2d:8a:72:c5:43:78:c9:9a:d9:6c:58:d6:0e: 70:a0:42:b7:c0:54:e4:ec:e8:52:cb:76:48:60:da: b9:20:6c:b4:63:21:30:d6:56:ff:64:c8:3c:0d:04: 83:78:85:3c:87:87:ee:31:f3:5a:74:ad:78:80:e2: c8:2e:94:9e:56:6c:12:b3:58:05:32:53:2f:32:0c: 63:b3:82:fd:ef:f2:4f:5e:cb:5a:65:76:4e:c7:d7: 8a:44:0c:6e:16:f6:70:c1:7b:2e:78:2d:0e:c6:8f: ac:94:9b:af:40:41:9c:6f:b1:3f:de:ae:2f:30:2d: be:ee:40:3e:2b:58:9e:61:ee:ba:2c:71:03:42:91: 4d:9f:50:ee:3f:80:c0:07:65:3a:b9:43:3f:05:38: fd:4f:06:b4:ef:cc:7a:6e:38:5c:70:3f:f6:38:05: a4:54:eb:2c:20:26:1a:59:75:c5:d9:ae:1c:80:78: 7b:4d:6c:dc:0a:be:b7:98:6b:03:d1:e3:05:cd:47: ec:4d:d6:18:69:fb:aa:c7:2a:80:98:96:e5:5d:1e: 45:75:78:59:16:57:af:2d:c7:e9:ff:ff:1f:3f:20: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8A:31:73:CF:11:18:51:8C:CF:EF:13:6A:78:EB:29:0B:14:48:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5bb33efa-d63d-31fc-a7b2-1a7e9d4caf11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:82:85:fc:5d:c1:b1:45:39:ef:93:6e:3f:2c:31:fb:cd: c3:72:66:e3:15:eb:6a:96:fa:b1:6c:d4:a9:f2:5c:54:65:3e: 4f:ee:d2:69:a9:e9:3d:7d:d7:73:41:23:21:7a:44:45:e9:71: 07:38:87:42:1d:a0:bf:37:c1:f7:7e:36:67:62:5c:8e:ec:42: 45:f8:59:ea:cb:a8:41:8f:e3:5f:46:5a:33:68:76:7e:6a:7a: 29:4b:e4:0f:1f:a9:7f:4b:74:6f:be:17:d8:25:df:f6:06:bd: 90:e8:b5:3a:66:a3:d5:0f:e9:de:71:be:59:cc:ba:90:0b:77: bd:37:d2:7c:a5:2b:af:55:08:87:6d:9c:dd:7f:9a:9b:49:8f: 7d:9b:c0:9c:ee:23:65:a2:e3:23:24:2b:df:94:3e:1d:b1:bd: 39:04:f4:15:01:cd:e5:ac:28:6c:13:5e:e7:25:f0:07:ba:ce: 30:6e:ef:34:80:0a:40:ae:02:b9:ad:e8:87:10:bb:62:00:f2: b1:e4:29:03:ae:b9:98:a3:04:06:f4:a2:b2:2d:72:31:c5:53: 22:6b:5a:93:20:de:af:96:0e:fb:d8:40:57:23:a9:4f:81:7c: 0f:6c:c5:0f:32:d1:ee:12:d8:bd:16:58:cb:9c:41:93:02:9a: 6d:59:01:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOJuDmDvB4s2MHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWIwNGZkZDMtNjcxMC00ZTIxLTkwYTItOThhNTAyNDdmOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb7mbr0g2eC7CrEkgjrJJbr5a6u6x0OkFxPD Tkt87y2KcsVDeMma2WxY1g5woEK3wFTk7OhSy3ZIYNq5IGy0YyEw1lb/ZMg8DQSD eIU8h4fuMfNadK14gOLILpSeVmwSs1gFMlMvMgxjs4L97/JPXstaZXZOx9eKRAxu FvZwwXsueC0Oxo+slJuvQEGcb7E/3q4vMC2+7kA+K1ieYe66LHEDQpFNn1DuP4DA B2U6uUM/BTj9Twa078x6bjhccD/2OAWkVOssICYaWXXF2a4cgHh7TWzcCr63mGsD 0eMFzUfsTdYYafuqxyqAmJblXR5FdXhZFlevLcfp//8fPyCKHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWKMXPPERhRjM/vE2p46ykLFEgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWJiMzNlZmEtZDYzZC0z MWZjLWE3YjItMWE3ZTlkNGNhZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB31goX8XcGxRTnvk24/LDH7zcNyZuMV62qW+rFs1KnyXFRlPk/u0mmp 6T1913NBIyF6REXpcQc4h0IdoL83wfd+NmdiXI7sQkX4WerLqEGP419GWjNodn5q eilL5A8fqX9LdG++F9gl3/YGvZDotTpmo9UP6d5xvlnMupALd7030nylK69VCIdt nN1/mptJj32bwJzuI2Wi4yMkK9+UPh2xvTkE9BUBzeWsKGwTXucl8Ae6zjBu7zSA CkCuArmt6IcQu2IA8rHkKQOuuZijBAb0orItcjHFUyJrWpMg3q+WDvvYQFcjqU+B fA9sxQ8y0e4S2L0WWMucQZMCmm1ZAXA= -----END CERTIFICATE-----Generated at Sun May 4 18:27:28 2025 by rpki-client