$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa File: 91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa (raw, json) Hash identifier: aWLX1r7QijGyYAz2Wj6pjTzBw9oDnMJb3Cs7BL4cSfc= Subject key identifier: 0C:19:47:0E:E4:2F:CB:F6:13:53:49:54:1A:0D:D4:D0:DA:D3:86:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78533FEB929AFC1CEA70AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.72.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:33:fe:b9:29:af:c1:ce:a7:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c5ee06d4-53f9-468a-999b-9cfaaac46a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:e1:7a:40:c8:b6:75:69:0b:e5:c5:f0:9f: 20:7c:b8:a1:e2:b8:e8:15:1a:3c:5b:2c:0e:3d:87: d1:1c:96:30:23:03:16:e1:07:b6:03:7f:fa:cc:7c: 35:f3:9b:0f:d3:66:8c:d5:b4:e9:17:52:d4:e5:bd: 4a:95:75:f0:28:2a:2e:2d:bd:ad:a7:89:e4:9d:e0: 09:71:a2:e6:7b:9b:b0:d7:52:07:49:3c:0d:9b:6c: 97:ca:80:7b:31:fb:d3:35:67:a8:46:3a:ab:29:0b: 03:7c:33:20:86:1b:73:70:ad:8b:49:ae:e2:02:8a: 52:57:75:d3:aa:6b:ba:b7:55:50:34:36:e7:1b:9a: 6d:c4:af:38:9b:1d:e7:d7:33:3a:6b:66:69:f8:9b: ec:bf:53:c8:15:2a:82:04:b3:88:73:a1:c6:d8:0e: be:48:6f:4a:73:22:c1:4b:95:23:57:86:4c:e0:ac: de:57:45:cf:e6:fb:b6:1f:fe:27:df:c6:58:b3:b0: 02:3a:eb:2f:01:63:16:b0:6e:24:a6:f0:ec:5b:23: 4b:65:2f:4e:f8:87:0e:c2:5c:34:05:6d:66:3c:a0: 85:5e:39:49:e9:13:20:38:b3:9b:fb:2b:7b:f9:df: 14:21:65:7f:25:f1:16:14:cf:cb:b5:36:9e:61:ce: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:19:47:0E:E4:2F:CB:F6:13:53:49:54:1A:0D:D4:D0:DA:D3:86:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91f3b9ce-4cc7-37c1-a26e-e30800ceae46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b1:d8:9b:0b:5b:87:e6:15:9a:19:78:92:c2:86:eb:a3:76: 99:03:9b:01:a5:cf:3e:9a:3b:75:07:57:b3:e9:e0:a7:da:86: b8:13:7a:b8:0d:5d:07:e5:ec:1b:fb:91:25:14:61:ab:06:ab: fd:41:5d:03:73:f8:d7:fb:38:bd:3a:51:7c:ef:a8:c9:90:81: 3d:1b:ac:24:95:ca:1b:7e:26:45:69:ab:83:d4:29:ea:9c:3c: 29:ff:78:b6:a2:52:53:8e:a3:15:d2:52:7b:71:ef:94:f8:0c: 1e:1a:ea:3d:e5:e5:07:f5:75:14:10:aa:1f:87:95:0c:1b:f6: 79:fa:00:14:81:b9:a0:8e:85:a1:5d:83:63:81:e4:26:b7:fb: 42:06:c4:41:ce:f6:f8:3a:cb:ba:5e:74:59:f3:d1:26:69:89: c3:98:ea:64:4b:a5:ab:09:3c:da:c5:11:a1:e0:ee:69:8e:e9: 59:cb:9f:aa:66:8b:81:5b:09:f0:e7:0c:c7:71:8c:39:f4:28: aa:f8:19:1b:50:ac:20:1f:a4:06:13:d1:26:f7:5e:83:a0:e8: ee:0e:c5:3f:70:71:5e:ae:19:34:68:4a:a8:e3:02:f3:4b:75: 01:3c:a8:d8:a5:3c:bb:93:0a:79:f1:95:6c:f2:f7:57:3c:71: 52:08:c6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTP+uSmvwc6nCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzVlZTA2ZDQtNTNmOS00NjhhLTk5OWItOWNmYWFhYzQ2YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1XhekDItnVpC+XF8J8gfLih4rjoFRo8WywO PYfRHJYwIwMW4Qe2A3/6zHw185sP02aM1bTpF1LU5b1KlXXwKCouLb2tp4nkneAJ caLme5uw11IHSTwNm2yXyoB7MfvTNWeoRjqrKQsDfDMghhtzcK2LSa7iAopSV3XT qmu6t1VQNDbnG5ptxK84mx3n1zM6a2Zp+Jvsv1PIFSqCBLOIc6HG2A6+SG9KcyLB S5UjV4ZM4KzeV0XP5vu2H/4n38ZYs7ACOusvAWMWsG4kpvDsWyNLZS9O+IcOwlw0 BW1mPKCFXjlJ6RMgOLOb+yt7+d8UIWV/JfEWFM/LtTaeYc5SMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwZRw7kL8v2E1NJVBoN1NDa04ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFmM2I5Y2UtNGNjNy0z N2MxLWEyNmUtZTMwODAwY2VhZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESx2JsLW4fmFZoZeJLChuujdpkDmwGlzz6aO3UHV7Pp4KfahrgTergN XQfl7Bv7kSUUYasGq/1BXQNz+Nf7OL06UXzvqMmQgT0brCSVyht+JkVpq4PUKeqc PCn/eLaiUlOOoxXSUntx75T4DB4a6j3l5Qf1dRQQqh+HlQwb9nn6ABSBuaCOhaFd g2OB5Ca3+0IGxEHO9vg6y7pedFnz0SZpicOY6mRLpasJPNrFEaHg7mmO6VnLn6pm i4FbCfDnDMdxjDn0KKr4GRtQrCAfpAYT0Sb3XoOg6O4OxT9wcV6uGTRoSqjjAvNL dQE8qNilPLuTCnnxlWzy91c8cVIIxo8= -----END CERTIFICATE-----Generated at Sun May 4 18:56:51 2025 by rpki-client