$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96c9c43e-9f6c-30e6-8926-3a5351913ffb.roa File: 96c9c43e-9f6c-30e6-8926-3a5351913ffb.roa (raw, json) Hash identifier: wNI7Ieaoanl5EzSjeKuqhcWmQ7FOkYr3eMMkBUApZ9o= Subject key identifier: 2F:A7:02:3D:4C:BA:FC:03:03:CA:AC:9D:DD:5B:06:D2:4A:F2:C3:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584968E538B08F33EA219EAB75E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96c9c43e-9f6c-30e6-8926-3a5351913ffb.roa Signing time: Fri 04 Apr 2025 02:39:45 +0000 ROA not before: Fri 04 Apr 2025 02:39:45 +0000 ROA not after: Thu 03 Jul 2025 02:39:45 +0000 asID: 19527 IP address blocks: 34.3.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:e5:38:b0:8f:33:ea:21:9e:ab:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 4 02:39:45 2025 GMT Not After : Jul 3 02:39:45 2025 GMT Subject: CN=43ded994-2ff3-489a-b052-de86964b455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:49:90:42:f3:cc:41:37:3f:51:15:46:0e: 73:86:c8:7e:52:4e:1e:f2:1f:93:6d:15:9f:f8:2c: 66:e8:f3:2e:f3:78:b4:c3:b9:6b:e3:e1:aa:89:9a: d9:fa:ab:7f:36:ab:6b:fb:ec:e0:c7:a2:f0:95:49: 5f:ea:53:b0:4b:67:4f:f5:cc:4f:c2:8e:f5:07:88: 6c:db:23:2f:85:1a:7c:81:84:5c:ae:ee:b6:d9:65: 8f:9b:3f:3a:1b:e1:9e:85:6b:53:1b:3f:00:3a:df: 57:d9:36:ce:df:8a:b9:e5:5d:45:fa:74:56:95:bf: 0d:e5:fc:c1:08:e3:97:c8:a2:69:6f:96:5c:6d:ee: e5:a9:07:a3:25:40:2c:d3:b2:52:03:4e:43:ac:ea: 21:e8:b4:7e:2b:57:8d:a2:5f:dc:f3:ea:1c:ba:8a: 5a:cb:5e:ed:73:b0:81:f7:a0:e8:8d:42:d3:a5:b6: 98:86:b4:a7:0b:10:ca:05:9a:1c:a7:21:74:b9:ba: 42:c3:84:1c:2a:59:2c:fb:00:c0:f0:42:4f:b9:b2: 6e:c3:d6:93:6d:6f:c0:da:90:8d:33:fa:f8:03:35: 22:7c:56:22:e7:21:62:43:ff:1b:9d:f9:d4:76:00: d8:34:43:d2:8e:f6:9c:24:99:86:a7:77:27:69:4b: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:02:3D:4C:BA:FC:03:03:CA:AC:9D:DD:5B:06:D2:4A:F2:C3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96c9c43e-9f6c-30e6-8926-3a5351913ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:24:62:bc:f5:82:6c:0b:bd:db:5e:47:33:ef:69:8c:99:57: 34:26:31:9d:2c:1e:b8:b0:6a:62:d5:13:8a:69:af:c5:54:f8: bd:b7:e1:de:71:49:98:50:81:78:a2:bb:ee:f5:65:fd:4d:05: ad:c7:0b:59:10:7c:1a:f8:a9:ef:4b:e1:3b:b5:91:b0:5b:8c: aa:18:56:28:43:06:4b:88:57:70:6a:e7:9e:49:4c:d3:76:e4: 4f:c7:24:f4:f0:49:b2:0e:81:82:8e:c8:5d:91:e8:80:5e:2a: 53:89:a5:57:47:c1:18:ad:b4:c7:40:18:e6:26:99:9c:fb:ec: 70:db:97:33:60:3e:d8:b4:35:d6:d4:55:14:a5:7a:d1:46:4b: 1e:5b:d6:f3:e7:fc:6d:71:87:fc:d8:1d:d9:92:f5:e0:f7:6b: 24:08:54:73:fc:f6:ea:48:9c:f9:48:59:fe:24:d6:5e:0b:1b: 8e:d1:51:c7:4c:60:ba:24:78:7e:5b:d3:ea:7a:df:6d:e7:02: cb:81:14:a1:b0:41:5a:ee:1e:79:ec:2d:bb:8d:e5:cd:1f:2f: 07:ee:85:ea:9b:c9:df:9a:35:c1:6d:b4:5a:69:23:f9:53:3f: c3:57:2c:d7:26:de:da:e5:16:de:f9:3d:ef:d2:91:47:01:40: 99:09:ed:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElo5TiwjzPqIZ6rdeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwNDAyMzk0NVoXDTI1MDcwMzAyMzk0NVowLzEtMCsGA1UEAxMk NDNkZWQ5OTQtMmZmMy00ODlhLWIwNTItZGU4Njk2NGI0NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlehJkELzzEE3P1EVRg5zhsh+Uk4e8h+TbRWf +Cxm6PMu83i0w7lr4+GqiZrZ+qt/Nqtr++zgx6LwlUlf6lOwS2dP9cxPwo71B4hs 2yMvhRp8gYRcru622WWPmz86G+GehWtTGz8AOt9X2TbO34q55V1F+nRWlb8N5fzB COOXyKJpb5Zcbe7lqQejJUAs07JSA05DrOoh6LR+K1eNol/c8+ocuopay17tc7CB 96DojULTpbaYhrSnCxDKBZocpyF0ubpCw4QcKlks+wDA8EJPubJuw9aTbW/A2pCN M/r4AzUifFYi5yFiQ/8bnfnUdgDYNEPSjvacJJmGp3cnaUtxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+nAj1MuvwDA8qsnd1bBtJK8sNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTZjOWM0M2UtOWY2Yy0z MGU2LTg5MjYtM2E1MzUxOTEzZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkkYrz1gmwLvdteRzPvaYyZVzQmMZ0sHriwamLVE4ppr8VU+L234d5x SZhQgXiiu+71Zf1NBa3HC1kQfBr4qe9L4Tu1kbBbjKoYVihDBkuIV3Bq555JTNN2 5E/HJPTwSbIOgYKOyF2R6IBeKlOJpVdHwRittMdAGOYmmZz77HDblzNgPti0NdbU VRSletFGSx5b1vPn/G1xh/zYHdmS9eD3ayQIVHP89upInPlIWf4k1l4LG47RUcdM YLokeH5b0+p6323nAsuBFKGwQVruHnnsLbuN5c0fLwfuheqbyd+aNcFttFppI/lT P8NXLNcm3trlFt75Pe/SkUcBQJkJ7c4= -----END CERTIFICATE-----Generated at Sun May 4 19:04:40 2025 by rpki-client