$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99f74615-0d1e-3e27-a3fd-a156dba1f2d1.roa File: 99f74615-0d1e-3e27-a3fd-a156dba1f2d1.roa (raw, json) Hash identifier: xAooQ+5BpJ1XIY7B+Tk5aCryfwh838uEKIU3KMDWxZc= Subject key identifier: 2E:7B:12:16:32:6B:A6:BD:A4:24:0C:6C:E4:9F:F0:77:53:9D:F1:BA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849BDDA30D4412076882CA38F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99f74615-0d1e-3e27-a3fd-a156dba1f2d1.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.4.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:30:d4:41:20:76:88:2c:a3:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=826012ba-3d63-4859-98e5-3ba72ad32b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:4d:cd:09:86:f5:37:82:6b:f1:e4:3d:82: 61:1f:aa:f9:f2:30:94:77:f9:6b:f6:60:16:02:a9: f9:5d:a9:4a:d5:22:d4:a7:c1:49:3a:66:51:43:73: 62:62:ad:ff:00:f5:40:41:8a:e7:84:05:8c:46:e1: 64:b9:d9:33:41:df:39:90:22:1b:17:1d:2a:f2:c8: b0:5e:e9:af:74:2c:f5:73:68:45:4e:01:d6:39:a0: 6a:5b:52:d9:b4:c6:b0:2b:3a:2c:b3:f2:90:6a:02: fd:9c:32:9b:a3:fb:09:4c:b9:cf:0a:01:c1:7c:18: ae:84:4c:0d:ca:73:0a:a6:fa:1b:5e:d0:15:81:37: 30:11:aa:be:0b:c8:a4:82:4f:7d:bd:99:7a:6a:63: 8e:15:73:0d:68:55:4e:c9:28:ee:c0:eb:29:02:ff: 4c:4d:88:2e:0a:97:db:31:61:61:84:b0:d0:1c:5d: 96:41:53:5d:67:db:43:e8:d3:b5:9c:0c:a9:9f:04: 93:ee:38:ca:80:2e:6a:d1:59:e5:dc:e3:eb:18:4e: 72:f5:4d:f9:9f:67:c8:ef:3c:67:13:a6:43:0c:d9: e8:0a:13:59:3a:7e:61:a1:01:db:ed:3c:e6:0d:67: b6:1c:d4:c9:d2:dd:df:27:90:27:5a:e4:49:26:84: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7B:12:16:32:6B:A6:BD:A4:24:0C:6C:E4:9F:F0:77:53:9D:F1:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/99f74615-0d1e-3e27-a3fd-a156dba1f2d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.4.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:fb:c5:5e:d8:cc:b6:ca:5a:29:4f:39:d5:3e:1d:ad:00:71: 6e:4d:ad:f5:4e:34:4c:9a:5c:66:e4:ac:6a:97:9e:bf:5b:ed: 1c:42:ec:e6:a6:e4:62:98:7c:79:2c:4a:0d:c1:95:4b:5a:97: 13:be:29:ec:16:b0:29:1b:35:a8:fc:c7:c7:1e:ff:42:b9:a1: 3b:9c:bd:00:b7:6d:e8:5c:c6:6c:79:e1:ba:6f:53:66:61:79: df:14:80:50:a0:a2:28:4d:da:5f:63:8e:39:b9:5d:ce:15:40: 6b:20:d4:41:e6:62:ff:02:c1:41:f4:e2:ce:09:b7:2b:47:7f: ff:0b:f2:00:4a:d7:5e:2d:14:05:02:08:19:3c:23:3f:ce:6a: 71:74:77:b6:55:f9:23:1c:e0:84:0e:5f:f2:62:b7:b0:e3:39: c7:96:e5:79:0f:98:6f:56:b9:06:94:a3:34:5c:80:a2:30:6a: 55:61:eb:bf:c1:dc:fc:40:74:fa:29:71:ce:9a:36:82:c9:6f: 28:6d:24:19:4b:d9:b9:41:ce:2c:da:53:c2:9f:10:48:14:ef: 8c:b6:20:04:08:26:2a:11:47:bd:29:ef:46:89:f1:65:01:90: 4a:ed:17:df:e4:f0:c8:2e:c7:e1:7c:49:a1:0a:4b:59:e3:3a: f3:89:41:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jDUQSB2iCyjjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ODI2MDEyYmEtM2Q2My00ODU5LTk4ZTUtM2JhNzJhZDMyYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUlNzQmG9TeCa/HkPYJhH6r58jCUd/lr9mAW Aqn5XalK1SLUp8FJOmZRQ3NiYq3/APVAQYrnhAWMRuFkudkzQd85kCIbFx0q8siw XumvdCz1c2hFTgHWOaBqW1LZtMawKzoss/KQagL9nDKbo/sJTLnPCgHBfBiuhEwN ynMKpvobXtAVgTcwEaq+C8ikgk99vZl6amOOFXMNaFVOySjuwOspAv9MTYguCpfb MWFhhLDQHF2WQVNdZ9tD6NO1nAypnwST7jjKgC5q0Vnl3OPrGE5y9U35n2fI7zxn E6ZDDNnoChNZOn5hoQHb7TzmDWe2HNTJ0t3fJ5AnWuRJJoRwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC57EhYya6a9pCQMbOSf8HdTnfG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTlmNzQ2MTUtMGQxZS0z ZTI3LWEzZmQtYTE1NmRiYTFmMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD7xV7YzLbKWilPOdU+Ha0AcW5NrfVONEyaXGbkrGqXnr9b7RxC7Oam 5GKYfHksSg3BlUtalxO+KewWsCkbNaj8x8ce/0K5oTucvQC3behcxmx54bpvU2Zh ed8UgFCgoihN2l9jjjm5Xc4VQGsg1EHmYv8CwUH04s4JtytHf/8L8gBK114tFAUC CBk8Iz/OanF0d7ZV+SMc4IQOX/Jit7DjOceW5XkPmG9WuQaUozRcgKIwalVh67/B 3PxAdPopcc6aNoLJbyhtJBlL2blBzizaU8KfEEgU74y2IAQIJioRR70p70aJ8WUB kErtF9/k8Mgux+F8SaEKS1njOvOJQYs= -----END CERTIFICATE-----Generated at Sun May 4 18:16:36 2025 by rpki-client