$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa File: aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa (raw, json) Hash identifier: bgMDQJdDwSZ38YUEEOoS+n6O6B0Fws8Ze2Kf0xFIXes= Subject key identifier: 36:74:EF:B1:91:30:9E:07:C0:4C:08:B6:78:4B:AD:F1:4C:48:CE:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DF6F015F7CB137624600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:6f:01:5f:7c:b1:37:62:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5b5fa367-8c37-4f9a-bba8-8af6c235079f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:9c:c8:46:71:fa:6d:1b:4e:5d:09:11:30: ca:0a:60:3f:c2:a2:f8:d6:00:94:b0:15:da:1b:5a: 4d:9e:2b:ff:7c:a9:74:c4:e9:1d:1f:3c:04:db:cf: e6:5c:c6:97:51:57:12:df:66:96:32:dd:fd:ae:10: f9:74:96:7d:5f:c6:84:31:e9:42:44:3c:37:73:16: 37:12:c1:16:8c:c4:0a:66:19:38:a5:97:3f:1d:da: b8:bb:4a:27:14:6a:a2:94:19:50:3d:9b:fe:05:3b: 26:e0:e3:c0:9c:3e:47:d9:0f:92:f7:09:28:7e:86: 4a:c7:96:be:77:ae:93:58:68:75:b0:6f:e9:06:58: d0:ca:ce:2a:2a:7d:52:b8:d7:b9:77:a1:de:39:2f: 3a:cc:16:ec:b9:64:12:3f:83:f6:2c:ce:1c:c3:6c: a6:64:36:31:4f:4c:ed:80:a9:c9:3e:54:37:4d:0e: c5:39:a7:04:26:e4:d9:d0:2f:c7:37:0a:b0:d6:e3: 47:25:5d:29:2f:12:ff:5b:67:50:93:cc:11:be:30: 4e:28:28:4a:b1:84:ac:ae:25:fd:77:91:ac:fe:e2: fe:b2:18:81:21:b8:63:7c:77:91:ba:ed:9b:ca:0e: 1a:74:39:f7:d8:2e:95:18:37:5b:e6:1d:d7:ff:d6: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:EF:B1:91:30:9E:07:C0:4C:08:B6:78:4B:AD:F1:4C:48:CE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa255dc1-c32d-35a8-b4e8-27a7ce8d53ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.19.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d2:89:3a:30:33:15:e3:f1:fd:4a:9a:5b:d5:6d:9b:d0:cf: 6b:15:88:44:39:d3:c6:b6:8c:7e:a6:18:4f:d0:35:e6:d0:ea: 4b:fd:17:77:0a:50:ea:24:fa:bd:9b:6e:71:8f:87:9e:6c:9d: 56:6b:d7:cb:b2:fd:b1:f0:48:a0:4f:c6:4c:93:71:a7:f1:68: 1b:9c:bd:75:91:4a:cf:16:c3:62:5e:de:fd:70:84:30:62:6c: 49:df:92:75:14:fd:2c:38:b6:4f:79:c0:52:24:04:e0:5b:7a: 33:3b:34:56:34:a0:0a:9c:db:ab:8d:ae:f5:4d:04:57:83:b6: 0f:b1:e5:d6:a1:79:62:43:d0:ed:86:20:88:7a:8d:93:4d:ad: b2:de:d6:3f:b9:30:20:ed:63:f1:ea:72:41:c2:05:15:34:ea: f4:81:08:31:ba:e1:dc:af:f6:50:bd:03:eb:ba:6a:28:aa:5d: b8:66:40:64:bf:a4:8d:45:48:30:3f:92:fb:3c:a0:4e:bf:6f: 4d:a9:a7:d6:3d:24:df:5e:04:a4:99:b9:24:2a:06:70:23:28: 4c:74:16:da:d7:d1:3b:bf:c4:ac:80:48:55:14:51:68:8a:47: 6d:c9:c9:0d:43:31:ce:82:0e:c9:2e:29:c1:6f:0c:90:cd:43: e2:6b:0e:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN9vAV98sTdiRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWI1ZmEzNjctOGMzNy00ZjlhLWJiYTgtOGFmNmMyMzUwNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEWcyEZx+m0bTl0JETDKCmA/wqL41gCUsBXa G1pNniv/fKl0xOkdHzwE28/mXMaXUVcS32aWMt39rhD5dJZ9X8aEMelCRDw3cxY3 EsEWjMQKZhk4pZc/Hdq4u0onFGqilBlQPZv+BTsm4OPAnD5H2Q+S9wkofoZKx5a+ d66TWGh1sG/pBljQys4qKn1SuNe5d6HeOS86zBbsuWQSP4P2LM4cw2ymZDYxT0zt gKnJPlQ3TQ7FOacEJuTZ0C/HNwqw1uNHJV0pLxL/W2dQk8wRvjBOKChKsYSsriX9 d5Gs/uL+shiBIbhjfHeRuu2byg4adDn32C6VGDdb5h3X/9ZvGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ077GRMJ4HwEwItnhLrfFMSM5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEyNTVkYzEtYzMyZC0z NWE4LWI0ZTgtMjdhN2NlOGQ1M2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDSiTowMxXj8f1KmlvVbZvQz2sViEQ508a2jH6mGE/QNebQ6kv9F3cK UOok+r2bbnGPh55snVZr18uy/bHwSKBPxkyTcafxaBucvXWRSs8Ww2Je3v1whDBi bEnfknUU/Sw4tk95wFIkBOBbejM7NFY0oAqc26uNrvVNBFeDtg+x5daheWJD0O2G IIh6jZNNrbLe1j+5MCDtY/HqckHCBRU06vSBCDG64dyv9lC9A+u6aiiqXbhmQGS/ pI1FSDA/kvs8oE6/b02pp9Y9JN9eBKSZuSQqBnAjKEx0FtrX0Tu/xKyASFUUUWiK R23JyQ1DMc6CDskuKcFvDJDNQ+JrDvo= -----END CERTIFICATE-----Generated at Sun May 4 18:46:58 2025 by rpki-client