$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa File: cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa (raw, json) Hash identifier: 2FKf0Rq8vWcp7Ib+/zUuKRZ7yAyQivGwCOs5H+jFg74= Subject key identifier: D8:A8:AF:DE:0F:C2:58:18:F3:E9:0E:3A:FC:35:D2:02:41:8C:4F:6F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C5053DA15150777BAE48FC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa Signing time: Wed 07 May 2025 02:38:38 +0000 ROA not before: Wed 07 May 2025 02:38:38 +0000 ROA not after: Tue 05 Aug 2025 02:38:38 +0000 asID: 19527 IP address blocks: 34.190.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:05:3d:a1:51:50:77:7b:ae:48:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:38:38 2025 GMT Not After : Aug 5 02:38:38 2025 GMT Subject: CN=0d38fcf0-f19c-4f29-a19b-e8959d8ab9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:26:ae:d7:94:f4:e1:74:50:41:29:bc:8c:f3: dc:56:3d:76:3f:3c:bb:44:e5:92:37:c5:2f:01:86: b1:94:7c:3d:e0:8c:e7:2a:e4:ad:5f:8d:50:9b:66: 69:9f:25:91:ef:a2:c4:5a:af:1b:c3:12:58:b2:0f: 88:77:ae:0d:44:be:ef:bd:2a:e0:f4:60:40:12:c2: ef:bc:ef:11:b4:b3:60:79:c9:a7:f9:2b:03:69:24: 0c:e4:2e:a2:7a:6e:10:98:74:77:ee:e4:0b:4e:28: 73:69:82:8b:fd:c4:7d:ca:1d:14:8b:9b:40:30:0a: a4:db:38:4d:a2:bb:42:20:21:6e:a8:df:32:89:c8: 9d:d6:07:73:93:4d:f1:52:09:cb:81:56:e7:dd:9f: ef:ed:09:0a:62:83:77:ae:7f:ef:dc:d2:45:8a:19: c0:17:7e:0d:cb:40:ea:cc:16:8b:22:83:ef:83:19: a0:b1:c3:77:e6:d3:26:ac:e4:97:2c:11:da:07:68: 3a:55:73:2e:0d:d7:93:62:e0:4e:6b:52:1e:a2:66: 13:a7:b1:9e:c0:52:a2:a4:72:ac:41:7c:0f:43:7e: 2f:a7:40:e2:70:c0:ee:7b:aa:69:bb:69:12:f2:08: 02:e7:91:be:84:ed:1c:a1:de:c1:c2:0c:27:e0:5c: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A8:AF:DE:0F:C2:58:18:F3:E9:0E:3A:FC:35:D2:02:41:8C:4F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfcf291c-8daa-3a95-b942-f4d224fdbf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b1:97:7c:16:c9:ce:1e:ed:22:95:a7:ed:77:ae:e0:71:52: 92:06:dc:17:fe:e3:d3:50:a1:1a:f3:06:a9:22:95:69:8c:89: c1:41:ed:ae:a9:af:e3:9f:af:27:f1:49:b7:1e:60:68:bb:8d: 34:ec:d9:d0:ce:ec:ef:ef:f9:d0:a1:46:49:9a:de:79:8e:3d: 18:08:22:16:9c:85:bd:32:23:db:11:ea:5d:ba:e9:c0:00:79: 6b:98:fb:fe:a2:4e:71:e5:ff:98:00:d6:df:ed:37:a8:f1:b2: 9b:7b:6d:12:3e:6d:66:bd:6c:33:8b:ff:76:9e:29:82:d5:6a: cb:98:e5:48:e3:fa:ab:5c:bb:71:ec:29:96:7c:70:9b:db:fb: 57:39:e6:77:de:b2:1b:db:f6:59:e5:01:6a:a6:0e:ae:2f:bd: 68:78:0c:71:69:50:8a:e4:84:84:31:70:c5:a7:7e:d5:76:79: 0e:14:a8:c8:b4:c2:2f:68:01:de:c0:52:1a:6f:ab:ad:6e:6b: 03:83:db:2a:57:83:12:71:af:d4:1d:c1:42:2c:10:93:d1:6f: 47:b9:63:96:b8:cd:af:ef:e5:e2:41:42:a7:15:1d:37:aa:01: 1c:93:de:07:98:4f:fc:dc:fd:c1:a6:22:00:b4:d4:00:d7:54: 6c:ed:25:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFBT2hUVB3e65I/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyMzgzOFoXDTI1MDgwNTAyMzgzOFowLzEtMCsGA1UEAxMk MGQzOGZjZjAtZjE5Yy00ZjI5LWExOWItZTg5NTlkOGFiOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiau15T04XRQQSm8jPPcVj12Pzy7ROWSN8Uv AYaxlHw94IznKuStX41Qm2ZpnyWR76LEWq8bwxJYsg+Id64NRL7vvSrg9GBAEsLv vO8RtLNgecmn+SsDaSQM5C6iem4QmHR37uQLTihzaYKL/cR9yh0Ui5tAMAqk2zhN ortCICFuqN8yicid1gdzk03xUgnLgVbn3Z/v7QkKYoN3rn/v3NJFihnAF34Ny0Dq zBaLIoPvgxmgscN35tMmrOSXLBHaB2g6VXMuDdeTYuBOa1IeomYTp7GewFKipHKs QXwPQ34vp0DicMDue6ppu2kS8ggC55G+hO0cod7Bwgwn4FwPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNior94PwlgY8+kOOvw10gJBjE9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZjZjI5MWMtOGRhYS0z YTk1LWI5NDItZjRkMjI0ZmRiZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACxl3wWyc4e7SKVp+13ruBxUpIG3Bf+49NQoRrzBqkilWmMicFB7a6p r+OfryfxSbceYGi7jTTs2dDO7O/v+dChRkma3nmOPRgIIhachb0yI9sR6l266cAA eWuY+/6iTnHl/5gA1t/tN6jxspt7bRI+bWa9bDOL/3aeKYLVasuY5Ujj+qtcu3Hs KZZ8cJvb+1c55nfeshvb9lnlAWqmDq4vvWh4DHFpUIrkhIQxcMWnftV2eQ4UqMi0 wi9oAd7AUhpvq61uawOD2ypXgxJxr9QdwUIsEJPRb0e5Y5a4za/v5eJBQqcVHTeq ARyT3geYT/zc/cGmIgC01ADXVGztJS8= -----END CERTIFICATE-----Generated at Sat May 10 13:06:09 2025 by rpki-client