$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03ddf671-ca43-3306-bb42-8f21807c2a50.roa File: 03ddf671-ca43-3306-bb42-8f21807c2a50.roa (raw, json) Hash identifier: JJziHDGmypz32RlaEX7blQu1Bqefu8uZPTx6Rg+eIpA= Subject key identifier: 85:85:13:E7:BF:25:74:57:FD:5B:09:F4:BB:A1:47:97:E8:65:CB:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853CEC3F1DF94584AA5900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03ddf671-ca43-3306-bb42-8f21807c2a50.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.144.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3c:ec:3f:1d:f9:45:84:aa:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0055c287-c9fb-43f5-ab56-8f3513238ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:67:e9:10:02:49:34:f6:04:30:a3:c3:ea: 5b:68:73:34:a3:11:05:d0:38:1d:79:b2:fd:57:89: c5:60:ec:3a:f2:15:53:ef:a1:fe:0a:4e:41:58:0e: 11:cd:53:c1:c7:e4:7f:e8:f5:d6:59:ff:cd:ae:7e: e7:5a:21:54:01:ec:c4:79:a4:ae:5d:2b:08:cf:56: 73:3a:2b:df:cf:b8:8c:98:5f:f3:ef:ea:91:fd:38: 8a:84:4b:25:9d:75:70:24:2c:0b:90:b8:48:de:75: d8:38:74:8d:06:fa:7a:07:0e:6b:6a:87:e9:c3:97: a7:e0:c2:fd:50:bb:9b:eb:8a:fe:74:7c:e6:e6:cf: ad:20:04:61:8c:28:d0:e1:99:d4:d9:4c:c5:29:c5: 5f:cc:0d:b5:6b:64:70:3b:0f:6b:0b:c7:b5:bc:22: 6d:7e:15:8d:40:35:9d:94:60:8d:d9:f4:1d:9c:bc: d7:9b:f4:f8:a4:f2:cb:30:fe:5e:50:b9:59:76:e1: 04:5e:db:0b:6c:58:ae:7f:5d:71:f8:11:c6:e3:e5: f7:ee:2a:74:08:99:df:ee:2e:55:d0:25:a8:ca:93: f0:e9:3b:17:83:8a:31:ca:91:1e:10:33:82:4c:bb: 98:de:31:e6:24:4d:7f:9f:17:a0:f0:62:01:f9:ad: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:85:13:E7:BF:25:74:57:FD:5B:09:F4:BB:A1:47:97:E8:65:CB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/03ddf671-ca43-3306-bb42-8f21807c2a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:86:02:34:d4:71:a2:3c:67:0b:f2:52:52:9b:8e:cf:92:f3: 93:9a:44:df:31:0d:f3:35:e1:f9:3d:51:fa:dd:28:64:95:61: c4:f3:14:b1:f7:ef:46:8d:5c:94:1a:a9:a7:7d:90:0e:24:ff: a2:23:9f:bd:24:a0:96:2f:c6:b2:49:e8:02:14:57:14:1d:73: 35:02:75:d1:a6:9c:e2:15:06:07:b1:ef:45:bc:2b:9f:03:50: 62:33:aa:ee:65:33:18:fc:48:a9:79:22:bd:9f:35:bc:63:d5: 42:fa:cc:e0:4d:72:70:0f:5d:4f:fd:83:65:71:b1:c0:d1:63: 5c:93:53:8d:af:79:b7:9e:ca:a3:6a:ae:a0:94:12:39:5f:46: 73:fb:ab:5f:d6:f9:d6:f6:ab:11:14:68:99:82:87:5b:0f:6a: 95:01:d9:8a:71:36:de:f3:00:ed:3d:fb:0e:03:01:bd:af:86: 01:52:97:f0:43:5c:d0:14:3d:32:a5:1a:06:7f:a7:80:fc:c5: 08:33:13:40:ec:ee:c9:2a:8a:95:95:89:33:dc:9e:f4:ca:54: 2c:c5:3e:f5:55:b1:ff:29:17:bc:8a:2d:bb:aa:29:d6:f8:7c: 3e:74:97:bc:63:53:a1:c2:c0:96:dc:09:73:0e:65:a2:dc:0d: c2:96:54:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTzsPx35RYSqWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDA1NWMyODctYzlmYi00M2Y1LWFiNTYtOGYzNTEzMjM4YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsln6RACSTT2BDCjw+pbaHM0oxEF0DgdebL9 V4nFYOw68hVT76H+Ck5BWA4RzVPBx+R/6PXWWf/Nrn7nWiFUAezEeaSuXSsIz1Zz Oivfz7iMmF/z7+qR/TiKhEslnXVwJCwLkLhI3nXYOHSNBvp6Bw5raofpw5en4ML9 ULub64r+dHzm5s+tIARhjCjQ4ZnU2UzFKcVfzA21a2RwOw9rC8e1vCJtfhWNQDWd lGCN2fQdnLzXm/T4pPLLMP5eULlZduEEXtsLbFiuf11x+BHG4+X37ip0CJnf7i5V 0CWoypPw6TsXg4oxypEeEDOCTLuY3jHmJE1/nxeg8GIB+a3KiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWFE+e/JXRX/VsJ9LuhR5foZcszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDNkZGY2NzEtY2E0My0z MzA2LWJiNDItOGYyMTgwN2MyYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWGAjTUcaI8ZwvyUlKbjs+S85OaRN8xDfM14fk9UfrdKGSVYcTzFLH3 70aNXJQaqad9kA4k/6Ijn70koJYvxrJJ6AIUVxQdczUCddGmnOIVBgex70W8K58D UGIzqu5lMxj8SKl5Ir2fNbxj1UL6zOBNcnAPXU/9g2VxscDRY1yTU42vebeeyqNq rqCUEjlfRnP7q1/W+db2qxEUaJmCh1sPapUB2YpxNt7zAO09+w4DAb2vhgFSl/BD XNAUPTKlGgZ/p4D8xQgzE0Ds7skqipWViTPcnvTKVCzFPvVVsf8pF7yKLbuqKdb4 fD50l7xjU6HCwJbcCXMOZaLcDcKWVLA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:36 2025 by rpki-client