$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa File: 1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa (raw, json) Hash identifier: jpAKnW2gGE0/yIekTtJWUKKzDyrxt0IEy7JZrgzbBHM= Subject key identifier: A3:A5:49:8F:84:3E:66:49:F0:92:24:6D:1C:9C:58:2A:0D:C2:91:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EE823C201931249D9380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.145.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ee:82:3c:20:19:31:24:9d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1004497a-3a03-4db7-893b-1e70e89aac57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:6f:6f:4e:d6:34:ee:70:b2:35:1d:05:54: f9:31:2d:9f:ef:3d:13:9c:7d:cf:df:ab:05:98:d2: 5e:b8:ff:15:96:08:fc:41:36:b1:87:35:ed:d1:c2: 2c:7a:ec:03:dc:9b:20:16:b8:f4:e6:2f:34:6b:01: 1f:3d:9b:ff:1d:1d:0d:79:50:9b:0d:88:39:b3:46: 7b:56:01:99:f4:99:af:a2:76:77:23:49:30:b0:22: 1d:9c:de:9d:ee:ac:bc:e4:0b:27:db:94:83:53:50: b4:ce:56:44:07:74:ca:bf:87:d6:9a:99:ad:c3:ee: 69:88:85:45:9d:0a:5f:9b:a2:fb:34:39:ba:f6:23: 2d:5f:ea:a1:c5:4e:e7:94:3a:2c:b5:f2:88:1f:0b: 16:14:ab:ff:cc:b5:91:c6:1a:a7:26:8a:0d:c5:ef: 45:7c:9d:f0:8e:ad:41:e1:aa:9a:c4:8e:c1:e0:c4: ff:1d:5c:60:c9:1d:4e:86:f1:c4:86:58:d7:3d:f3: 1e:ba:65:fa:e7:eb:9d:2e:48:bd:a7:a4:b0:81:6b: 67:de:78:bb:db:74:d0:2b:f9:8b:b0:01:99:f1:e6: aa:00:39:7c:85:9c:b9:f2:8d:1c:ab:b8:3f:13:0e: 6c:12:7f:14:47:1f:54:2e:fd:cb:ec:ee:4a:27:3c: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A5:49:8F:84:3E:66:49:F0:92:24:6D:1C:9C:58:2A:0D:C2:91:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1af5a8aa-b0bb-33de-a82f-cb7cdf9c2991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8e:ff:0e:60:4f:3c:3e:8c:0a:57:9d:27:4c:3f:7f:8d:79: 73:e4:c6:4f:28:80:48:c6:e0:df:95:76:ad:d4:af:b2:5f:b5: 8d:b1:fc:e2:6d:7a:14:24:e3:d1:4d:08:c8:88:70:3b:29:81: 01:e1:0e:3f:da:60:ff:0d:35:f5:14:0f:e6:cd:98:a0:ca:b5: 84:6a:d8:62:c9:86:8d:86:c4:74:14:1a:3d:ed:ce:ba:88:7a: 20:64:81:8a:3d:ea:f6:b6:fe:89:e6:5f:42:90:e0:56:d9:c5: 51:59:87:f5:be:7a:09:2d:47:a3:1a:35:cf:02:eb:e6:32:78: 27:5a:2b:9d:ef:71:1a:c1:f7:28:ea:cd:24:72:53:2f:b2:18: 28:63:21:0a:ea:fe:d2:c9:0e:5f:ef:35:63:5c:1d:77:cb:3c: 58:8d:78:6f:5d:ed:51:fc:55:2b:d9:e9:f7:9e:46:b9:08:58: 0f:6d:02:fd:97:da:ca:7e:75:fc:88:cd:de:87:72:50:41:44: 3a:b7:93:39:f7:ff:ee:0e:70:de:b7:22:ff:72:37:27:eb:36: 02:35:5a:23:fa:dc:fe:29:98:ab:e8:da:31:89:e8:98:e1:c9: 1f:e2:59:11:86:df:d6:12:28:fa:59:22:ff:ab:be:7c:13:8d: 60:0e:eb:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO6CPCAZMSSdk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTAwNDQ5N2EtM2EwMy00ZGI3LTg5M2ItMWU3MGU4OWFhYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZvb07WNO5wsjUdBVT5MS2f7z0TnH3P36sF mNJeuP8Vlgj8QTaxhzXt0cIseuwD3JsgFrj05i80awEfPZv/HR0NeVCbDYg5s0Z7 VgGZ9JmvonZ3I0kwsCIdnN6d7qy85Asn25SDU1C0zlZEB3TKv4fWmpmtw+5piIVF nQpfm6L7NDm69iMtX+qhxU7nlDostfKIHwsWFKv/zLWRxhqnJooNxe9FfJ3wjq1B 4aqaxI7B4MT/HVxgyR1OhvHEhljXPfMeumX65+udLki9p6SwgWtn3ni723TQK/mL sAGZ8eaqADl8hZy58o0cq7g/Ew5sEn8URx9ULv3L7O5KJzz+ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOlSY+EPmZJ8JIkbRycWCoNwpFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWFmNWE4YWEtYjBiYi0z M2RlLWE4MmYtY2I3Y2RmOWMyOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWO/w5gTzw+jApXnSdMP3+NeXPkxk8ogEjG4N+Vdq3Ur7JftY2x/OJt ehQk49FNCMiIcDspgQHhDj/aYP8NNfUUD+bNmKDKtYRq2GLJho2GxHQUGj3tzrqI eiBkgYo96va2/onmX0KQ4FbZxVFZh/W+egktR6MaNc8C6+YyeCdaK53vcRrB9yjq zSRyUy+yGChjIQrq/tLJDl/vNWNcHXfLPFiNeG9d7VH8VSvZ6feeRrkIWA9tAv2X 2sp+dfyIzd6HclBBRDq3kzn3/+4OcN63Iv9yNyfrNgI1WiP63P4pmKvo2jGJ6Jjh yR/iWRGG39YSKPpZIv+rvnwTjWAO6xU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:41 2025 by rpki-client