$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa File: 1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa (raw, json) Hash identifier: kBKZA4/ayA7ZOVbA6HfkMTSPjM54lMisnbhR/81mA5s= Subject key identifier: 8E:65:41:F4:EB:AB:BC:69:99:42:5D:DF:3E:0A:4C:AC:31:25:0D:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849DF5A7BBFD9684FE6756A0300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 19527 IP address blocks: 34.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:7b:bf:d9:68:4f:e6:75:6a:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=7ff4c7aa-fee5-40d5-ae03-fb16ed9bb8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:94:c9:22:05:47:4b:af:22:84:c9:c5:d9: 74:6d:cf:b9:56:34:7a:83:5b:80:81:a4:7f:08:2a: b6:a3:3b:4c:47:23:cf:04:43:49:69:86:a4:ae:63: 47:21:a6:0a:b3:e4:1b:c4:b5:a4:ab:ff:a1:08:5f: 97:34:d1:a3:b8:c8:59:5c:a2:9e:c4:17:a2:b9:5e: 13:f6:44:0e:4c:24:d2:18:6f:42:73:b0:21:c6:70: a2:a2:16:d9:b6:04:9e:4d:e2:8e:0e:86:f3:6a:72: 21:8e:0e:89:37:6d:e7:57:b1:bd:eb:72:13:e0:71: 10:4a:8a:f6:7a:78:97:fe:29:3c:c0:a0:54:b3:95: f4:15:85:de:56:f4:f3:40:53:6a:43:ac:28:a7:48: 0c:37:f0:ed:3d:37:3a:af:8f:63:9c:2d:71:75:07: d4:fc:0b:9d:f4:bf:97:9c:ea:77:31:4c:20:6e:7c: 49:3d:da:d8:dd:6e:4c:33:f3:31:06:36:6c:88:0a: ca:90:3c:e7:5c:68:ea:6c:c6:e1:60:aa:22:f8:28: 13:4a:1f:c8:16:f1:c0:61:60:4b:30:c3:08:47:5a: ee:df:c9:c4:29:03:c0:91:8c:fb:20:82:a6:cb:79: e1:4b:73:e8:67:c8:bd:91:e4:9c:b5:28:47:a3:61: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:41:F4:EB:AB:BC:69:99:42:5D:DF:3E:0A:4C:AC:31:25:0D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:50:d7:7f:de:00:4b:1e:f4:a8:42:14:76:46:2f:ac:76:6b: b0:82:bc:27:0e:46:c2:3c:c8:87:da:0e:52:c5:2d:bf:37:1a: 56:a1:6e:eb:96:72:c4:20:1f:2e:62:77:21:f5:90:44:8a:25: ed:33:98:40:3c:87:8f:89:14:79:14:71:ec:5b:64:f6:bb:eb: 8d:0a:ff:39:db:3d:27:53:17:40:30:31:4b:7e:cd:d2:f0:90: b7:67:6e:09:80:d8:41:98:30:9f:e2:53:f8:6d:1d:4b:e0:3b: 72:00:b9:86:4b:8f:41:62:3e:1e:3d:02:34:e0:46:f0:13:64: 89:d8:f6:4d:77:9a:02:c4:64:79:8f:46:72:53:5a:f5:0d:76: 17:d4:a2:37:5d:e8:de:c8:1f:47:4d:fa:48:71:d0:be:fd:25: b7:89:45:2b:88:0d:47:3f:0c:01:4a:2f:dd:09:c2:67:e4:5d: 77:59:a0:89:ed:01:aa:c9:63:df:d8:65:6d:75:47:47:5a:1d: b8:da:81:4d:85:33:13:76:15:60:81:09:6a:55:45:58:72:68: d7:7c:69:14:29:25:e6:ba:db:a6:6d:aa:fa:2c:73:44:a8:9a: f5:07:0b:a7:91:97:e9:fe:3e:86:1b:b4:76:f2:bf:44:e1:ff: 1b:b3:b2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnu/2WhP5nVqAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk N2ZmNGM3YWEtZmVlNS00MGQ1LWFlMDMtZmIxNmVkOWJiOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZaUySIFR0uvIoTJxdl0bc+5VjR6g1uAgaR/ CCq2oztMRyPPBENJaYakrmNHIaYKs+QbxLWkq/+hCF+XNNGjuMhZXKKexBeiuV4T 9kQOTCTSGG9Cc7AhxnCiohbZtgSeTeKODobzanIhjg6JN23nV7G963IT4HEQSor2 eniX/ik8wKBUs5X0FYXeVvTzQFNqQ6wop0gMN/DtPTc6r49jnC1xdQfU/Aud9L+X nOp3MUwgbnxJPdrY3W5MM/MxBjZsiArKkDznXGjqbMbhYKoi+CgTSh/IFvHAYWBL MMMIR1ru38nEKQPAkYz7IIKmy3nhS3PoZ8i9keSctShHo2Eb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5lQfTrq7xpmUJd3z4KTKwxJQ0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWRlYWY0YTYtODhhMy0z ZWU1LWIzYjctYmUzZjFiNjRjZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxQ13/eAEse9KhCFHZGL6x2a7CCvCcORsI8yIfaDlLFLb83GlahbuuW csQgHy5idyH1kESKJe0zmEA8h4+JFHkUcexbZPa7640K/znbPSdTF0AwMUt+zdLw kLdnbgmA2EGYMJ/iU/htHUvgO3IAuYZLj0FiPh49AjTgRvATZInY9k13mgLEZHmP RnJTWvUNdhfUojdd6N7IH0dN+khx0L79JbeJRSuIDUc/DAFKL90JwmfkXXdZoInt AarJY9/YZW11R0daHbjagU2FMxN2FWCBCWpVRVhyaNd8aRQpJea626Ztqvosc0So mvUHC6eRl+n+PoYbtHbyv0Th/xuzsig= -----END CERTIFICATE-----Generated at Sun Jun 15 13:53:09 2025 by rpki-client