$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/415516a6-2d54-36a1-8168-2a4ef2f1d343.roa File: 415516a6-2d54-36a1-8168-2a4ef2f1d343.roa (raw, json) Hash identifier: 7XieOZdfYsCvaCsgNHWoNsTY45wo63o0vZYFEtkIj0I= Subject key identifier: 24:9E:17:0A:8C:6A:6C:94:83:79:BB:DC:B6:0C:06:C4:B3:5C:6D:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CD23C7C2135A0E86B340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/415516a6-2d54-36a1-8168-2a4ef2f1d343.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.65.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cd:23:c7:c2:13:5a:0e:86:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4c0683dd-8cf5-4af4-8b22-d69231f10f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:82:a0:23:f7:42:b1:78:d9:2e:02:4a:10: b9:31:ae:a5:26:6c:b1:f1:4b:6d:72:2f:dc:fa:4e: 3a:5f:04:24:3b:d8:3e:0b:a4:ea:51:d7:a8:d7:b0: c3:86:f0:de:02:43:c3:03:d6:1e:39:c4:b6:d2:bb: 7b:a2:1f:1b:3a:b2:96:a3:12:fa:80:89:7d:c0:1a: 85:a0:6a:2c:c6:42:d3:fe:a6:16:cf:b0:d3:55:55: 88:b0:f0:6b:65:36:0f:f0:b3:45:e5:f0:51:00:d9: 48:d7:27:87:b6:9d:4e:aa:1e:21:2b:4e:b6:84:47: 3d:3d:e3:a2:64:21:01:bb:85:22:75:c9:99:f0:79: 94:86:e1:a9:bb:8d:52:1f:b5:4f:5f:f8:ef:fd:e8: 0f:09:55:35:39:64:42:d5:54:37:25:5e:bb:00:f5: 0f:de:08:f5:16:9f:b2:af:42:17:45:9e:f3:4f:04: f7:97:94:75:54:2d:91:e3:10:4e:bc:90:07:14:f0: ad:62:73:ad:1d:9c:76:f9:2c:65:a1:12:fc:b3:6e: 8f:93:88:d0:2b:a6:2e:ac:97:c1:f4:af:3f:4f:e9: 2c:d6:c0:9c:ba:1f:1e:ea:a1:18:4b:72:77:20:6f: 9c:dc:ae:1a:a5:fc:9a:c1:61:b1:12:5f:5f:21:ea: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9E:17:0A:8C:6A:6C:94:83:79:BB:DC:B6:0C:06:C4:B3:5C:6D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/415516a6-2d54-36a1-8168-2a4ef2f1d343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0c:9c:7f:b6:77:4e:7f:ae:b6:a9:19:93:fe:23:a0:b1:31: c3:c5:d6:f0:e8:a4:6e:75:38:e7:38:dc:17:9c:61:99:0b:56: 1a:ad:9e:86:19:09:d7:29:87:20:1f:74:f7:5c:96:eb:a6:2d: 78:56:50:2d:a2:c2:30:ce:cc:7f:68:80:37:ed:37:3f:3d:28: cc:5f:5c:8b:65:be:15:a9:b1:29:40:f5:1d:d0:9a:65:ce:d0: a4:9a:66:7c:62:b8:32:d3:fe:86:7c:05:b0:80:f5:21:52:b9: 67:30:58:65:4b:83:96:43:fb:a8:88:0f:c6:dd:bb:3c:3c:b1: 1c:d4:4f:f7:ce:88:42:9f:d2:b2:a9:75:a3:14:ae:62:47:94: 44:3f:7a:a7:05:bb:94:ab:84:2e:ad:c5:78:a3:72:25:24:e6: d5:ae:bc:47:5d:ce:5b:8c:bd:e0:b7:8a:1b:76:fe:75:61:0a: 35:50:a8:68:49:76:00:93:c4:67:75:07:1e:f7:75:70:57:e9: 21:d3:f7:e8:7e:9d:4e:5c:5a:ba:d1:3f:d7:87:c5:09:8a:84: 42:34:14:26:a7:39:49:37:54:9a:4e:1b:d3:10:9f:4b:73:49: 4e:7b:e3:1b:0a:d2:c4:f2:bb:e1:bf:7e:d6:78:2f:96:9b:49: 3b:57:3d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM0jx8ITWg6Gs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGMwNjgzZGQtOGNmNS00YWY0LThiMjItZDY5MjMxZjEwZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpWCoCP3QrF42S4CShC5Ma6lJmyx8Uttci/c +k46XwQkO9g+C6TqUdeo17DDhvDeAkPDA9YeOcS20rt7oh8bOrKWoxL6gIl9wBqF oGosxkLT/qYWz7DTVVWIsPBrZTYP8LNF5fBRANlI1yeHtp1Oqh4hK062hEc9PeOi ZCEBu4UidcmZ8HmUhuGpu41SH7VPX/jv/egPCVU1OWRC1VQ3JV67APUP3gj1Fp+y r0IXRZ7zTwT3l5R1VC2R4xBOvJAHFPCtYnOtHZx2+SxloRL8s26Pk4jQK6YurJfB 9K8/T+ks1sCcuh8e6qEYS3J3IG+c3K4apfyawWGxEl9fIeoHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSeFwqMamyUg3m73LYMBsSzXG2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDE1NTE2YTYtMmQ1NC0z NmExLTgxNjgtMmE0ZWYyZjFkMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsMnH+2d05/rrapGZP+I6CxMcPF1vDopG51OOc43BecYZkLVhqtnoYZ CdcphyAfdPdcluumLXhWUC2iwjDOzH9ogDftNz89KMxfXItlvhWpsSlA9R3QmmXO 0KSaZnxiuDLT/oZ8BbCA9SFSuWcwWGVLg5ZD+6iID8bduzw8sRzUT/fOiEKf0rKp daMUrmJHlEQ/eqcFu5SrhC6txXijciUk5tWuvEddzluMveC3iht2/nVhCjVQqGhJ dgCTxGd1Bx73dXBX6SHT9+h+nU5cWrrRP9eHxQmKhEI0FCanOUk3VJpOG9MQn0tz SU574xsK0sTyu+G/ftZ4L5abSTtXPZU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:45 2025 by rpki-client