$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/422e5d7d-ed9a-3231-93e5-9591bdd415b5.roa File: 422e5d7d-ed9a-3231-93e5-9591bdd415b5.roa (raw, json) Hash identifier: cSdupzGnl7OBl73WVabj/4rn0BfIPFxpKtpfNBiFEr4= Subject key identifier: 49:5D:CE:5C:A2:3E:00:E8:EF:CF:C1:03:29:56:55:B4:D2:9E:78:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852928429888F0516C6040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/422e5d7d-ed9a-3231-93e5-9591bdd415b5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.65.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:29:28:42:98:88:f0:51:6c:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0a1ef624-d9e4-48fd-a44b-06e14f9cbbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:cf:d1:ea:a2:0a:fb:b7:98:44:6f:03:bf: b8:67:09:4d:c0:0a:b7:9c:61:a7:2f:53:ef:09:54: 91:bf:10:5a:ae:c4:89:c4:cf:4d:b9:ab:46:21:0b: dd:85:cb:55:04:d2:3f:a1:cf:83:19:73:53:25:15: db:35:51:ba:e3:c7:64:cb:8b:1f:64:a8:14:19:05: 9c:d9:12:8c:d5:3f:79:0d:37:5e:4e:fe:8a:f7:b1: e3:e4:68:1e:60:ae:13:46:10:df:e0:f2:4e:c2:af: 0a:f3:88:73:ee:46:ba:ee:24:43:1c:23:4d:eb:8a: 48:8f:a7:e3:da:8c:d0:c1:40:b4:fc:af:06:2d:15: 7a:5b:1b:2d:f0:a9:6f:18:31:50:88:ce:98:96:53: 7c:cb:28:57:6d:f0:d2:5b:3c:f1:26:9f:7e:17:b7: ed:c8:e8:d0:90:67:32:b5:c2:f5:31:ff:36:04:c1: 36:4c:80:e3:ca:35:f8:f3:55:31:80:20:cb:77:89: d0:b1:81:4e:43:22:38:38:f1:18:d7:00:e4:e6:9b: 9a:4f:66:b3:cb:1c:fe:26:49:4a:f1:08:5d:d8:cd: 2b:54:ab:65:b4:75:02:e9:a0:43:0e:04:b2:1a:95: 8f:5b:df:ff:8d:7c:50:d4:71:b0:ba:56:2c:93:4a: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:CE:5C:A2:3E:00:E8:EF:CF:C1:03:29:56:55:B4:D2:9E:78:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/422e5d7d-ed9a-3231-93e5-9591bdd415b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:fe:7b:70:f8:d2:fc:04:9d:80:64:67:8a:42:5b:57:29:89: 27:59:c3:3e:46:39:a6:79:4b:f0:c9:6c:78:14:b6:9f:b0:26: a4:48:6b:2a:f1:41:ca:d2:3f:21:40:f0:b0:61:68:81:05:37: ae:62:c9:6b:9d:bb:ea:4e:a1:d6:20:e0:e9:4c:1f:0d:ee:4b: 80:aa:00:f9:d9:5f:64:42:b0:8a:06:89:08:ca:9b:7c:5e:6c: f9:c0:95:2a:98:45:1f:48:86:b9:2a:c6:6a:d5:82:7f:f2:18: 0c:53:2a:07:a6:73:15:bb:91:ec:68:87:68:64:1e:88:99:fa: c7:fe:cf:62:48:b6:40:61:94:61:5f:44:1d:4c:ea:b3:bb:82: f7:dc:69:f4:05:18:4d:40:cf:9e:4e:5b:69:59:db:14:95:74: cd:92:0b:b1:90:f0:e9:49:c6:6e:b9:43:4c:a3:78:77:53:6a: 96:88:bb:14:1c:4d:2a:b8:32:5a:d6:50:83:21:ea:eb:c2:2f: 62:2a:8b:61:33:a3:ba:1f:c6:c8:f4:b0:f2:e4:78:a2:f2:51: f8:08:f6:92:39:4f:d8:95:01:20:34:31:77:db:02:b8:16:b9: 35:13:1e:3a:eb:a4:7e:cc:34:a8:32:f5:14:33:91:71:71:64: f8:c7:c1:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSkoQpiI8FFsYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGExZWY2MjQtZDllNC00OGZkLWE0NGItMDZlMTRmOWNiYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe/P0eqiCvu3mERvA7+4ZwlNwAq3nGGnL1Pv CVSRvxBarsSJxM9NuatGIQvdhctVBNI/oc+DGXNTJRXbNVG648dky4sfZKgUGQWc 2RKM1T95DTdeTv6K97Hj5GgeYK4TRhDf4PJOwq8K84hz7ka67iRDHCNN64pIj6fj 2ozQwUC0/K8GLRV6Wxst8KlvGDFQiM6YllN8yyhXbfDSWzzxJp9+F7ftyOjQkGcy tcL1Mf82BME2TIDjyjX481UxgCDLd4nQsYFOQyI4OPEY1wDk5puaT2azyxz+JklK 8Qhd2M0rVKtltHUC6aBDDgSyGpWPW9//jXxQ1HGwulYsk0psJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEldzlyiPgDo78/BAylWVbTSnnhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIyZTVkN2QtZWQ5YS0z MjMxLTkzZTUtOTU5MWJkZDQxNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv+e3D40vwEnYBkZ4pCW1cpiSdZwz5GOaZ5S/DJbHgUtp+wJqRIayrx QcrSPyFA8LBhaIEFN65iyWudu+pOodYg4OlMHw3uS4CqAPnZX2RCsIoGiQjKm3xe bPnAlSqYRR9IhrkqxmrVgn/yGAxTKgemcxW7kexoh2hkHoiZ+sf+z2JItkBhlGFf RB1M6rO7gvfcafQFGE1Az55OW2lZ2xSVdM2SC7GQ8OlJxm65Q0yjeHdTapaIuxQc TSq4MlrWUIMh6uvCL2Iqi2Ezo7ofxsj0sPLkeKLyUfgI9pI5T9iVASA0MXfbArgW uTUTHjrrpH7MNKgy9RQzkXFxZPjHwbE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:11 2025 by rpki-client