$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f7e04ac-c70d-3fc9-990c-ef565083a505.roa File: 5f7e04ac-c70d-3fc9-990c-ef565083a505.roa (raw, json) Hash identifier: ybBOOZByzXu7vwNZj541XhSvFBDVkEqHpZED+4KWBX0= Subject key identifier: A2:B6:23:38:A0:AC:60:8B:7D:15:BC:FD:1A:C8:8F:40:90:5B:DC:30 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD2BDEC68064EE44DFFA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f7e04ac-c70d-3fc9-990c-ef565083a505.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.103.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d2:bd:ec:68:06:4e:e4:4d:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=35cf3e7b-b017-447e-a362-94b7b384a55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:5b:38:09:91:d2:42:b9:ac:9a:01:c0:16: 38:eb:23:22:c7:cb:3e:1a:9c:b0:3e:df:a7:bb:6a: 1a:e4:32:fb:25:c1:07:bc:8f:db:8d:29:8a:4a:dc: 54:b3:0c:d5:05:ad:e3:56:a7:a4:22:48:8a:a1:f9: 13:87:79:25:5b:e4:97:62:c8:1f:a3:0e:30:7d:c5: 20:73:e2:72:61:60:f9:6d:6f:ef:fa:51:92:1d:1a: 87:a8:22:0e:05:56:7e:18:9a:44:63:f3:91:46:b1: 4b:c2:34:c2:05:7d:52:48:f8:2b:0c:0c:cd:81:af: fc:dc:0c:23:9a:c1:dc:9c:a3:45:b5:d4:c0:6a:f5: 1c:bf:a3:8f:2a:05:0c:12:57:8b:36:50:0b:86:38: 3d:ee:70:f3:6a:84:cf:1e:c3:c6:b0:a3:b9:cf:c4: 1e:cc:cb:18:74:6f:bf:b6:32:26:69:84:34:1b:3e: 38:0f:99:d5:48:d4:b7:a6:89:00:2a:70:a4:8b:dc: c3:59:ff:79:aa:42:c2:d8:91:1a:50:dd:c2:6a:25: 04:4d:53:97:63:ec:4d:76:60:91:ba:f2:6c:f1:91: 8d:c4:9b:5d:d8:7e:ba:c2:c7:41:91:86:c1:81:ad: df:65:3b:c8:af:18:4b:f0:90:89:de:c0:c7:48:24: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:23:38:A0:AC:60:8B:7D:15:BC:FD:1A:C8:8F:40:90:5B:DC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f7e04ac-c70d-3fc9-990c-ef565083a505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.103.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:04:60:6d:43:7c:2d:52:48:63:25:a0:a4:19:7e:15:68:4e: 33:92:53:ec:89:fc:26:d1:17:2d:6c:26:93:bd:2e:ab:7f:e7: ee:e7:6b:ca:c9:bb:b6:fe:31:50:7a:45:c3:bd:05:81:55:ca: e5:20:ee:c2:3f:80:24:fe:24:05:f3:3b:83:67:64:ee:93:39: 46:96:a2:c6:9a:c7:fa:e8:25:9a:98:bd:51:9a:00:cf:f2:ee: 91:50:ab:83:8f:d9:2a:d0:17:09:25:b0:8a:fc:5a:67:ad:3a: c1:46:7f:6b:39:80:5e:6f:8e:93:65:f4:2a:8f:50:da:25:3a: 84:0a:b3:1e:5f:9c:dc:4e:ae:98:4e:7b:43:31:0d:b2:d1:8c: 83:1f:06:35:ec:0c:0e:3e:17:32:43:54:d1:09:28:ff:da:54: 90:ea:39:d1:e5:20:92:0e:b6:2d:86:b6:19:2e:e6:3b:1e:53: fe:8d:c9:72:94:a8:33:d2:38:85:1a:09:93:de:98:47:7f:7a: 84:d8:52:95:dd:4c:07:a5:e6:5b:48:f9:12:43:ae:d9:7e:27: 33:1c:a8:9f:16:07:76:1c:39:29:ea:a4:d2:c3:c7:81:4f:d9: 2b:d3:be:4a:77:98:68:ff:4d:bc:23:82:8d:66:01:97:de:29: 9b:2f:f2:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutK97GgGTuRN/6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzVjZjNlN2ItYjAxNy00NDdlLWEzNjItOTRiN2IzODRhNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL5bOAmR0kK5rJoBwBY46yMix8s+GpywPt+n u2oa5DL7JcEHvI/bjSmKStxUswzVBa3jVqekIkiKofkTh3klW+SXYsgfow4wfcUg c+JyYWD5bW/v+lGSHRqHqCIOBVZ+GJpEY/ORRrFLwjTCBX1SSPgrDAzNga/83Awj msHcnKNFtdTAavUcv6OPKgUMEleLNlALhjg97nDzaoTPHsPGsKO5z8QezMsYdG+/ tjImaYQ0Gz44D5nVSNS3pokAKnCki9zDWf95qkLC2JEaUN3CaiUETVOXY+xNdmCR uvJs8ZGNxJtd2H66wsdBkYbBga3fZTvIrxhL8JCJ3sDHSCRpUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK2IzigrGCLfRW8/RrIj0CQW9wwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWY3ZTA0YWMtYzcwZC0z ZmM5LTk5MGMtZWY1NjUwODNhNTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4EYG1DfC1SSGMloKQZfhVoTjOSU+yJ/CbRFy1sJpO9Lqt/5+7na8rJ u7b+MVB6RcO9BYFVyuUg7sI/gCT+JAXzO4NnZO6TOUaWosaax/roJZqYvVGaAM/y 7pFQq4OP2SrQFwklsIr8WmetOsFGf2s5gF5vjpNl9CqPUNolOoQKsx5fnNxOrphO e0MxDbLRjIMfBjXsDA4+FzJDVNEJKP/aVJDqOdHlIJIOti2Gthku5jseU/6NyXKU qDPSOIUaCZPemEd/eoTYUpXdTAel5ltI+RJDrtl+JzMcqJ8WB3YcOSnqpNLDx4FP 2SvTvkp3mGj/Tbwjgo1mAZfeKZsv8jU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:36 2025 by rpki-client