$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa File: 8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa (raw, json) Hash identifier: 2ez6PzBxBaRYJ6Mouiyzc4l+cy7C0KSmLsGa96XUdkQ= Subject key identifier: 38:9C:C3:BF:1D:20:D8:9F:B9:C3:91:D4:3C:2F:94:84:42:BB:96:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FAE35D479E58EC704880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.95.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fa:e3:5d:47:9e:58:ec:70:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0fdd5ab7-35e7-41d4-bd14-5210754b45a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:db:b0:0f:8b:71:42:e2:55:f5:5a:d8:27: 8d:b3:d3:79:eb:37:51:31:57:c0:06:ff:ab:3a:2a: 87:a3:ea:35:90:b1:fd:12:ab:dc:3a:fa:78:19:45: 67:80:8b:1e:fe:2e:34:53:dc:8b:5e:2e:c2:67:97: 76:21:32:c8:95:22:af:f9:37:4f:29:a0:1f:43:51: 14:48:77:cc:14:50:62:ac:65:23:40:55:8d:5e:4f: 26:56:8b:38:08:26:66:0a:4a:98:4c:42:cc:e1:19: 3f:2e:d8:cc:58:fb:d7:5e:3d:bc:3c:e1:a9:05:b1: 59:21:f8:6e:d9:e4:68:50:a9:7d:4d:a9:db:fb:1c: a6:63:03:08:a9:88:52:19:dd:2e:f8:1b:b2:65:c3: 80:29:e6:c2:29:4a:04:fa:a3:a2:7c:3a:90:5c:b5: 0a:8b:dd:4e:c5:72:62:8f:fd:52:1e:ac:9f:5a:c8: 5d:f8:73:e5:5b:9a:f2:d1:87:18:ee:5b:ed:5c:c8: ce:84:9b:ea:00:51:67:3f:f3:ab:e7:f0:9a:1b:e9: 71:d0:e4:1d:5d:89:8d:b4:c8:e0:4b:9e:b3:58:f6: d8:1c:f5:69:15:4e:30:27:92:61:76:2f:d0:8b:2e: b8:32:3b:df:88:ee:c6:e5:54:75:b0:e3:5c:15:81: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9C:C3:BF:1D:20:D8:9F:B9:C3:91:D4:3C:2F:94:84:42:BB:96:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7c:be:54:19:be:74:82:ae:f0:ac:90:30:c3:31:3e:df:13: d5:88:54:4d:c6:26:39:fe:9b:54:79:29:41:4d:64:92:7d:d0: d1:00:b3:3f:be:06:e6:de:e7:7d:03:88:f6:bc:bb:b3:74:0e: 7b:62:01:0a:ee:6f:cd:f6:d0:60:b8:dc:ce:4a:8e:3d:de:33: ce:f1:52:b1:58:cd:aa:10:bf:55:3f:56:a1:9b:a6:f5:db:1e: 7c:80:05:07:30:c4:b4:74:71:f3:cd:e8:33:a7:6f:26:86:c2: d5:75:b1:5f:14:a7:88:e3:b9:e2:af:bb:90:fa:cc:68:f8:8c: 6b:6c:c4:ba:d3:ad:d5:69:37:60:5a:c4:c1:99:4d:0d:07:6d: 27:00:92:2b:ae:cf:27:7a:95:52:88:cf:c1:30:61:89:90:f5: cd:30:43:19:cf:84:c7:40:09:d0:5c:f8:ce:3e:95:d3:2c:54: 03:53:ac:0a:2d:6c:f4:42:c8:6c:ce:28:c5:70:4b:4f:ab:17: e8:e9:77:0a:d9:db:d0:e1:67:1b:58:53:84:b3:e7:b0:73:0b: 68:5e:97:7e:1e:58:aa:97:d8:89:14:95:c8:54:b9:8f:c2:f8: d0:4c:35:4b:63:05:c2:96:05:80:91:42:4d:89:e4:d9:ae:3d: c1:81:2d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPrjXUeeWOxwSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGZkZDVhYjctMzVlNy00MWQ0LWJkMTQtNTIxMDc1NGI0NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcDbsA+LcULiVfVa2CeNs9N56zdRMVfABv+r OiqHo+o1kLH9EqvcOvp4GUVngIse/i40U9yLXi7CZ5d2ITLIlSKv+TdPKaAfQ1EU SHfMFFBirGUjQFWNXk8mVos4CCZmCkqYTELM4Rk/LtjMWPvXXj28POGpBbFZIfhu 2eRoUKl9Tanb+xymYwMIqYhSGd0u+BuyZcOAKebCKUoE+qOifDqQXLUKi91OxXJi j/1SHqyfWshd+HPlW5ry0YcY7lvtXMjOhJvqAFFnP/Or5/CaG+lx0OQdXYmNtMjg S56zWPbYHPVpFU4wJ5Jhdi/Qiy64MjvfiO7G5VR1sONcFYFiewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDicw78dINifucOR1DwvlIRCu5YCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGUyYWFlZTUtNGE3MS0z YzMwLWJmMzQtOGJkNGJhNTVlZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH58vlQZvnSCrvCskDDDMT7fE9WIVE3GJjn+m1R5KUFNZJJ90NEAsz++ Bube530DiPa8u7N0DntiAQrub8320GC43M5Kjj3eM87xUrFYzaoQv1U/VqGbpvXb HnyABQcwxLR0cfPN6DOnbyaGwtV1sV8Up4jjueKvu5D6zGj4jGtsxLrTrdVpN2Ba xMGZTQ0HbScAkiuuzyd6lVKIz8EwYYmQ9c0wQxnPhMdACdBc+M4+ldMsVANTrAot bPRCyGzOKMVwS0+rF+jpdwrZ29DhZxtYU4Sz57BzC2hel34eWKqX2IkUlchUuY/C +NBMNUtjBcKWBYCRQk2J5NmuPcGBLfw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:47 2025 by rpki-client