$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa File: cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa (raw, json) Hash identifier: wYWuli4TmyTHPFynpgtTVfM8EavX8a0pbMZb8Vabkak= Subject key identifier: 66:50:1E:6F:97:CD:9A:4C:B9:30:73:29:FE:7D:0B:F9:4C:37:A4:E0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849F2E5552F5BFBC9B4F3E35F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 396982 IP address blocks: 34.12.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:55:2f:5b:fb:c9:b4:f3:e3:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=fe843d1b-7ac4-4f93-80bb-c71f698bafdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:fd:b7:b1:2c:30:a7:60:3c:ae:27:5c:b1: 4c:a5:4f:4f:5a:5e:57:2c:3f:eb:4c:b1:68:9c:21: 0c:3c:64:86:6f:86:89:1d:cc:a7:97:68:2c:9b:3d: e8:d8:13:22:9a:e8:98:8b:49:b3:e3:32:ab:d3:98: a4:bc:93:2d:45:5e:ea:e1:6f:b2:79:98:86:3c:f8: 99:97:30:68:c9:cb:78:d1:6e:f1:d1:7d:d4:a1:37: 18:2a:b8:a8:5d:40:f0:5f:76:f5:49:82:d0:96:e3: e1:27:b3:5c:c5:d7:f0:c0:86:d9:57:2a:ff:78:0d: ab:10:f3:08:0b:a0:ab:ed:6c:b2:9d:72:7e:b5:f7: d0:de:03:4d:6c:ad:dc:aa:da:60:1c:23:be:9a:62: 3d:55:e0:49:b5:0b:0a:d1:73:74:0c:3a:a1:6d:0d: a6:54:60:58:ef:c9:f0:9c:0f:0f:a0:51:ca:74:84: be:88:c1:5b:8f:08:c8:17:17:fd:ac:a1:cd:7d:aa: 35:30:36:ad:54:3b:db:e8:17:b4:63:6e:5e:7e:84: 19:82:47:0c:44:f0:be:d9:d7:27:29:20:35:3c:00: 44:ec:f8:49:9c:50:e1:80:84:d8:4a:d9:64:c5:56: 41:12:96:3a:06:43:6d:ad:29:e4:8a:a8:d0:03:98: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:50:1E:6F:97:CD:9A:4C:B9:30:73:29:FE:7D:0B:F9:4C:37:A4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:54:33:33:5a:e8:dc:60:6e:a0:7b:de:02:d4:6d:8f:b2:2d: a1:7b:76:e8:2c:7a:d8:34:85:b6:cf:aa:85:42:d4:d1:b9:bd: 21:48:48:a6:13:b3:cc:8f:9f:81:3e:10:d2:e7:5a:e8:af:95: 06:f8:7d:c4:7d:e7:df:22:4f:d4:f4:61:82:33:36:20:35:79: 53:3b:41:f0:a1:f1:54:a1:21:ce:6b:2a:6d:04:02:cc:b0:a5: 38:12:0a:8c:5b:1f:9c:89:1c:c9:d6:71:0d:02:8f:76:04:06: 52:c6:10:96:f2:d3:63:31:66:ce:84:2a:07:da:3b:56:dc:99: 07:bc:c7:1a:dc:46:5c:7f:d5:e4:f7:d5:ae:70:eb:a0:f3:b9: 8d:49:c2:e5:a1:e9:bf:2c:af:81:a8:c5:5f:04:54:28:cb:0b: f1:a0:40:61:1c:0d:85:91:0b:66:a4:b4:d2:f7:3f:d3:57:4d: 4d:7a:ff:a0:04:0c:19:94:cf:a5:ae:1f:34:26:71:18:8a:d9: 37:e8:14:2f:a1:af:f9:c3:d0:e3:6a:34:34:d3:43:b1:2b:5a: 81:1f:77:68:c1:13:4c:7d:e2:cb:96:a0:26:20:4d:2a:d8:5e: 38:40:e7:ca:9b:a5:0c:52:e2:9a:a0:02:ca:45:ae:8e:38:f3: c2:23:48:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VUvW/vJtPPjXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmU4NDNkMWItN2FjNC00ZjkzLTgwYmItYzcxZjY5OGJhZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFj9t7EsMKdgPK4nXLFMpU9PWl5XLD/rTLFo nCEMPGSGb4aJHcynl2gsmz3o2BMimuiYi0mz4zKr05ikvJMtRV7q4W+yeZiGPPiZ lzBoyct40W7x0X3UoTcYKrioXUDwX3b1SYLQluPhJ7NcxdfwwIbZVyr/eA2rEPMI C6Cr7WyynXJ+tffQ3gNNbK3cqtpgHCO+mmI9VeBJtQsK0XN0DDqhbQ2mVGBY78nw nA8PoFHKdIS+iMFbjwjIFxf9rKHNfao1MDatVDvb6Be0Y25efoQZgkcMRPC+2dcn KSA1PABE7PhJnFDhgITYStlkxVZBEpY6BkNtrSnkiqjQA5jeHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZQHm+XzZpMuTBzKf59C/lMN6TgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I4ZTYzMmUtOTU2Yy0z MGI1LWEzMGEtYTZmNDhhMmZmYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1UMzNa6NxgbqB73gLUbY+yLaF7dugsetg0hbbPqoVC1NG5vSFISKYT s8yPn4E+ENLnWuivlQb4fcR9598iT9T0YYIzNiA1eVM7QfCh8VShIc5rKm0EAsyw pTgSCoxbH5yJHMnWcQ0Cj3YEBlLGEJby02MxZs6EKgfaO1bcmQe8xxrcRlx/1eT3 1a5w66DzuY1JwuWh6b8sr4GoxV8EVCjLC/GgQGEcDYWRC2aktNL3P9NXTU16/6AE DBmUz6WuHzQmcRiK2TfoFC+hr/nD0ONqNDTTQ7ErWoEfd2jBE0x94suWoCYgTSrY XjhA58qbpQxS4pqgAspFro4488IjSBQ= -----END CERTIFICATE-----Generated at Sun Jun 15 14:03:54 2025 by rpki-client