$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3cea7f0-d3b0-3c00-8c7c-19601038ca0b.roa File: d3cea7f0-d3b0-3c00-8c7c-19601038ca0b.roa (raw, json) Hash identifier: QMGMkRTkZkdIB5ye6RxKERVLQu8Cb7yZFuUM07mAMgs= Subject key identifier: CE:A2:03:6F:66:C6:AB:6A:A8:83:73:9E:A6:AB:08:41:7F:4F:2A:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78539440707D8F18ECEE100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3cea7f0-d3b0-3c00-8c7c-19601038ca0b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.22.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:39:44:07:07:d8:f1:8e:ce:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fb33046d-d884-48cb-b841-673be6a12e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:43:42:a4:32:9b:0e:9a:8d:c7:1b:95:c4: 1d:3a:c4:b1:3f:d8:5d:ac:a7:6e:24:c6:28:67:b3: 92:6a:42:97:fd:bc:2a:c3:c1:4c:12:1b:e7:64:80: 3c:ea:ac:2a:06:4a:a6:1a:9f:94:2f:95:cd:63:e6: 62:de:eb:2b:d3:9a:81:43:b2:de:1f:77:6f:3d:26: 37:ce:86:26:c3:5a:ff:9e:0d:c8:3c:c6:55:30:d5: 47:25:13:c4:68:75:0f:ca:ed:0f:8b:5c:23:08:d0: 5a:3e:07:4d:97:8c:d8:c2:79:cd:aa:17:4c:5d:ea: 1a:d8:8f:16:ed:55:ca:14:ab:7c:25:ac:c6:fe:c6: 0f:5e:27:d9:cb:19:4e:77:95:f7:64:6d:9b:42:dc: 03:6f:ca:7a:64:11:bf:8c:9b:fb:d1:65:6d:3b:c8: 77:54:c6:f7:f3:aa:39:5d:47:24:31:37:63:6b:07: 7d:d1:a4:e5:d5:94:7d:e0:bd:32:9a:45:ee:ee:80: dd:40:b8:38:32:44:ca:9c:fe:ec:0b:7f:5b:c3:d9: cb:50:0e:95:fc:0d:23:1b:77:4f:bf:b0:d7:6f:4f: 8f:d0:33:ad:a0:d2:cc:9c:e2:72:36:da:bc:6b:83: 77:23:0a:10:0c:89:a6:7a:54:0c:8a:32:03:41:23: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A2:03:6F:66:C6:AB:6A:A8:83:73:9E:A6:AB:08:41:7F:4F:2A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3cea7f0-d3b0-3c00-8c7c-19601038ca0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.22.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a9:db:26:85:8f:1a:f8:ff:12:a8:4e:2f:64:63:3f:55:bc: e9:b6:54:02:2d:b3:17:40:22:fb:15:52:d1:ef:73:fb:c9:3c: 7d:44:56:3d:96:9e:08:ca:bd:62:e6:3a:c0:5f:b8:fd:17:7b: 3b:67:3a:6b:ff:38:d5:3c:bd:d3:3c:a5:fa:e9:6b:5f:58:8e: f2:1f:8d:7f:21:fa:bb:a6:04:c0:d5:05:28:0d:d0:a6:e7:5d: e2:bb:c4:8d:34:b4:79:d5:80:63:8c:03:13:b3:c9:35:88:4b: 01:35:45:5c:43:c7:25:34:b7:53:31:2a:77:7e:9c:b2:9d:4e: 75:ca:99:bf:36:ac:17:6c:28:c1:ed:24:36:d8:f5:47:7c:d9: b3:1e:d8:59:c2:ed:db:bc:ee:1f:49:25:16:1f:2d:24:58:72: 17:a9:9e:55:4f:59:00:28:2e:b8:5c:8a:ff:d2:8b:9a:91:95: 76:e2:97:fd:24:ba:4d:13:06:31:76:90:16:f4:ac:dd:76:65: 1d:61:15:1e:77:ea:30:d1:b2:51:67:dc:0f:ed:3f:ff:9c:24: 63:5d:84:b6:f8:71:c1:03:7d:43:fa:6e:c6:95:d7:ef:d3:ce: 8d:25:bb:71:f2:93:5a:8d:9d:3d:da:73:ed:4a:08:38:c0:a8: 35:c6:ba:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTlEBwfY8Y7O4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmIzMzA0NmQtZDg4NC00OGNiLWI4NDEtNjczYmU2YTEyZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIJDQqQymw6ajccblcQdOsSxP9hdrKduJMYo Z7OSakKX/bwqw8FMEhvnZIA86qwqBkqmGp+UL5XNY+Zi3usr05qBQ7LeH3dvPSY3 zoYmw1r/ng3IPMZVMNVHJRPEaHUPyu0Pi1wjCNBaPgdNl4zYwnnNqhdMXeoa2I8W 7VXKFKt8JazG/sYPXifZyxlOd5X3ZG2bQtwDb8p6ZBG/jJv70WVtO8h3VMb386o5 XUckMTdjawd90aTl1ZR94L0ymkXu7oDdQLg4MkTKnP7sC39bw9nLUA6V/A0jG3dP v7DXb0+P0DOtoNLMnOJyNtq8a4N3IwoQDImmelQMijIDQSNCcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6iA29mxqtqqINznqarCEF/TyqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNjZWE3ZjAtZDNiMC0z YzAwLThjN2MtMTk2MDEwMzhjYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIhZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSp2yaFjxr4/xKoTi9kYz9VvOm2VAItsxdAIvsVUtHvc/vJPH1EVj2W ngjKvWLmOsBfuP0XeztnOmv/ONU8vdM8pfrpa19YjvIfjX8h+rumBMDVBSgN0Kbn XeK7xI00tHnVgGOMAxOzyTWISwE1RVxDxyU0t1MxKnd+nLKdTnXKmb82rBdsKMHt JDbY9Ud82bMe2FnC7du87h9JJRYfLSRYchepnlVPWQAoLrhciv/Si5qRlXbil/0k uk0TBjF2kBb0rN12ZR1hFR536jDRslFn3A/tP/+cJGNdhLb4ccEDfUP6bsaV1+/T zo0lu3Hyk1qNnT3ac+1KCDjAqDXGujM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:14 2025 by rpki-client