$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa File: 8a5ecf25-e2b2-3327-9834-af1bffafca00.roa (raw, json) Hash identifier: Q2tfp+kV1Q/Y/RwN4PltHH5guY4tNVz+FXGPNhl4LTo= Subject key identifier: DF:62:10:A7:09:33:32:7B:20:F3:62:D4:85:60:B5:34:26:92:64:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2E2339AD419C64DFF780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 34.4.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2e:23:39:ad:41:9c:64:df:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=f3c5d648-4d51-40ec-b45e-612e531d18b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7e:8e:05:4e:1c:a5:f0:61:17:67:ab:d1:03: 97:a0:12:a6:a2:a0:ef:b7:44:08:54:15:ba:b6:50: 9c:8b:12:df:70:5e:62:7a:91:d4:e6:1a:d4:8c:03: 6b:0e:6e:29:d6:bd:34:dd:9f:1e:bd:d8:da:9f:95: 42:08:e3:9a:c5:f4:69:9b:6c:77:8b:eb:53:c5:c5: 7b:ba:26:76:b4:0d:f2:34:34:b8:ab:0e:1d:63:1f: 69:15:6f:86:80:43:05:8b:a3:76:32:5d:79:3d:04: 58:3d:12:c8:f3:e5:f8:de:5b:1b:24:5f:cd:08:ef: f4:62:92:f0:06:c2:c6:da:02:49:de:53:84:e8:e3: 75:17:72:f8:07:f6:d2:e9:c5:2d:c6:ba:e8:3a:2e: c7:53:3a:34:ed:b8:ad:79:2f:f3:d3:a0:4a:3e:6c: 57:25:4e:78:4e:66:43:22:08:d9:c5:46:14:af:e0: 0f:99:c7:18:e5:51:af:6a:8b:6b:dc:d2:4a:66:c7: 47:dd:de:35:1a:af:be:30:b3:eb:2f:02:5f:e7:01: 9f:8f:fd:ba:2b:bd:ea:f8:ab:e9:0f:cc:53:44:82: 63:dc:a2:52:33:c0:4b:ea:7f:7d:7c:3c:12:8e:6c: 2a:8e:64:97:7e:40:b9:96:01:41:03:41:0c:06:fb: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:62:10:A7:09:33:32:7B:20:F3:62:D4:85:60:B5:34:26:92:64:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a5ecf25-e2b2-3327-9834-af1bffafca00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.4.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3a:ed:fe:9d:f0:a5:90:7a:46:f7:b0:14:f0:15:a6:4e:0e: 9d:41:91:fc:4b:68:b8:ae:61:cc:71:3b:b8:5f:4f:a8:ab:f8: 18:e7:30:1b:39:22:49:cc:62:29:32:7b:b6:2c:89:92:72:94: a8:cb:6f:b6:0e:a7:49:b7:56:7c:a8:52:d9:34:ce:4a:df:a1: 98:24:7b:ae:47:13:ba:4d:2d:d3:15:23:46:6d:26:1b:6c:e8: 69:94:bb:d2:77:e0:c7:1b:53:1f:13:50:d2:00:20:16:0a:23: 0d:4a:72:8d:b1:71:d4:bb:59:7f:27:35:a9:c2:7b:0a:31:95: 4b:4d:3a:33:dd:a0:80:fa:cb:f2:b0:66:46:18:18:18:ac:20: 4b:77:5d:d1:41:cf:72:d3:ed:62:f4:5c:c9:9a:63:d4:81:c4: 21:8c:ea:eb:c5:06:fa:9e:99:6f:16:87:ba:c4:92:26:4b:19: 19:14:91:74:32:88:05:55:9a:50:df:64:fe:02:a6:50:fa:28: 2d:22:63:75:dc:31:4d:b9:f7:19:ef:38:4e:d7:41:58:dc:ac: 4c:df:df:bf:92:36:a6:72:ee:96:eb:a0:1f:77:28:cb:e0:24: bf:d5:64:e4:d0:68:10:70:0e:b3:c1:c3:fc:ba:14:93:db:4a: fa:a5:94:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i4jOa1BnGTf94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZjNjNWQ2NDgtNGQ1MS00MGVjLWI0NWUtNjEyZTUzMWQxOGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH6OBU4cpfBhF2er0QOXoBKmoqDvt0QIVBW6 tlCcixLfcF5iepHU5hrUjANrDm4p1r003Z8evdjan5VCCOOaxfRpm2x3i+tTxcV7 uiZ2tA3yNDS4qw4dYx9pFW+GgEMFi6N2Ml15PQRYPRLI8+X43lsbJF/NCO/0YpLw BsLG2gJJ3lOE6ON1F3L4B/bS6cUtxrroOi7HUzo07biteS/z06BKPmxXJU54TmZD IgjZxUYUr+APmccY5VGvaotr3NJKZsdH3d41Gq++MLPrLwJf5wGfj/26K73q+Kvp D8xTRIJj3KJSM8BL6n99fDwSjmwqjmSXfkC5lgFBA0EMBvuoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9iEKcJMzJ7IPNi1IVgtTQmkmQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE1ZWNmMjUtZTJiMi0z MzI3LTk4MzQtYWYxYmZmYWZjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI67f6d8KWQekb3sBTwFaZODp1BkfxLaLiuYcxxO7hfT6ir+BjnMBs5 IknMYikye7YsiZJylKjLb7YOp0m3VnyoUtk0zkrfoZgke65HE7pNLdMVI0ZtJhts 6GmUu9J34McbUx8TUNIAIBYKIw1Kco2xcdS7WX8nNanCewoxlUtNOjPdoID6y/Kw ZkYYGBisIEt3XdFBz3LT7WL0XMmaY9SBxCGM6uvFBvqemW8Wh7rEkiZLGRkUkXQy iAVVmlDfZP4CplD6KC0iY3XcMU259xnvOE7XQVjcrEzf37+SNqZy7pbroB93KMvg JL/VZOTQaBBwDrPBw/y6FJPbSvqllFw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:13:17 2025 by rpki-client