$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb93532b-11c6-3fdf-9b36-72f0b89a5dc2.roa File: bb93532b-11c6-3fdf-9b36-72f0b89a5dc2.roa (raw, json) Hash identifier: JSOOa15Ah0GsIoRZSfMLtRpCVyZx4ztjnKV6GGe8pJo= Subject key identifier: 96:E3:26:27:EA:D3:4C:4B:C2:6D:1E:25:8E:6E:58:EE:99:E1:40:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584913AC3FD456F558527FDFD9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb93532b-11c6-3fdf-9b36-72f0b89a5dc2.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.13.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3f:d4:56:f5:58:52:7f:df:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=a3d1dd9b-4128-4227-ad27-809120f347bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:9e:3a:19:74:7b:09:f5:1f:59:d8:51:6c: 71:bf:f5:d9:38:11:d2:4d:49:84:9c:6d:9b:1b:06: 7f:3c:db:6e:7c:50:53:1d:65:a9:1c:33:be:c1:07: 7e:db:fd:69:40:95:a5:a1:f3:dd:9d:97:29:94:b3: dd:c8:0d:7b:21:29:31:39:ab:df:11:9c:90:b0:0c: d3:0f:85:37:59:01:5b:d7:8f:d5:60:4d:39:7d:ec: 94:79:1b:16:d8:eb:b3:3e:7c:d7:64:ec:10:f2:b3: 8e:c2:dd:83:1b:fd:15:4d:f4:38:e5:8f:24:8f:1e: 08:c8:33:72:6f:0f:55:71:e6:72:63:a4:81:90:00: 94:74:7d:d9:0d:39:c7:fe:5d:c0:20:d8:3c:7a:23: 8a:9b:b7:96:75:53:36:fd:37:ea:e3:9f:18:d6:f1: 6a:91:c5:3b:6e:6e:bf:c4:c0:56:f2:e0:01:b2:ed: 4a:79:e9:de:22:10:40:a6:39:92:35:4f:f7:19:47: 96:fb:4b:03:f7:c9:90:d0:f1:79:e4:fa:7d:40:36: 1e:69:b0:e5:e9:a0:8b:5a:c6:3d:47:be:1a:8f:da: 2e:07:d1:3f:67:7d:c7:8a:d4:a7:5d:ec:0b:a5:0f: 12:dc:fc:dd:1a:fe:19:42:a8:8f:8c:f2:aa:53:f7: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E3:26:27:EA:D3:4C:4B:C2:6D:1E:25:8E:6E:58:EE:99:E1:40:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb93532b-11c6-3fdf-9b36-72f0b89a5dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1c:9e:8f:4c:73:0b:26:68:82:7d:2a:92:25:49:46:b3:aa: e2:2f:73:6b:7f:96:a5:1d:b4:37:f7:d7:e5:e6:38:1c:49:76: c7:9d:e9:cf:cb:01:a1:0f:d9:ca:a0:85:93:f8:0b:60:81:5c: eb:9e:15:29:73:b5:7e:6d:37:7a:52:67:da:0c:d2:37:20:1e: f0:f7:5f:29:16:0e:f9:2b:dc:c9:24:82:0b:6f:85:6e:38:a2: ad:5d:71:6b:3d:91:1c:6d:6c:de:dc:f2:a3:fd:47:d0:d0:f7: 08:c8:0c:20:a6:c7:4d:3f:f8:f9:85:3c:4e:3a:33:6a:ae:5d: b1:36:f8:81:ec:54:1d:fa:27:51:07:b3:a9:6e:03:8a:7c:af: eb:6c:1f:9f:17:8b:50:8e:85:53:6f:ed:20:7f:a1:6a:7a:0f: 3e:37:12:8c:2a:89:c7:ff:e9:4c:f8:c7:b2:71:79:00:95:cd: 73:c0:e6:8f:3a:73:eb:71:e5:9f:31:a2:bc:3d:71:01:f0:4b: 8d:b4:66:3a:2e:f3:0e:c3:0d:7f:39:88:2a:06:50:4f:82:77: ed:8d:2a:8b:0a:90:7f:08:95:93:9f:d1:c7:99:06:f6:04:73: 53:b3:09:95:1a:b7:4b:67:9a:68:12:ed:c3:ed:5c:80:c9:d2: c2:3d:d3:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrD/UVvVYUn/f2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YTNkMWRkOWItNDEyOC00MjI3LWFkMjctODA5MTIwZjM0N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lyeOhl0ewn1H1nYUWxxv/XZOBHSTUmEnG2b GwZ/PNtufFBTHWWpHDO+wQd+2/1pQJWlofPdnZcplLPdyA17ISkxOavfEZyQsAzT D4U3WQFb14/VYE05feyUeRsW2OuzPnzXZOwQ8rOOwt2DG/0VTfQ45Y8kjx4IyDNy bw9VceZyY6SBkACUdH3ZDTnH/l3AINg8eiOKm7eWdVM2/Tfq458Y1vFqkcU7bm6/ xMBW8uABsu1KeeneIhBApjmSNU/3GUeW+0sD98mQ0PF55Pp9QDYeabDl6aCLWsY9 R74aj9ouB9E/Z33HitSnXewLpQ8S3PzdGv4ZQqiPjPKqU/e0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbjJifq00xLwm0eJY5uWO6Z4UCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmI5MzUzMmItMTFjNi0z ZmRmLTliMzYtNzJmMGI4OWE1ZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIg0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFccno9McwsmaIJ9KpIlSUazquIvc2t/lqUdtDf31+XmOBxJdsed6c/L AaEP2cqghZP4C2CBXOueFSlztX5tN3pSZ9oM0jcgHvD3XykWDvkr3MkkggtvhW44 oq1dcWs9kRxtbN7c8qP9R9DQ9wjIDCCmx00/+PmFPE46M2quXbE2+IHsVB36J1EH s6luA4p8r+tsH58Xi1COhVNv7SB/oWp6Dz43Eowqicf/6Uz4x7JxeQCVzXPA5o86 c+tx5Z8xorw9cQHwS420Zjou8w7DDX85iCoGUE+Cd+2NKosKkH8IlZOf0ceZBvYE c1OzCZUat0tnmmgS7cPtXIDJ0sI905k= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:09 2025 by rpki-client