$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa File: fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa (raw, json) Hash identifier: vbWesAvg+wWKB6uVne+ycDdDfUvYpi/ByjXZOn3QiYE= Subject key identifier: 67:52:E6:C7:DC:02:26:9A:6B:67:62:B7:F5:F3:7E:2A:65:F8:D9:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584968E5AA8DE1CBB46D51ECC440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa Signing time: Fri 04 Apr 2025 02:40:39 +0000 ROA not before: Fri 04 Apr 2025 02:40:39 +0000 ROA not after: Thu 03 Jul 2025 02:40:39 +0000 asID: 15169 IP address blocks: 34.3.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:e5:aa:8d:e1:cb:b4:6d:51:ec:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 4 02:40:39 2025 GMT Not After : Jul 3 02:40:39 2025 GMT Subject: CN=d8099db6-b67f-49ad-8d99-08da2fefd2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:14:be:fa:77:c4:88:ad:41:05:b8:b2:91: 60:1c:40:ae:b6:eb:7b:88:fc:59:5e:53:8c:41:f6: bf:39:c8:9a:43:4b:73:37:dd:7d:27:30:0d:7a:d0: cd:f4:a0:7f:46:48:23:ab:16:34:fb:bb:4e:03:90: d3:6d:8d:d0:70:ad:af:96:15:bd:62:8f:19:bd:b6: de:08:0d:0c:2a:b2:70:96:9d:28:df:02:5c:8b:4b: 99:5a:a5:cd:a9:f9:35:5f:e6:9b:7c:0b:8f:49:d3: 83:c1:f6:39:3c:a2:77:d6:d5:76:31:ee:eb:20:1c: bf:db:7c:50:0d:af:f6:75:a6:07:c4:1c:0d:6a:8f: 1a:94:ee:c7:23:5d:7e:46:01:2f:d0:6f:20:22:d1: b0:6c:b0:69:21:94:e0:16:4f:b3:2b:30:af:bd:84: 89:04:93:68:9d:a5:2e:a2:db:11:be:37:ad:40:34: ab:da:be:2f:c8:9d:7b:5f:82:14:15:45:a3:66:12: bb:7f:83:5a:9d:d9:58:3f:65:a9:8b:79:6f:46:bb: d7:32:42:4d:ea:ca:5c:38:4d:58:59:ee:28:53:88: e7:dc:9b:75:be:be:0d:4b:1a:1a:43:01:14:bd:43: e3:2a:56:8c:30:6f:ea:97:92:2d:9b:04:57:e1:30: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:52:E6:C7:DC:02:26:9A:6B:67:62:B7:F5:F3:7E:2A:65:F8:D9:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa11a91f-5679-3e12-9d9e-9d77af5a750a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c1:03:15:73:d1:52:4a:7e:75:68:72:c2:b2:dc:52:0e:a3: 7d:db:0a:f1:a1:6a:8e:d4:71:53:f5:92:21:58:35:fa:4c:88: be:0c:96:e6:0a:3c:e5:43:28:b2:95:16:32:bd:64:fc:e2:39: 9a:13:84:ac:08:28:28:26:88:ca:db:2a:50:e7:d4:e3:b5:a7: fe:c8:a3:d5:6e:71:7a:7d:97:77:ea:84:41:79:4d:0f:d3:25: fe:c0:ce:9d:44:e4:89:b1:32:01:39:e5:69:7b:e3:61:74:66: f1:5e:54:03:82:bd:fe:da:31:68:c2:52:6f:03:7b:51:c9:6f: a7:11:d8:68:f8:0f:a5:e6:57:d6:3e:41:30:7f:06:60:ec:bf: e8:81:55:0b:10:49:8a:d5:93:68:89:60:9e:91:a1:4f:3e:7c: 4d:f7:02:7c:ee:ea:65:fc:86:ef:55:f1:e9:19:72:39:5d:d2: 47:38:1c:8c:91:af:d9:62:b2:46:f1:cd:03:46:3f:95:85:4d: 24:f7:30:39:31:81:3c:cf:47:b4:87:35:c0:6d:ac:17:d6:48: e0:55:89:65:84:2a:68:0f:83:4e:7a:60:c0:2d:50:65:2e:f5: 79:a8:a2:46:41:ed:4e:cd:d4:fc:78:4d:2c:ea:71:44:d5:61: 2b:e2:07:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElo5aqN4cu0bVHsxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwNDAyNDAzOVoXDTI1MDcwMzAyNDAzOVowLzEtMCsGA1UEAxMk ZDgwOTlkYjYtYjY3Zi00OWFkLThkOTktMDhkYTJmZWZkMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi90Uvvp3xIitQQW4spFgHECutut7iPxZXlOM Qfa/OciaQ0tzN919JzANetDN9KB/RkgjqxY0+7tOA5DTbY3QcK2vlhW9Yo8Zvbbe CA0MKrJwlp0o3wJci0uZWqXNqfk1X+abfAuPSdODwfY5PKJ31tV2Me7rIBy/23xQ Da/2daYHxBwNao8alO7HI11+RgEv0G8gItGwbLBpIZTgFk+zKzCvvYSJBJNonaUu otsRvjetQDSr2r4vyJ17X4IUFUWjZhK7f4NandlYP2Wpi3lvRrvXMkJN6spcOE1Y We4oU4jn3Jt1vr4NSxoaQwEUvUPjKlaMMG/ql5ItmwRX4TCc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdS5sfcAiaaa2dit/Xzfipl+Nk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmExMWE5MWYtNTY3OS0z ZTEyLTlkOWUtOWQ3N2FmNWE3NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7BAxVz0VJKfnVocsKy3FIOo33bCvGhao7UcVP1kiFYNfpMiL4MluYK POVDKLKVFjK9ZPziOZoThKwIKCgmiMrbKlDn1OO1p/7Io9VucXp9l3fqhEF5TQ/T Jf7Azp1E5ImxMgE55Wl742F0ZvFeVAOCvf7aMWjCUm8De1HJb6cR2Gj4D6XmV9Y+ QTB/BmDsv+iBVQsQSYrVk2iJYJ6RoU8+fE33Anzu6mX8hu9V8ekZcjld0kc4HIyR r9liskbxzQNGP5WFTST3MDkxgTzPR7SHNcBtrBfWSOBViWWEKmgPg056YMAtUGUu 9XmookZB7U7N1Px4TSzqcUTVYSviB9k= -----END CERTIFICATE-----Generated at Thu Apr 10 09:51:46 2025 by rpki-client