$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08ed88fd-dcbe-34a0-8465-999477041b5a.roa File: 08ed88fd-dcbe-34a0-8465-999477041b5a.roa (raw, json) Hash identifier: 4HRXd1QEo/jTBEFgsfPtRsqpn3FT2ntw0wte6J0Ar5o= Subject key identifier: D2:CA:6B:47:2C:56:B4:9F:DA:2F:DC:E2:37:77:11:AF:72:AB:B1:0C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852E90C628C11874B36C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08ed88fd-dcbe-34a0-8465-999477041b5a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.32.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2e:90:c6:28:c1:18:74:b3:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e9bf88e5-231c-40bb-9cef-f1169a1b9569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:a3:f4:4a:b4:75:38:98:3e:d0:2a:02:92: 50:cd:10:46:50:d7:f4:5a:d0:4d:e8:b2:71:3b:43: d8:a6:3d:1c:03:24:eb:5a:46:87:e6:77:67:f3:1d: 4f:64:a2:d0:8d:96:e8:2c:b1:66:ac:42:4a:16:0e: dd:b3:30:7c:7e:97:9f:ba:60:2f:bd:c4:ff:9d:88: a7:21:87:17:c3:23:3a:31:ec:36:e1:e9:96:84:e4: 2a:f3:81:41:a5:f0:23:12:50:4c:40:e3:6c:f6:6d: 2f:06:44:8c:5c:a5:33:23:62:52:69:fa:30:0a:58: 27:81:51:80:58:4e:76:99:98:b9:a8:ad:35:24:a5: eb:9c:d1:e8:32:ce:b2:b1:18:26:fb:81:51:65:42: 89:0a:05:ce:d6:6d:98:a2:02:c1:f3:81:25:05:b3: f0:50:63:86:4c:81:d2:f4:f9:54:1b:e6:b2:64:a4: a3:1a:fb:57:94:7b:9c:1c:d9:df:2d:6e:76:03:58: 84:f3:d5:42:13:12:5e:a4:85:84:cc:63:8c:27:83: ba:0c:a7:5b:d2:07:6f:70:61:b1:77:3c:a0:f1:0c: 10:02:5b:35:cd:a3:24:8d:93:e7:30:f3:da:e9:cb: a1:d9:c9:81:6f:b0:63:84:20:d8:37:df:4d:31:b5: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:6B:47:2C:56:B4:9F:DA:2F:DC:E2:37:77:11:AF:72:AB:B1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/08ed88fd-dcbe-34a0-8465-999477041b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.32.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:de:65:3e:a5:f7:bf:3a:f7:5d:ab:aa:1e:63:a7:b2:93:55: 1d:d1:fe:30:ca:32:e4:9d:44:83:7d:98:64:80:b7:fc:09:dd: 33:ce:52:07:31:11:f9:b3:26:62:f0:42:76:7c:df:b5:4c:11: b1:14:99:5b:32:10:47:ba:84:56:bc:eb:f1:96:21:25:87:8b: 75:93:c6:32:26:47:53:b1:d2:26:a3:07:6e:9e:8a:70:23:da: 70:ff:17:d6:a1:e1:aa:15:55:27:90:a9:7f:36:d4:10:0a:78: 88:6d:9c:dc:52:93:13:d9:bb:18:53:83:12:bb:dc:67:a0:35: 35:11:22:c4:c4:0f:1a:29:62:9e:79:f2:80:96:cd:a3:17:03: 8e:10:9e:83:48:d6:95:bb:27:7f:81:ff:a9:44:2f:5c:e7:9c: 79:d6:83:18:35:b1:1c:50:a4:40:ac:dc:93:5e:f5:17:3d:d9: ef:8a:d0:06:14:01:09:33:2a:ae:8c:38:8c:ee:f9:68:6e:c6: dd:3f:d2:d7:bd:a8:5a:75:d9:80:fd:04:db:28:c4:d2:4d:e3: f1:b6:11:d7:66:b7:5b:49:89:a0:15:57:c6:b6:30:b4:30:7d: 3a:fc:fa:d1:e5:d5:99:88:0d:11:cc:df:3e:19:02:19:50:4b: 1a:40:e6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS6QxijBGHSzbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTliZjg4ZTUtMjMxYy00MGJiLTljZWYtZjExNjlhMWI5NTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6qj9Eq0dTiYPtAqApJQzRBGUNf0WtBN6LJx O0PYpj0cAyTrWkaH5ndn8x1PZKLQjZboLLFmrEJKFg7dszB8fpefumAvvcT/nYin IYcXwyM6Mew24emWhOQq84FBpfAjElBMQONs9m0vBkSMXKUzI2JSafowClgngVGA WE52mZi5qK01JKXrnNHoMs6ysRgm+4FRZUKJCgXO1m2YogLB84ElBbPwUGOGTIHS 9PlUG+ayZKSjGvtXlHucHNnfLW52A1iE89VCExJepIWEzGOMJ4O6DKdb0gdvcGGx dzyg8QwQAls1zaMkjZPnMPPa6cuh2cmBb7BjhCDYN99NMbU/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLKa0csVrSf2i/c4jd3Ea9yq7EMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDhlZDg4ZmQtZGNiZS0z NGEwLTg0NjUtOTk5NDc3MDQxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIiCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIreZT6l9786912rqh5jp7KTVR3R/jDKMuSdRIN9mGSAt/wJ3TPOUgcx EfmzJmLwQnZ837VMEbEUmVsyEEe6hFa86/GWISWHi3WTxjImR1Ox0iajB26einAj 2nD/F9ah4aoVVSeQqX821BAKeIhtnNxSkxPZuxhTgxK73GegNTURIsTEDxopYp55 8oCWzaMXA44QnoNI1pW7J3+B/6lEL1znnHnWgxg1sRxQpECs3JNe9Rc92e+K0AYU AQkzKq6MOIzu+Whuxt0/0te9qFp12YD9BNsoxNJN4/G2Eddmt1tJiaAVV8a2MLQw fTr8+tHl1ZmIDRHM3z4ZAhlQSxpA5o0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:24 2025 by rpki-client