$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa File: 0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa (raw, json) Hash identifier: pg8x17v9+fsp02fits7HIIqQD53j9vjCnpLs7yZ0seE= Subject key identifier: 91:3E:2C:37:D4:72:3E:EA:19:E4:8A:B2:71:4B:3C:64:AE:96:0E:3F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78510C0008AE2C8C5AD2580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:10:c0:00:8a:e2:c8:c5:ad:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bcc538fc-f5a6-4626-8e9f-e29ba0939984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1c:f2:5a:73:99:3f:f6:a0:25:6f:82:b5:01: 2d:82:30:e2:34:3c:20:04:67:0b:89:15:a3:51:58: 21:ec:75:0f:f7:77:4a:fe:f2:3d:f3:2a:de:6b:75: eb:41:1d:60:9f:85:25:09:60:96:eb:29:86:3c:15: bf:ce:6e:fd:de:98:c8:cc:66:f5:68:75:2e:54:ba: 96:28:25:17:0c:79:64:03:c1:83:b3:e5:fa:28:87: 63:1d:1c:a5:fb:a4:47:f5:52:23:86:3c:69:54:4d: ca:83:d4:49:03:75:c4:38:e1:8d:19:e8:af:54:23: 85:c8:e0:1f:cc:dd:ea:d6:57:68:0d:15:a8:0d:a5: ea:a3:11:e8:4a:9a:f4:9e:76:42:74:f1:d4:52:c2: 08:ce:2e:3e:b2:5a:dc:d9:1b:a2:e0:d4:e8:91:72: a0:6b:7a:b3:8f:9b:44:ce:dd:70:6d:b5:4c:2b:6f: b8:7f:67:1a:79:8e:77:75:3b:dd:e2:bf:2e:f4:11: e6:0b:94:05:b9:5e:ce:5a:64:89:f6:aa:c5:35:eb: 4a:6f:15:7f:ec:7b:bf:af:1b:21:16:57:19:80:b9: 96:97:06:95:31:36:8d:97:82:5b:6a:a1:9c:8d:20: 94:72:81:1a:cb:4e:ec:23:4c:9b:e9:84:31:4b:e9: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:2C:37:D4:72:3E:EA:19:E4:8A:B2:71:4B:3C:64:AE:96:0E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a43e478-fc5c-39d9-bf23-f58e3c093f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c8:1a:79:3c:93:a4:54:67:43:da:65:91:1b:93:fe:e1:61: 3a:a2:c6:6c:bf:09:cf:cf:71:f1:6b:f0:a9:a3:e0:05:3e:c3: ac:96:09:a6:ab:92:d7:e2:f0:4f:bf:84:7b:b1:ee:fe:7e:d8: 39:98:b1:de:c6:08:4a:05:5e:67:ce:de:ed:a5:96:f1:ca:10: 49:19:33:7d:1d:c2:3e:ae:83:52:99:c3:b6:a5:d7:92:b7:10: d5:86:86:46:da:11:24:eb:52:94:a6:35:a5:92:c8:77:69:ab: 85:2e:8c:97:e7:fa:80:11:2c:35:da:6e:05:24:d9:06:d6:53: 01:cf:a1:34:5e:49:2b:90:bc:2b:96:f2:a5:58:2b:b3:04:f8: c9:47:38:1e:c3:e4:0b:fe:13:54:70:81:c5:05:05:ab:ab:b8: 58:a9:38:d8:31:97:e5:95:10:3d:82:81:c2:2a:c8:77:42:79: c6:f6:43:5e:84:04:45:24:a9:75:5b:c1:4e:b7:97:43:c9:c9: 91:77:f6:d4:78:99:75:2e:06:1c:b4:b4:5d:ba:3b:11:9d:a2: 81:64:cd:e6:d4:4d:20:38:be:2c:93:7c:1a:a9:f7:3a:6f:5d: 16:70:2b:16:7c:73:63:94:bf:26:ca:d6:03:0e:fe:47:a4:5e: 8e:b9:d7:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRDAAIriyMWtJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmNjNTM4ZmMtZjVhNi00NjI2LThlOWYtZTI5YmEwOTM5OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BzyWnOZP/agJW+CtQEtgjDiNDwgBGcLiRWj UVgh7HUP93dK/vI98yrea3XrQR1gn4UlCWCW6ymGPBW/zm793pjIzGb1aHUuVLqW KCUXDHlkA8GDs+X6KIdjHRyl+6RH9VIjhjxpVE3Kg9RJA3XEOOGNGeivVCOFyOAf zN3q1ldoDRWoDaXqoxHoSpr0nnZCdPHUUsIIzi4+slrc2Rui4NTokXKga3qzj5tE zt1wbbVMK2+4f2caeY53dTvd4r8u9BHmC5QFuV7OWmSJ9qrFNetKbxV/7Hu/rxsh FlcZgLmWlwaVMTaNl4JbaqGcjSCUcoEay07sI0yb6YQxS+mHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE+LDfUcj7qGeSKsnFLPGSulg4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE0M2U0NzgtZmM1Yy0z OWQ5LWJmMjMtZjU4ZTNjMDkzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXIGnk8k6RUZ0PaZZEbk/7hYTqixmy/Cc/PcfFr8Kmj4AU+w6yWCaar ktfi8E+/hHux7v5+2DmYsd7GCEoFXmfO3u2llvHKEEkZM30dwj6ug1KZw7al15K3 ENWGhkbaESTrUpSmNaWSyHdpq4UujJfn+oARLDXabgUk2QbWUwHPoTReSSuQvCuW 8qVYK7ME+MlHOB7D5Av+E1RwgcUFBauruFipONgxl+WVED2CgcIqyHdCecb2Q16E BEUkqXVbwU63l0PJyZF39tR4mXUuBhy0tF26OxGdooFkzebUTSA4viyTfBqp9zpv XRZwKxZ8c2OUvybK1gMO/kekXo651/k= -----END CERTIFICATE-----Generated at Sat Apr 26 20:20:42 2025 by rpki-client