$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa File: 138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa (raw, json) Hash identifier: 2tM6ihE6cyPIKx/ccH8yEfNZ/alLfmlgdzjXhhSn6l0= Subject key identifier: 89:5F:C0:8E:A2:F9:E1:E5:B7:64:FB:90:48:1E:6C:94:F7:78:E0:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78510B4A45590C345C9CA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.17.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:10:b4:a4:55:90:c3:45:c9:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4c44d226-d78b-4bf7-86ad-9abc4fb6de2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:f5:8a:22:a8:6b:75:8a:65:9d:1c:a4:d0: 85:91:3d:1d:d9:ba:15:12:83:f9:83:d4:f7:1d:af: 00:10:0f:69:fb:25:59:91:59:d6:15:b5:71:6d:27: 80:f5:d5:fa:4c:67:82:03:a2:b6:76:b0:ec:a9:a4: 40:c8:9e:f9:99:4c:78:25:d1:c0:02:e0:c9:d9:5b: 4e:b1:54:80:e3:24:80:d5:51:16:73:41:60:88:a0: 80:72:74:0a:48:f2:b4:63:93:b1:e3:34:58:c7:9c: b1:f3:99:42:ed:de:0d:e4:8f:cd:f1:d1:e3:13:b7: e9:0a:5d:fd:ed:0d:73:68:22:68:d4:d2:2a:dc:a0: 08:12:b1:26:f6:3e:ea:69:ae:ab:7b:8a:c3:d4:f5: 2d:3e:a3:fd:d8:64:dd:ef:a8:cf:07:af:ef:d6:f7: 45:22:a2:46:41:89:fe:1d:6c:e3:f6:3f:6d:57:a7: 44:0c:ef:7b:69:b5:c7:37:fe:b6:01:68:15:cc:21: f5:45:43:0b:e5:54:5e:77:27:33:cb:5b:c6:f6:55: b4:3f:f8:61:a5:de:65:6c:79:f0:68:7a:15:18:5e: 16:80:4e:08:cb:67:ae:2d:88:66:ae:1d:62:61:f5: ab:d6:d8:46:72:01:57:ed:b8:c3:d0:c5:1a:57:1c: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:C0:8E:A2:F9:E1:E5:B7:64:FB:90:48:1E:6C:94:F7:78:E0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/138c19e2-b5a7-3a1e-bb92-0bf4276f9543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.17.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a5:a6:d5:51:06:31:08:5e:53:da:f2:b1:f7:95:5e:51:12: 98:6a:bf:9c:0e:a5:d3:d1:9c:e8:c9:71:11:91:79:a8:1e:57: 96:c7:94:d6:ce:10:f6:19:61:b0:1c:ce:dd:1a:5b:5d:f7:41: 9a:73:6a:d0:86:53:68:51:4c:8d:36:b3:e8:b6:74:2c:ef:2a: 76:ce:6a:fa:67:19:67:7d:40:60:ca:0e:f8:a7:55:f9:49:ad: 0f:65:32:72:d4:ff:c0:02:da:f8:9a:88:fe:aa:c2:73:81:ae: 2f:a5:9d:9b:d2:dc:ac:1c:a4:60:ae:d6:57:99:15:25:1f:d4: 5b:0e:57:f9:ec:ce:f5:f6:0d:e4:78:cd:4e:8b:7c:90:ea:6c: ae:64:d4:0e:e8:7f:f7:b5:06:5b:40:84:e9:35:66:98:62:41: b3:8b:67:5e:27:87:b6:90:8b:92:0c:d2:bd:79:72:26:cd:ea: 20:3d:5e:60:73:fc:e7:a2:f9:10:21:20:6b:f9:9a:b5:11:a7: 37:64:3e:80:9a:7d:26:7c:9c:4d:59:49:4a:3e:d1:aa:e9:a0: 94:fa:af:99:e4:53:b5:96:9b:6f:2b:84:f5:f0:4f:7c:28:3e: f4:4e:2d:4f:c1:01:73:9b:c1:79:35:5b:73:2a:95:af:af:3c: ce:23:2b:a3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmnhRC0pFWQw0XJyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGM0NGQyMjYtZDc4Yi00YmY3LTg2YWQtOWFiYzRmYjZkZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIf1iiKoa3WKZZ0cpNCFkT0d2boVEoP5g9T3 Ha8AEA9p+yVZkVnWFbVxbSeA9dX6TGeCA6K2drDsqaRAyJ75mUx4JdHAAuDJ2VtO sVSA4ySA1VEWc0FgiKCAcnQKSPK0Y5Ox4zRYx5yx85lC7d4N5I/N8dHjE7fpCl39 7Q1zaCJo1NIq3KAIErEm9j7qaa6re4rD1PUtPqP92GTd76jPB6/v1vdFIqJGQYn+ HWzj9j9tV6dEDO97abXHN/62AWgVzCH1RUML5VRedyczy1vG9lW0P/hhpd5lbHnw aHoVGF4WgE4Iy2euLYhmrh1iYfWr1thGcgFX7bjD0MUaVxwQewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIlfwI6i+eHlt2T7kEgebJT3eOAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTM4YzE5ZTItYjVhNy0z YTFlLWJiOTItMGJmNDI3NmY5NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABKWm1VEGMQheU9rysfeVXlESmGq/nA6l09Gc6MlxEZF5qB5XlseU1s4Q 9hlhsBzO3RpbXfdBmnNq0IZTaFFMjTaz6LZ0LO8qds5q+mcZZ31AYMoO+KdV+Umt D2UyctT/wALa+JqI/qrCc4GuL6Wdm9LcrBykYK7WV5kVJR/UWw5X+ezO9fYN5HjN Tot8kOpsrmTUDuh/97UGW0CE6TVmmGJBs4tnXieHtpCLkgzSvXlyJs3qID1eYHP8 56L5ECEga/matRGnN2Q+gJp9JnycTVlJSj7RqumglPqvmeRTtZabbyuE9fBPfCg+ 9E4tT8EBc5vBeTVbcyqVr688ziMrow== -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:01 2025 by rpki-client