$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa File: 2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa (raw, json) Hash identifier: RqadDhA340PhoQ+cSlEjd8bkWQWOqKt7oKU097+nW7U= Subject key identifier: 63:74:DB:39:49:43:23:F4:E5:91:3F:FB:5C:59:32:08:F5:63:6A:FA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E997FD09A4D7ADBFFD20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e9:97:fd:09:a4:d7:ad:bf:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2f7b8561-41d4-4105-b6fc-29bf4f9f605a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:68:3a:06:07:65:6a:54:82:37:f9:22:f3: a9:50:ca:78:80:61:16:d8:35:11:6b:80:0b:15:ec: 9a:cb:7f:50:54:70:31:75:df:61:cf:8d:56:dc:55: 20:99:64:83:64:5e:92:af:be:92:33:46:bb:52:59: 6a:41:cc:4b:fb:dc:b0:73:5b:da:0c:cf:a3:6c:36: a8:5d:86:30:44:51:0f:8e:85:b9:34:f7:44:6b:df: 76:63:27:09:10:2b:02:17:d2:82:54:10:ab:2a:10: 31:ac:ba:94:bb:a6:88:ec:a6:91:c9:0e:98:97:ea: 22:84:07:c1:ba:66:0d:86:76:9c:1c:5e:8b:b5:c4: 7c:7f:b3:46:b3:89:ed:d2:4b:2d:c0:e9:4d:78:ea: 11:5e:0e:01:30:e3:b6:e7:0c:21:da:3f:c5:51:88: 2c:60:79:72:10:29:b8:b0:46:6d:bb:98:3b:d9:21: e7:d6:9d:48:eb:ca:15:f1:8e:d6:f4:3f:3d:db:aa: ff:37:ed:d7:07:7d:37:78:39:9d:4d:4c:30:c6:5b: 7e:8a:a3:e0:4f:8d:e6:05:ac:6d:d8:f9:0f:8b:13: 6d:d7:a9:c8:47:47:72:2d:58:d0:81:e7:fe:4f:41: f5:5f:34:2b:ab:5f:9a:40:7b:54:23:52:5d:55:e8: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:74:DB:39:49:43:23:F4:E5:91:3F:FB:5C:59:32:08:F5:63:6A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ca733b2-8c99-3ab2-a7f4-752ad16e1167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ba:22:64:5e:2c:00:f6:88:f8:71:94:66:67:7b:42:6f:21: e9:51:e4:b1:67:eb:be:62:74:fa:fe:99:f4:44:ec:28:f6:07: fe:e7:f7:60:a2:57:8c:0c:e7:96:20:7b:a5:4a:bf:f5:22:38: a0:88:99:ba:2c:99:87:1d:27:2a:fb:a8:11:4d:39:07:a1:1b: 4c:4b:a9:cf:67:43:b2:7c:39:4c:4b:4b:0c:6c:fe:8b:99:ef: ea:52:31:39:eb:4a:56:a8:2b:f6:d6:2e:c3:64:b1:59:93:df: 88:68:5f:3e:b7:01:a3:96:94:77:a1:ed:81:2d:aa:9f:73:9f: c2:e3:87:66:92:ca:29:c6:52:40:85:17:f4:92:6f:de:4e:56: 96:a8:9e:26:da:fa:2b:47:8e:2e:ad:25:d9:db:ab:dc:a4:ab: ba:8a:bc:a8:cf:00:3a:56:51:cb:2b:ad:56:8f:d1:1b:d4:b4: c9:48:33:d2:fb:74:01:f5:b5:46:4e:0a:72:93:21:8f:6b:32: e5:1d:51:6d:f3:ff:d1:9b:0f:a7:c4:49:54:3c:47:dd:f1:a5: 19:8f:50:7f:bc:21:c6:24:26:e9:34:6d:fe:d9:89:ce:54:f5: c1:21:0b:6a:4c:d3:be:ec:ae:7c:c4:9d:10:4c:aa:97:ef:01: 41:2f:50:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOmX/Qmk162//SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmY3Yjg1NjEtNDFkNC00MTA1LWI2ZmMtMjliZjRmOWY2MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqxoOgYHZWpUgjf5IvOpUMp4gGEW2DURa4AL Feyay39QVHAxdd9hz41W3FUgmWSDZF6Sr76SM0a7UllqQcxL+9ywc1vaDM+jbDao XYYwRFEPjoW5NPdEa992YycJECsCF9KCVBCrKhAxrLqUu6aI7KaRyQ6Yl+oihAfB umYNhnacHF6LtcR8f7NGs4nt0kstwOlNeOoRXg4BMOO25wwh2j/FUYgsYHlyECm4 sEZtu5g72SHn1p1I68oV8Y7W9D8926r/N+3XB303eDmdTUwwxlt+iqPgT43mBaxt 2PkPixNt16nIR0dyLVjQgef+T0H1XzQrq1+aQHtUI1JdVehR2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN02zlJQyP05ZE/+1xZMgj1Y2r6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmNhNzMzYjItOGM5OS0z YWIyLWE3ZjQtNzUyYWQxNmUxMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIoAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+6ImReLAD2iPhxlGZne0JvIelR5LFn675idPr+mfRE7Cj2B/7n92Ci V4wM55Yge6VKv/UiOKCImbosmYcdJyr7qBFNOQehG0xLqc9nQ7J8OUxLSwxs/ouZ 7+pSMTnrSlaoK/bWLsNksVmT34hoXz63AaOWlHeh7YEtqp9zn8Ljh2aSyinGUkCF F/SSb95OVpaoniba+itHji6tJdnbq9ykq7qKvKjPADpWUcsrrVaP0RvUtMlIM9L7 dAH1tUZOCnKTIY9rMuUdUW3z/9GbD6fESVQ8R93xpRmPUH+8IcYkJuk0bf7Zic5U 9cEhC2pM077srnzEnRBMqpfvAUEvUPo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:43 2025 by rpki-client