$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa File: 2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa (raw, json) Hash identifier: 1+tsN07jSDP1j+DZz1enZ20ZjdKMPnacptJsrxaWN94= Subject key identifier: 41:A9:B4:60:30:B5:55:55:D5:97:B6:B2:D3:E1:5F:96:2D:EE:ED:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850A5E1BE5F54AF34D6300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.77.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0a:5e:1b:e5:f5:4a:f3:4d:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=168e1e0a-7417-4790-8234-5c4249983c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:02:4b:6a:93:d3:f4:dd:60:27:57:04:59: fe:ec:f3:3b:17:e4:b9:cd:9a:3f:7f:77:b6:1a:0b: ec:b0:0f:90:ca:fe:06:3e:0c:5b:54:95:62:b0:b2: dc:b7:65:ae:85:f1:63:b1:0f:43:ac:03:8c:53:05: 3d:e9:f3:64:b1:bd:11:1a:a5:ca:35:84:8a:26:11: c4:26:2f:40:fa:76:ee:23:53:a7:b8:1f:71:70:c5: 8c:a9:94:d8:18:e3:aa:ef:d5:2f:e5:34:dc:90:ba: f3:04:cd:a0:e9:76:c3:3e:5e:3c:3a:69:d7:f8:98: c8:b6:96:ef:ee:5e:b2:76:64:52:fb:2e:85:81:94: de:bb:d5:39:76:c9:bb:a6:14:c4:05:ad:7a:67:b8: ed:d3:ad:27:e5:4d:e8:eb:09:1f:6b:f7:88:11:c5: 88:4c:dc:5c:75:07:35:24:1e:d6:0f:3c:e8:22:7b: 5e:30:6e:62:d1:98:09:11:7d:ad:60:8b:04:90:54: c8:3f:80:58:43:73:d0:11:92:bd:97:26:64:46:e2: 17:a8:9b:9f:50:b7:1e:4c:05:f9:30:f0:24:10:74: 34:e0:2c:3d:47:cb:2b:2a:c7:59:c9:af:18:cf:a7: a1:ff:38:37:cd:71:73:c9:50:19:c0:b0:20:6c:23: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:B4:60:30:B5:55:55:D5:97:B6:B2:D3:E1:5F:96:2D:EE:ED:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2e78f7ff-7c56-37f1-8ea0-ee334b1ad081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.77.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d7:d9:fd:e1:76:a4:d1:3a:7a:df:1e:c6:a5:2f:d9:03:e2: 3c:5e:c4:d6:78:df:f4:8a:ca:4c:25:02:87:74:93:61:0c:01: 14:e0:a2:64:68:2c:32:44:9a:15:38:12:78:57:17:a3:c0:cf: ca:49:ef:87:2a:a3:36:cb:20:64:11:b1:d5:66:a9:a5:85:27: ae:98:b8:fd:42:6f:67:c0:de:ef:08:59:04:1a:b1:39:30:d0: 4b:db:f8:2d:36:d2:32:0e:75:e4:a8:65:d0:48:cf:d8:7d:d1: a5:c4:b5:3d:f0:46:eb:a2:2b:20:65:df:19:90:f9:00:d2:f3: 70:50:99:ca:b1:11:2d:c8:b3:ac:49:32:cd:1a:1b:1c:f3:59: 0c:b8:58:72:e2:d7:c7:fc:62:78:bc:bf:c9:f6:6e:b9:ef:91: 71:52:c7:44:9e:1e:cf:60:f2:db:b1:c0:28:d1:70:4d:6b:0e: 92:b1:96:c1:64:b5:9d:6e:90:bb:fe:af:53:8b:7b:48:d3:4b: 82:c4:37:e8:85:0c:dc:91:c3:ec:e7:90:b1:09:ca:39:cd:f5: a5:b6:05:ec:ae:bc:c6:ce:80:a7:b7:26:ab:92:95:15:fb:b1: 12:e0:76:cb:78:ac:39:57:32:d9:71:33:99:e1:94:9b:8e:d8: a2:fc:2f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQpeG+X1SvNNYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTY4ZTFlMGEtNzQxNy00NzkwLTgyMzQtNWM0MjQ5OTgzYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0wCS2qT0/TdYCdXBFn+7PM7F+S5zZo/f3e2 GgvssA+Qyv4GPgxbVJVisLLct2WuhfFjsQ9DrAOMUwU96fNksb0RGqXKNYSKJhHE Ji9A+nbuI1OnuB9xcMWMqZTYGOOq79Uv5TTckLrzBM2g6XbDPl48OmnX+JjItpbv 7l6ydmRS+y6FgZTeu9U5dsm7phTEBa16Z7jt060n5U3o6wkfa/eIEcWITNxcdQc1 JB7WDzzoInteMG5i0ZgJEX2tYIsEkFTIP4BYQ3PQEZK9lyZkRuIXqJufULceTAX5 MPAkEHQ04Cw9R8srKsdZya8Yz6eh/zg3zXFzyVAZwLAgbCOtWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGptGAwtVVV1Ze2stPhX5Yt7u3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmU3OGY3ZmYtN2M1Ni0z N2YxLThlYTAtZWUzMzRiMWFkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPX2f3hdqTROnrfHsalL9kD4jxexNZ43/SKykwlAod0k2EMARTgomRo LDJEmhU4EnhXF6PAz8pJ74cqozbLIGQRsdVmqaWFJ66YuP1Cb2fA3u8IWQQasTkw 0Evb+C020jIOdeSoZdBIz9h90aXEtT3wRuuiKyBl3xmQ+QDS83BQmcqxES3Is6xJ Ms0aGxzzWQy4WHLi18f8Yni8v8n2brnvkXFSx0SeHs9g8tuxwCjRcE1rDpKxlsFk tZ1ukLv+r1OLe0jTS4LEN+iFDNyRw+znkLEJyjnN9aW2BeyuvMbOgKe3JquSlRX7 sRLgdst4rDlXMtlxM5nhlJuO2KL8L7M= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:10 2025 by rpki-client