$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa File: 437990a1-2118-3c10-876c-e7495090df33.roa (raw, json) Hash identifier: Y6ibhUcdRni+HBn2TvYh6hvGZMnN59SgqdeqM5O00CY= Subject key identifier: FD:8E:18:C0:9F:16:15:46:D1:5F:65:9D:10:27:43:F7:F7:DB:2F:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E4CB9D1DDB8E1D0F9B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.143.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:cb:9d:1d:db:8e:1d:0f:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9fd7d1e8-11c7-472f-9139-e3d6e4cb8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:c4:5b:7f:f8:46:0f:0a:00:5e:90:5f:f5: 00:96:e0:f1:70:f7:43:1b:3f:4a:1a:88:9f:bb:a6: d2:31:27:65:f7:f9:18:96:8f:5f:4f:85:48:fc:a0: 51:19:eb:e8:62:84:ed:3e:61:ba:19:b3:ac:e0:69: 50:1e:fa:5d:d4:a9:e1:af:64:e9:46:56:7d:1f:6c: 06:f4:f5:6a:43:b9:cd:9d:4d:09:0d:30:2c:73:96: 96:68:9f:39:e0:ec:6d:3d:23:53:5b:43:d7:a5:e3: 18:81:5a:96:a1:cb:0f:bc:80:34:b4:15:ae:dd:4e: 31:06:3e:86:ec:37:d5:45:9b:ad:f6:49:3c:f4:a4: d2:4e:62:f0:94:96:16:8b:92:fc:6c:c8:1f:6d:52: fb:89:a9:88:5a:57:3f:d5:59:b6:8d:80:f7:55:1e: 6d:86:cd:25:fe:e7:eb:79:02:a9:d6:72:e9:d1:a2: 8e:ea:9c:78:d8:8b:60:17:8d:14:d8:11:0d:25:5b: ba:43:00:d8:60:90:0a:49:39:52:b9:bb:98:ec:d3: 8d:db:4f:83:3f:c8:fc:e5:b0:32:3f:6c:7b:d2:2b: 26:75:1b:b5:8e:98:96:3d:4d:43:a2:3f:43:ea:d2: 2d:4e:96:96:04:37:da:79:92:d1:a3:7d:71:f8:98: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:18:C0:9F:16:15:46:D1:5F:65:9D:10:27:43:F7:F7:DB:2F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/437990a1-2118-3c10-876c-e7495090df33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:46:59:52:49:6a:ab:a3:d8:40:28:ce:39:03:17:a1:93:30: 24:d3:31:5a:40:7c:0f:60:59:67:e5:3f:aa:ff:a6:33:09:28: b5:12:4f:66:bc:0e:72:54:89:96:7f:1e:79:f9:48:51:e9:8c: 3e:76:d0:f7:62:f9:24:b4:ba:dc:87:cc:4f:0a:67:19:fe:4c: bb:47:68:30:c7:71:c3:07:2c:69:b5:4b:c7:d7:97:bf:88:04: e4:5e:7b:de:4a:2c:3a:84:75:3c:e3:9b:3b:61:30:c1:da:b2: 0c:14:f1:16:88:e9:0c:a4:ce:9f:eb:1b:8b:fb:7e:0b:57:51: 1c:2e:b7:da:d4:fb:96:e1:28:80:76:c6:ec:0f:69:e7:5c:97: 27:9d:90:5d:87:75:7f:00:75:65:e0:d1:c6:1f:ff:f6:76:c7: 5f:ca:ad:f0:b5:ea:aa:1e:03:e7:07:bf:f6:45:ec:09:0b:5c: 3b:b4:d3:9b:ee:18:51:a9:f1:e0:b6:36:1c:aa:e0:6e:c9:70: 30:cf:fb:9b:89:0b:d4:c7:2f:99:7a:a7:77:aa:b2:62:14:c5: a8:7a:cf:f9:11:73:77:05:d0:5f:e1:f4:a0:ed:2b:ee:54:21: 81:45:31:38:c1:b5:21:09:b0:30:14:a8:09:6b:da:af:20:0b: 13:80:2e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOTLnR3bjh0Pm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWZkN2QxZTgtMTFjNy00NzJmLTkxMzktZTNkNmU0Y2I4MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3nEW3/4Rg8KAF6QX/UAluDxcPdDGz9KGoif u6bSMSdl9/kYlo9fT4VI/KBRGevoYoTtPmG6GbOs4GlQHvpd1Knhr2TpRlZ9H2wG 9PVqQ7nNnU0JDTAsc5aWaJ854OxtPSNTW0PXpeMYgVqWocsPvIA0tBWu3U4xBj6G 7DfVRZut9kk89KTSTmLwlJYWi5L8bMgfbVL7iamIWlc/1Vm2jYD3VR5ths0l/ufr eQKp1nLp0aKO6px42ItgF40U2BENJVu6QwDYYJAKSTlSubuY7NON20+DP8j85bAy P2x70ismdRu1jpiWPU1Doj9D6tItTpaWBDfaeZLRo31x+JgpaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2OGMCfFhVG0V9lnRAnQ/f32y8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM3OTkwYTEtMjExOC0z YzEwLTg3NmMtZTc0OTUwOTBkZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIo+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1GWVJJaquj2EAozjkDF6GTMCTTMVpAfA9gWWflP6r/pjMJKLUST2a8 DnJUiZZ/Hnn5SFHpjD520Pdi+SS0utyHzE8KZxn+TLtHaDDHccMHLGm1S8fXl7+I BORee95KLDqEdTzjmzthMMHasgwU8RaI6Qykzp/rG4v7fgtXURwut9rU+5bhKIB2 xuwPaedclyedkF2HdX8AdWXg0cYf//Z2x1/KrfC16qoeA+cHv/ZF7AkLXDu005vu GFGp8eC2Nhyq4G7JcDDP+5uJC9THL5l6p3eqsmIUxah6z/kRc3cF0F/h9KDtK+5U IYFFMTjBtSEJsDAUqAlr2q8gCxOALo8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:10 2025 by rpki-client