$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7051f1f4-b0ce-3056-8dee-9d762f5d9f67.roa File: 7051f1f4-b0ce-3056-8dee-9d762f5d9f67.roa (raw, json) Hash identifier: oF/GyQsIzU9TPTV65C4u/FWKo75FYiCWeo2ecar+WxM= Subject key identifier: C9:41:4B:EE:0B:46:A9:25:F4:98:64:9B:0C:28:A5:D6:7A:9B:4C:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F0AE6B9EDD36563C4180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7051f1f4-b0ce-3056-8dee-9d762f5d9f67.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.128.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f0:ae:6b:9e:dd:36:56:3c:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=149749d6-8a15-40d1-9dc6-962bafc62477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:5d:c0:43:06:2c:7e:8f:14:fc:9e:f8:46: 9f:36:2f:ba:a6:84:c7:58:0f:1e:f7:9f:f5:94:52: 5c:29:8e:d6:c7:1d:d8:22:dd:45:08:ca:88:5e:51: db:dc:f3:89:d8:04:e7:32:dc:84:bf:f5:53:ca:df: f1:d0:0f:95:90:46:69:ac:9a:01:9f:09:80:09:bb: 9c:db:04:20:b0:a0:bf:eb:1c:41:30:90:43:b5:eb: aa:d5:68:bf:14:4f:fb:3b:44:ce:47:a2:dc:68:c3: b0:ae:11:bc:fd:f3:5b:54:27:ca:4b:0a:25:d9:e0: 04:d1:d6:26:d6:02:eb:2f:72:ec:d3:cd:55:e6:21: 12:63:2d:4a:6f:23:98:6f:52:14:71:b8:db:9b:2f: 14:b3:dd:d8:e7:fc:72:27:67:fb:9a:89:f1:5a:8a: cb:af:6c:fe:71:49:1c:b3:e2:96:19:4a:87:14:44: fc:47:b4:f8:2f:7d:e0:35:37:80:07:cd:15:c6:4d: b5:d4:38:49:7b:b1:03:cb:db:54:33:37:b9:28:e3: c3:3f:0a:17:26:17:60:f8:5d:10:ec:75:22:ac:a6: b3:c9:f4:73:71:13:10:11:d7:18:38:12:77:3f:e9: 8d:e4:e6:8e:47:51:0d:f9:20:96:87:c8:f1:7c:b1: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:41:4B:EE:0B:46:A9:25:F4:98:64:9B:0C:28:A5:D6:7A:9B:4C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7051f1f4-b0ce-3056-8dee-9d762f5d9f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:01:3c:d8:e3:6f:f6:8b:57:51:37:24:95:5f:7d:2d:48:01: 33:86:f6:cf:b1:eb:a6:74:6e:15:04:76:b6:ca:09:9e:a8:cd: 29:1c:eb:d8:05:ab:6a:0f:8b:4d:fd:c2:db:a4:0a:94:a2:ef: fe:94:5e:5d:b6:e4:73:ec:b0:c2:cd:62:a0:e3:ac:fc:9b:af: a9:0a:7f:05:b1:05:65:d6:f0:96:ac:d0:ff:32:f7:22:4c:b4: 4a:c2:46:94:b2:c1:c9:06:dd:c6:2c:62:62:55:ec:5e:6a:b6: 08:7e:96:b6:17:c1:e2:c5:cc:3d:81:73:a2:5d:ab:1d:3d:19: 08:99:e1:66:a4:1e:2f:5e:4a:ab:85:6a:45:de:a4:68:16:6a: 15:3c:8a:f3:55:07:86:5d:be:42:c3:29:90:96:c1:52:cb:61: c9:8e:ad:45:97:1c:21:0a:f3:b5:92:06:38:b1:38:3e:e0:90: 28:16:2d:45:7b:94:ea:9d:8b:26:51:71:c4:59:45:ee:a6:40: a0:0b:d2:61:fc:d6:75:e7:f3:5c:70:c9:61:a1:0c:94:f3:fd: 92:b8:31:3d:fa:87:f2:4d:5b:0b:02:58:f1:0f:cf:40:46:17: 02:38:de:07:c6:08:0f:36:76:b5:3f:63:59:88:d3:95:f1:88: 80:dc:db:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPCua57dNlY8QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTQ5NzQ5ZDYtOGExNS00MGQxLTlkYzYtOTYyYmFmYzYyNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQddwEMGLH6PFPye+EafNi+6poTHWA8e95/1 lFJcKY7Wxx3YIt1FCMqIXlHb3POJ2ATnMtyEv/VTyt/x0A+VkEZprJoBnwmACbuc 2wQgsKC/6xxBMJBDteuq1Wi/FE/7O0TOR6LcaMOwrhG8/fNbVCfKSwol2eAE0dYm 1gLrL3Ls081V5iESYy1KbyOYb1IUcbjbmy8Us93Y5/xyJ2f7monxWorLr2z+cUkc s+KWGUqHFET8R7T4L33gNTeAB80Vxk211DhJe7EDy9tUMze5KOPDPwoXJhdg+F0Q 7HUirKazyfRzcRMQEdcYOBJ3P+mN5OaOR1EN+SCWh8jxfLE5tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlBS+4LRqkl9JhkmwwopdZ6m0xQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzA1MWYxZjQtYjBjZS0z MDU2LThkZWUtOWQ3NjJmNWQ5ZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIBPNjjb/aLV1E3JJVffS1IATOG9s+x66Z0bhUEdrbKCZ6ozSkc69gF q2oPi039wtukCpSi7/6UXl225HPssMLNYqDjrPybr6kKfwWxBWXW8Jas0P8y9yJM tErCRpSywckG3cYsYmJV7F5qtgh+lrYXweLFzD2Bc6Jdqx09GQiZ4WakHi9eSquF akXepGgWahU8ivNVB4ZdvkLDKZCWwVLLYcmOrUWXHCEK87WSBjixOD7gkCgWLUV7 lOqdiyZRccRZRe6mQKAL0mH81nXn81xwyWGhDJTz/ZK4MT36h/JNWwsCWPEPz0BG FwI43gfGCA82drU/Y1mI05XxiIDc2/c= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:57 2025 by rpki-client