$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76921948-c0ca-3eec-a10a-83c1e6b021ea.roa File: 76921948-c0ca-3eec-a10a-83c1e6b021ea.roa (raw, json) Hash identifier: Vu9uLYv9Pv09jDfhuYV/D75tGbp/BSwkzZ0Xq6tmO24= Subject key identifier: C0:8C:10:97:B2:DC:EB:E1:F1:93:5B:BA:C0:05:98:63:20:80:02:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853DC735FA6B9C2F206C8A Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76921948-c0ca-3eec-a10a-83c1e6b021ea.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.22.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3d:c7:35:fa:6b:9c:2f:20:6c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c57447ea-6894-4dd2-855d-f1de454f986f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:af:53:b6:3b:d0:a8:b3:5c:47:06:ee:cb: 07:65:d8:4f:74:cf:fb:85:6d:22:8c:36:d3:37:7d: 4c:1a:c4:c5:4d:41:9d:55:6e:7c:5b:a9:a6:4e:2f: 4a:55:21:dc:2d:90:e7:62:31:f7:6d:36:1d:97:8b: 7d:c2:c9:92:82:1c:80:89:cd:6c:42:3f:05:0d:76: 89:02:f5:70:6d:e3:9d:3a:87:b6:d9:77:34:64:5f: ce:f6:47:fa:65:a3:d7:99:b1:16:82:ec:c0:ef:21: 33:79:47:30:2d:ba:d0:65:74:15:a9:3d:51:5e:7c: 67:ae:0b:d0:26:ba:9a:71:86:19:36:76:10:19:a3: ca:0e:44:ca:37:32:57:8b:a2:f7:6a:ea:04:e6:d0: 3d:ad:46:d8:b8:b4:a6:32:3e:4b:43:b5:3d:b5:5f: b6:f7:4f:cd:15:2b:bb:3f:ba:dd:d0:7a:39:c4:1a: bc:56:3f:2a:da:52:0d:9e:83:d8:71:15:2d:ab:3f: c3:ae:88:45:98:f5:a2:74:be:52:d5:bd:7e:f1:c1: f0:cb:6f:86:ef:43:a9:d1:58:bc:17:d8:09:d6:36: 65:a4:42:5d:ce:da:eb:fa:1b:da:01:11:e4:ea:fa: 29:a3:3e:f6:31:94:63:e0:97:05:f3:99:35:17:5a: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8C:10:97:B2:DC:EB:E1:F1:93:5B:BA:C0:05:98:63:20:80:02:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76921948-c0ca-3eec-a10a-83c1e6b021ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.22.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:71:da:21:07:cb:60:fd:91:c8:e6:4d:4f:51:e5:6c:86:97: 99:f9:a4:4c:b7:cb:9e:0a:c0:73:12:8e:5c:bb:07:65:a2:f0: 0a:82:89:7c:9a:ca:c6:33:1a:0f:b1:69:33:c8:48:cf:5e:d1: 7b:df:b3:ec:6c:34:6c:7b:4d:d3:2b:9e:a1:e7:59:3b:a4:72: 3f:05:46:a0:46:b4:66:30:85:a4:52:3d:44:1a:9f:aa:0c:98: 89:94:ce:84:d6:a7:01:2b:8c:79:b1:b9:bb:81:6e:45:42:8a: 7e:9b:5d:21:a2:3a:93:53:d4:33:19:e7:48:06:05:fe:cf:42: 37:4a:4b:71:26:a3:be:9f:6b:d3:69:61:bb:74:6c:43:1c:3b: 4e:79:9c:40:d3:56:2b:14:be:14:eb:aa:a6:89:5a:67:ff:02: b0:29:a4:38:fc:83:f8:33:52:0b:7a:8e:8d:61:f7:be:b7:4d: 35:28:e3:dd:9a:04:eb:05:34:34:a8:57:7f:65:75:8b:fe:90: 3f:16:de:63:dc:4c:4e:e5:5b:ff:e5:d5:4d:b9:44:c2:49:0e: 75:09:9f:18:8c:6e:ad:0d:48:58:33:27:1c:b9:62:ad:9b:bc: 56:a9:72:24:6c:c4:6a:23:7b:e4:a4:6d:38:88:b3:89:00:07: dd:0e:bb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT3HNfprnC8gbIowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzU3NDQ3ZWEtNjg5NC00ZGQyLTg1NWQtZjFkZTQ1NGY5ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPavU7Y70KizXEcG7ssHZdhPdM/7hW0ijDbT N31MGsTFTUGdVW58W6mmTi9KVSHcLZDnYjH3bTYdl4t9wsmSghyAic1sQj8FDXaJ AvVwbeOdOoe22Xc0ZF/O9kf6ZaPXmbEWguzA7yEzeUcwLbrQZXQVqT1RXnxnrgvQ JrqacYYZNnYQGaPKDkTKNzJXi6L3auoE5tA9rUbYuLSmMj5LQ7U9tV+290/NFSu7 P7rd0Ho5xBq8Vj8q2lINnoPYcRUtqz/DrohFmPWidL5S1b1+8cHwy2+G70Op0Vi8 F9gJ1jZlpEJdztrr+hvaARHk6vopoz72MZRj4JcF85k1F1ofJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCMEJey3Ovh8ZNbusAFmGMggAIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzY5MjE5NDgtYzBjYS0z ZWVjLWExMGEtODNjMWU2YjAyMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhx2iEHy2D9kcjmTU9R5WyGl5n5pEy3y54KwHMSjly7B2Wi8AqCiXya ysYzGg+xaTPISM9e0Xvfs+xsNGx7TdMrnqHnWTukcj8FRqBGtGYwhaRSPUQan6oM mImUzoTWpwErjHmxubuBbkVCin6bXSGiOpNT1DMZ50gGBf7PQjdKS3Emo76fa9Np Ybt0bEMcO055nEDTVisUvhTrqqaJWmf/ArAppDj8g/gzUgt6jo1h9763TTUo492a BOsFNDSoV39ldYv+kD8W3mPcTE7lW//l1U25RMJJDnUJnxiMbq0NSFgzJxy5Yq2b vFapciRsxGoje+SkbTiIs4kAB90Ou04= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:59 2025 by rpki-client