$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78486c01-1a6f-3d6a-9e97-a8bf438e86db.roa File: 78486c01-1a6f-3d6a-9e97-a8bf438e86db.roa (raw, json) Hash identifier: HJxW9AZRP09bQapQwkag2qNWYyDMQRfZmkx6Sz61trs= Subject key identifier: 3A:5B:1F:D7:5E:CE:CC:9B:FD:CC:65:3F:EB:50:18:62:82:E1:4E:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C835CD2224D91B5E1C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78486c01-1a6f-3d6a-9e97-a8bf438e86db.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.128.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c8:35:cd:22:24:d9:1b:5e:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fa579a17-f73e-451c-9145-fe2514ba83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:1c:99:9c:97:f3:1b:bd:10:47:bf:f6:28: 1a:4b:00:77:a3:76:45:ab:8d:20:32:c9:38:2b:c0: f5:15:a0:fd:cc:51:aa:84:5b:2a:42:52:99:43:7b: e7:d8:c7:59:7f:fa:29:6b:98:8c:f2:40:ca:21:5d: 8c:d6:6a:c4:03:e4:f0:10:4d:cd:00:1f:c6:94:d2: 9b:b0:dc:51:1e:4b:c4:80:02:52:b2:2e:01:a4:7c: e5:25:17:d0:f6:47:69:af:55:2c:9c:d0:79:63:06: 59:8a:d0:ed:a0:f1:cc:b9:1c:0f:36:1c:d2:97:3f: 69:fe:44:35:59:16:3e:e2:b2:9b:95:03:97:f1:ac: e0:cb:a5:22:79:dc:32:b5:63:36:44:8d:c7:3d:87: 1f:fe:c6:87:68:a1:80:ee:fc:e0:59:27:17:75:4a: 0f:94:5c:66:3e:1b:32:01:15:e3:f7:c5:06:57:cd: 83:ca:d9:48:46:c3:7b:e4:46:c4:a7:ea:9b:27:b8: db:d3:7c:01:c5:c3:d7:ea:a0:9e:db:f0:4f:a7:73: af:fd:ce:63:a1:58:1e:b0:9d:b8:d5:b2:44:66:07: 00:0a:b6:f9:26:df:43:6b:57:4a:8a:c1:0e:c6:00: 6e:91:72:e8:1c:8b:a7:91:d5:2c:51:f1:9e:c5:c1: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5B:1F:D7:5E:CE:CC:9B:FD:CC:65:3F:EB:50:18:62:82:E1:4E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78486c01-1a6f-3d6a-9e97-a8bf438e86db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d3:b3:e1:6f:d5:7a:cf:9e:8b:89:e3:de:53:a9:04:4f:27: ca:05:ef:ce:c3:b0:b3:d5:e1:05:c7:83:3b:8e:9f:5f:94:6e: 38:8b:ff:55:c4:bb:1b:b8:52:77:9e:24:44:ba:4e:34:76:98: db:2c:72:f2:b6:b2:4b:1a:02:6d:1d:39:19:02:93:72:73:fd: d7:65:04:1c:cd:54:57:f7:6b:21:43:0b:4b:55:4f:fa:15:c1: 74:5f:89:4f:fb:cf:92:2d:37:e1:d2:03:73:90:c6:e3:66:b9: 30:e7:65:77:f3:ba:76:05:32:04:87:8f:eb:4e:69:7a:15:f8: 92:35:1a:33:1a:06:49:4f:73:93:6a:54:fd:eb:f4:c2:12:07: 53:9e:43:11:de:2c:5a:3d:eb:3c:b3:34:0b:95:1c:8c:86:c4: b0:40:11:20:01:b3:82:e7:1a:20:f8:58:de:c7:61:18:e0:14: 33:8b:d2:8f:6e:d7:dc:a3:00:db:bd:02:b8:fb:9c:aa:d0:34: af:75:c0:51:76:8f:ad:bc:7b:dd:71:cf:0c:67:d3:02:85:81: ec:0e:85:6b:bf:e2:c3:66:16:94:4c:d5:21:eb:26:72:f1:e9: 48:c5:6c:5d:8f:93:61:1c:dd:b3:42:f6:72:59:44:cc:52:81: 88:f6:6c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMg1zSIk2RteHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmE1NzlhMTctZjczZS00NTFjLTkxNDUtZmUyNTE0YmE4M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SAcmZyX8xu9EEe/9igaSwB3o3ZFq40gMsk4 K8D1FaD9zFGqhFsqQlKZQ3vn2MdZf/opa5iM8kDKIV2M1mrEA+TwEE3NAB/GlNKb sNxRHkvEgAJSsi4BpHzlJRfQ9kdpr1UsnNB5YwZZitDtoPHMuRwPNhzSlz9p/kQ1 WRY+4rKblQOX8azgy6UiedwytWM2RI3HPYcf/saHaKGA7vzgWScXdUoPlFxmPhsy ARXj98UGV82DytlIRsN75EbEp+qbJ7jb03wBxcPX6qCe2/BPp3Ov/c5joVgesJ24 1bJEZgcACrb5Jt9Da1dKisEOxgBukXLoHIunkdUsUfGexcEMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpbH9dezsyb/cxlP+tQGGKC4U5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzg0ODZjMDEtMWE2Zi0z ZDZhLTllOTctYThiZjQzOGU4NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfTs+Fv1XrPnouJ495TqQRPJ8oF787DsLPV4QXHgzuOn1+UbjiL/1XE uxu4UneeJES6TjR2mNsscvK2sksaAm0dORkCk3Jz/ddlBBzNVFf3ayFDC0tVT/oV wXRfiU/7z5ItN+HSA3OQxuNmuTDnZXfzunYFMgSHj+tOaXoV+JI1GjMaBklPc5Nq VP3r9MISB1OeQxHeLFo96zyzNAuVHIyGxLBAESABs4LnGiD4WN7HYRjgFDOL0o9u 19yjANu9Arj7nKrQNK91wFF2j628e91xzwxn0wKFgewOhWu/4sNmFpRM1SHrJnLx 6UjFbF2Pk2Ec3bNC9nJZRMxSgYj2bHQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:41 2025 by rpki-client