$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98e2b70f-b300-3f65-84aa-e705e1385ca6.roa File: 98e2b70f-b300-3f65-84aa-e705e1385ca6.roa (raw, json) Hash identifier: voFGS6UcrXbbqwpGAUc8tv3F3zGo/dwmjBROjDKoW+Q= Subject key identifier: B7:6F:7A:90:18:79:C0:BB:64:62:3D:3A:53:94:B2:BA:42:D4:02:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EAAB6432A50678E71180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98e2b70f-b300-3f65-84aa-e705e1385ca6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.164.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:ab:64:32:a5:06:78:e7:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b9a5a6c3-5f45-466b-aa94-7f2f32d16010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:e7:0a:58:85:83:59:3e:2f:00:e7:cf:16: 66:53:2c:c9:ad:95:0c:88:e1:b2:ff:63:da:d8:bd: 94:aa:e6:a5:87:6c:8a:b3:f1:c8:5e:47:45:59:bb: e3:19:e1:78:ca:96:4b:0e:e0:8a:d0:b2:c1:9b:ba: d4:95:b7:23:04:33:1b:bc:42:bf:a6:8c:2d:52:a8: 54:f4:d5:f6:2b:6f:5a:b9:71:23:90:91:bd:cc:21: 9f:49:a2:c4:8e:50:d6:a2:c5:31:36:38:00:45:92: ed:96:73:3c:00:74:13:46:32:35:2b:65:6f:dd:9d: 74:f9:dd:62:07:a3:b0:8e:91:d8:49:35:18:09:6b: 35:b8:be:12:67:97:04:b1:90:64:a6:17:10:3f:98: 61:fd:45:c3:8c:e0:38:5b:8a:f8:dd:fa:d1:97:53: 36:c5:bb:be:42:cc:70:f5:d6:61:4d:ee:9c:83:52: 06:ce:77:df:3b:ba:5f:17:f3:56:da:45:e1:1b:ad: fb:96:0c:0c:87:82:3e:81:4e:ee:f1:47:24:3e:a9: 62:0f:c3:fb:24:72:45:57:ee:80:e4:a5:9d:fe:ed: 86:b1:54:d2:bf:54:fa:85:54:2b:fc:a9:f9:78:8b: 6d:b2:03:e2:5b:63:b0:9f:63:f6:65:91:6f:64:55: 53:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:7A:90:18:79:C0:BB:64:62:3D:3A:53:94:B2:BA:42:D4:02:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98e2b70f-b300-3f65-84aa-e705e1385ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.164.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:36:94:45:79:c7:4b:bb:6e:91:bc:5c:cf:ca:2a:30:6f:ac: d2:13:07:21:ac:42:1e:df:7a:8d:87:97:a2:44:80:a0:11:e6: 30:5c:2b:1b:15:fe:fd:69:51:fd:a7:1c:fe:52:98:41:02:fa: 1d:b1:7f:a0:48:61:d8:39:07:1e:24:11:9e:aa:3d:98:35:b9: 80:23:66:51:68:a8:7b:d9:ce:18:ec:ed:4a:09:56:43:78:36: a7:05:0a:09:86:5f:d0:dd:26:08:6f:ec:d1:0e:10:4d:04:80: 7e:2f:bc:04:73:3a:61:84:b6:a1:9d:b0:f8:a3:88:0e:50:7b: ca:1c:d8:2b:b7:43:f2:6c:9c:e7:81:e5:96:5b:73:6d:fd:ba: 21:e8:ca:18:e5:ba:f0:9f:65:40:69:f1:7d:77:bc:40:a3:17: 59:ed:5c:5d:b7:f4:4d:1b:0f:88:7e:7b:2f:6f:59:b2:de:28: 2f:e0:a7:8d:a8:2a:4d:06:0b:e8:e6:81:df:eb:95:16:11:0e: 76:fd:65:4d:7b:c7:c3:52:41:88:8f:ec:69:80:b9:9a:0b:94: 28:1e:b0:19:15:dc:a3:f4:ab:3d:0c:6f:e0:5c:06:0b:4a:2e: ca:68:f4:aa:11:bc:ec:35:63:c5:cd:9b:5a:20:1d:b3:55:e6: 7a:06:b8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOqrZDKlBnjnEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjlhNWE2YzMtNWY0NS00NjZiLWFhOTQtN2YyZjMyZDE2MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5XnCliFg1k+LwDnzxZmUyzJrZUMiOGy/2Pa 2L2Uqualh2yKs/HIXkdFWbvjGeF4ypZLDuCK0LLBm7rUlbcjBDMbvEK/powtUqhU 9NX2K29auXEjkJG9zCGfSaLEjlDWosUxNjgARZLtlnM8AHQTRjI1K2Vv3Z10+d1i B6OwjpHYSTUYCWs1uL4SZ5cEsZBkphcQP5hh/UXDjOA4W4r43frRl1M2xbu+Qsxw 9dZhTe6cg1IGznffO7pfF/NW2kXhG637lgwMh4I+gU7u8UckPqliD8P7JHJFV+6A 5KWd/u2GsVTSv1T6hVQr/Kn5eIttsgPiW2Own2P2ZZFvZFVTwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdvepAYecC7ZGI9OlOUsrpC1AJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThlMmI3MGYtYjMwMC0z ZjY1LTg0YWEtZTcwNWUxMzg1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM2lEV5x0u7bpG8XM/KKjBvrNITByGsQh7feo2Hl6JEgKAR5jBcKxsV /v1pUf2nHP5SmEEC+h2xf6BIYdg5Bx4kEZ6qPZg1uYAjZlFoqHvZzhjs7UoJVkN4 NqcFCgmGX9DdJghv7NEOEE0EgH4vvARzOmGEtqGdsPijiA5Qe8oc2Cu3Q/JsnOeB 5ZZbc239uiHoyhjluvCfZUBp8X13vECjF1ntXF239E0bD4h+ey9vWbLeKC/gp42o Kk0GC+jmgd/rlRYRDnb9ZU17x8NSQYiP7GmAuZoLlCgesBkV3KP0qz0Mb+BcBgtK Lspo9KoRvOw1Y8XNm1ogHbNV5noGuFA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:22 2025 by rpki-client