$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa File: b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa (raw, json) Hash identifier: ibWaCd5Yo327A3SUGYWLmOvP8GgZmAi9ALRyykkeusE= Subject key identifier: 8F:87:59:CD:F4:BF:EB:BD:8F:09:9C:DA:A8:3E:05:D7:42:68:27:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78518E715854F87CE8F1D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.98.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:e7:15:85:4f:87:ce:8f:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9f79b135-f669-41a6-acbf-ef372533e719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0d:13:8d:aa:98:b1:2b:85:35:d1:07:c5:da: 63:d3:9f:01:0a:96:52:9d:26:53:41:30:ea:1f:d5: 43:d0:e1:fc:10:28:34:e9:a6:45:03:9f:05:40:fa: 20:fb:9b:02:4d:95:89:80:4c:1f:ac:6b:23:2d:4c: 48:5e:ff:7f:2a:e6:27:ce:2b:77:0e:eb:9e:10:69: 34:b2:5c:71:d3:31:7a:da:70:eb:af:e0:03:7d:ec: fd:3b:e9:fb:a3:a4:8c:a0:51:7b:68:b3:2e:1e:9e: d1:51:3f:fd:cd:85:b1:9c:62:96:1f:c4:7a:97:67: 17:91:be:21:a8:a6:b4:b8:0a:54:37:eb:62:c5:a0: 09:b0:16:68:7d:bc:a4:02:a9:06:8a:80:4e:65:fc: 8e:f2:b7:53:41:10:d0:72:6b:67:70:82:da:e4:2b: 6c:15:e3:8c:b2:48:b6:bc:a8:63:2c:3c:38:1a:44: 22:08:89:bd:9e:5f:e5:2d:c2:cd:4d:17:14:05:13: 70:cd:dd:4c:a8:06:d8:92:7c:73:51:3a:89:1f:07: 41:29:44:d1:90:6a:a1:aa:d3:22:f5:e5:e2:cc:b6: 18:fa:1f:5b:c2:60:8e:21:df:59:c2:2d:ca:c8:5a: 4f:58:d0:c0:7b:ce:01:69:72:53:cf:ac:23:77:3d: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:87:59:CD:F4:BF:EB:BD:8F:09:9C:DA:A8:3E:05:D7:42:68:27:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b38dc9df-87e6-36e1-bb67-bd0c608a33b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3d:78:27:1b:e7:e4:5c:ec:12:46:aa:8c:38:56:e5:ba:a9: e8:6d:6b:d3:0d:12:f0:85:f5:6c:ee:5f:7f:10:0a:24:97:54: e5:98:ef:15:c5:28:33:f3:54:20:52:d3:70:cd:1a:5f:b4:e0: d3:06:68:19:68:f3:cd:ca:da:40:65:b6:b8:e2:84:9c:66:ce: 9b:b7:5c:30:7f:11:e2:6e:dc:dc:2b:e7:de:68:14:f2:e0:93: 37:e4:86:4d:30:fd:c3:1f:10:6d:34:71:32:20:a8:b5:4a:d6: a7:28:92:a1:3b:0e:2b:25:ac:57:0f:49:2f:fb:aa:ac:43:19: 78:8c:28:da:2d:44:de:10:5b:17:07:2f:9d:e5:be:58:d7:ab: 18:02:04:e2:5e:1b:22:3b:24:a0:6c:bd:ae:08:36:55:8d:8c: af:11:59:2c:88:74:d8:fc:62:ad:44:d2:82:fe:d0:da:5f:e6: 54:8a:b1:81:3d:a2:91:dc:85:96:78:9d:e1:be:15:e4:b6:18: 91:54:bb:94:c5:88:3a:bb:86:c9:16:cf:3d:6c:3b:0d:12:db: 80:f5:a0:37:82:b3:d3:22:aa:e5:4e:84:58:9e:13:28:dd:36: 22:91:b6:0e:55:8a:00:34:e3:4d:02:e5:45:10:cc:19:70:96: 80:87:83:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRjnFYVPh86PHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWY3OWIxMzUtZjY2OS00MWE2LWFjYmYtZWYzNzI1MzNlNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg0TjaqYsSuFNdEHxdpj058BCpZSnSZTQTDq H9VD0OH8ECg06aZFA58FQPog+5sCTZWJgEwfrGsjLUxIXv9/KuYnzit3DuueEGk0 slxx0zF62nDrr+ADfez9O+n7o6SMoFF7aLMuHp7RUT/9zYWxnGKWH8R6l2cXkb4h qKa0uApUN+tixaAJsBZofbykAqkGioBOZfyO8rdTQRDQcmtncILa5CtsFeOMski2 vKhjLDw4GkQiCIm9nl/lLcLNTRcUBRNwzd1MqAbYknxzUTqJHwdBKUTRkGqhqtMi 9eXizLYY+h9bwmCOId9Zwi3KyFpPWNDAe84BaXJTz6wjdz2GoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+HWc30v+u9jwmc2qg+BddCaCfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM4ZGM5ZGYtODdlNi0z NmUxLWJiNjctYmQwYzYwOGEzM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE9eCcb5+Rc7BJGqow4VuW6qehta9MNEvCF9WzuX38QCiSXVOWY7xXF KDPzVCBS03DNGl+04NMGaBlo883K2kBltrjihJxmzpu3XDB/EeJu3Nwr595oFPLg kzfkhk0w/cMfEG00cTIgqLVK1qcokqE7DislrFcPSS/7qqxDGXiMKNotRN4QWxcH L53lvljXqxgCBOJeGyI7JKBsva4INlWNjK8RWSyIdNj8Yq1E0oL+0Npf5lSKsYE9 opHchZZ4neG+FeS2GJFUu5TFiDq7hskWzz1sOw0S24D1oDeCs9MiquVOhFieEyjd NiKRtg5VigA0400C5UUQzBlwloCHgyw= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:16 2025 by rpki-client