$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa File: ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa (raw, json) Hash identifier: U7TmtZsGMxqY7X7yTQS8aQSyeAiiraMZ39ST7FY1He8= Subject key identifier: 39:DF:92:BE:11:72:6D:2D:D9:E6:9F:29:BC:37:54:F8:D4:A0:6C:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849F2E550DB4E23EF3C5D56E780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 396982 IP address blocks: 34.12.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:50:db:4e:23:ef:3c:5d:56:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=6431fd2a-f31d-4eb9-97e3-ac1ee48986ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:16:c6:f3:6b:cf:c7:1e:2a:9d:e3:d9:6e:d0: 77:a7:cd:8c:26:d9:a7:8e:0c:60:6f:d6:26:56:64: 7f:bd:91:76:be:a1:f5:16:aa:f0:dc:23:f6:03:a0: 36:b1:61:f5:1c:bb:52:2c:44:29:dd:fa:67:84:7e: e7:56:b6:2e:cc:19:d6:49:4e:40:3e:a0:ca:c4:c2: d1:7e:cc:35:6d:da:84:e8:2f:2d:47:8d:2e:10:a0: 6d:b2:ad:5b:9b:68:18:ae:83:3c:a7:88:6d:a4:25: 66:ba:e4:57:58:be:b7:62:25:ff:d2:41:a0:7a:50: 86:83:03:5b:71:5a:59:c3:5d:00:87:f2:da:25:11: 37:21:3a:4e:47:5f:7a:f6:d7:66:3d:eb:54:4a:54: 0f:7f:c0:09:d2:f8:a5:35:54:26:f7:6a:94:d5:57: 67:33:df:3e:b1:b8:1f:b7:3d:0e:c8:79:15:70:d9: fb:3f:fc:fa:1c:0b:5e:1a:b1:c1:62:d4:f1:4b:43: 93:25:fa:55:0f:d3:24:2c:af:39:e5:94:db:0d:a3: 63:a6:f5:89:11:b2:36:47:9b:52:28:49:d6:b6:3f: d9:41:2b:f5:88:13:49:c7:07:4e:d5:69:3e:45:89: 35:24:84:d5:c0:8f:d0:01:3b:22:be:c1:27:1b:5f: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DF:92:BE:11:72:6D:2D:D9:E6:9F:29:BC:37:54:F8:D4:A0:6C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ba9e28c7-27a1-30f9-ba38-8e1ffc75b445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:29:1d:ab:8c:bf:a5:80:a7:16:b6:99:1b:3c:38:22:98:69: 67:7f:c8:e4:3b:0d:fa:91:e2:d4:a1:f5:45:83:49:46:8b:1b: 3d:72:d8:31:43:85:37:2f:6f:27:83:65:26:fd:e0:dc:a3:90: d2:04:29:74:8f:9b:56:1a:f8:90:d3:a0:8f:dc:4f:01:64:fd: 84:40:e4:e3:8f:3f:23:66:31:d9:df:83:2e:39:aa:ba:71:20: 67:df:45:52:73:2e:9c:cc:97:f3:c7:54:b6:ab:c7:a2:e0:91: 29:ed:52:f7:4f:51:93:1e:46:11:c9:7f:d8:84:d2:44:b6:54: 8f:f8:59:71:1e:b8:e5:a6:71:9e:da:1a:e9:6e:d0:78:70:19: d0:82:83:a2:99:16:9d:49:af:7d:8f:2d:58:88:14:3f:29:7b: e1:9d:e6:9d:66:56:92:fb:00:c5:b2:49:0e:f0:b0:cd:b3:4e: 41:70:0a:a7:e5:05:c7:7c:89:a9:a7:91:d1:20:40:74:ab:0c: bf:6c:11:4a:b9:36:2a:a7:bb:a7:83:e2:2d:91:9b:c3:47:ec: 45:fe:b7:b9:6a:7e:d5:69:e8:0c:5f:f5:90:da:a0:d0:5d:78: d3:57:0d:19:5d:19:b1:5a:34:1c:fd:da:33:fd:20:f8:9c:a4: 34:7c:39:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5VDbTiPvPF1W54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjQzMWZkMmEtZjMxZC00ZWI5LTk3ZTMtYWMxZWU0ODk4NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghbG82vPxx4qnePZbtB3p82MJtmnjgxgb9Ym VmR/vZF2vqH1Fqrw3CP2A6A2sWH1HLtSLEQp3fpnhH7nVrYuzBnWSU5APqDKxMLR fsw1bdqE6C8tR40uEKBtsq1bm2gYroM8p4htpCVmuuRXWL63YiX/0kGgelCGgwNb cVpZw10Ah/LaJRE3ITpOR1969tdmPetUSlQPf8AJ0vilNVQm92qU1VdnM98+sbgf tz0OyHkVcNn7P/z6HAteGrHBYtTxS0OTJfpVD9MkLK855ZTbDaNjpvWJEbI2R5tS KEnWtj/ZQSv1iBNJxwdO1Wk+RYk1JITVwI/QATsivsEnG18LZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnfkr4Rcm0t2eafKbw3VPjUoGzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmE5ZTI4YzctMjdhMS0z MGY5LWJhMzgtOGUxZmZjNzViNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkpHauMv6WApxa2mRs8OCKYaWd/yOQ7DfqR4tSh9UWDSUaLGz1y2DFD hTcvbyeDZSb94NyjkNIEKXSPm1Ya+JDToI/cTwFk/YRA5OOPPyNmMdnfgy45qrpx IGffRVJzLpzMl/PHVLarx6LgkSntUvdPUZMeRhHJf9iE0kS2VI/4WXEeuOWmcZ7a Gulu0HhwGdCCg6KZFp1Jr32PLViIFD8pe+Gd5p1mVpL7AMWySQ7wsM2zTkFwCqfl Bcd8iamnkdEgQHSrDL9sEUq5Niqnu6eD4i2Rm8NH7EX+t7lqftVp6Axf9ZDaoNBd eNNXDRldGbFaNBz92jP9IPicpDR8OYQ= -----END CERTIFICATE-----Generated at Sun Jun 15 05:01:07 2025 by rpki-client