$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa File: c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa (raw, json) Hash identifier: r7r1Q3UL4Rvc52cbe0JTGmE6XBQkN1ipI2TxHLLKAas= Subject key identifier: 3C:AC:99:C0:81:19:AB:27:0D:DD:21:CA:8A:C1:A1:AD:B3:33:66:4C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E0F6F4AF231978652C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e0:f6:f4:af:23:19:78:65:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1ba14a4f-2bde-4850-95f5-6b6eef5aeee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:51:eb:a2:da:7a:68:c5:7e:03:f7:27:6d: 26:10:80:7b:be:95:8b:2e:3d:da:49:3f:bd:c6:82: 87:74:9d:f3:31:2b:ca:d5:05:6b:fd:f9:1d:3d:91: 15:06:94:62:57:4b:ed:a2:fa:63:d3:81:1a:56:43: 21:4f:e7:49:64:c2:a5:fd:5f:82:23:8f:9b:ff:c6: 5a:76:d8:d5:6a:6c:de:96:eb:92:80:69:34:e7:8d: d6:12:1b:85:ce:74:51:80:11:3b:53:28:f2:96:f8: e3:0f:fd:a1:34:43:ff:44:10:c3:0c:ca:61:89:f9: 8c:f5:6b:33:36:a1:b6:72:de:9b:ba:48:5b:df:86: 63:d1:48:9c:20:be:19:d8:ff:5f:63:e1:e3:dc:b8: bd:db:da:59:bb:34:18:6f:72:d4:f2:25:f6:f2:1c: 49:10:db:a3:d9:21:4f:87:8d:5d:92:4a:e7:f7:8e: 1c:dd:f2:d3:38:7a:4e:96:11:e6:1f:c7:48:12:f6: d0:fb:a4:be:b3:09:37:c8:b6:7c:8b:c2:49:2a:a5: b1:75:89:49:0c:45:50:29:95:0b:82:8c:c7:c9:7d: 0c:cd:87:5a:6b:55:99:c1:90:fe:44:a7:50:e0:45: bc:6a:e4:25:82:8f:16:48:f4:06:7e:d0:de:67:56: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:99:C0:81:19:AB:27:0D:DD:21:CA:8A:C1:A1:AD:B3:33:66:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8ae072f-c308-3d62-8ba8-4d3bfac5129e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.168.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3f:d2:4e:a2:80:aa:5d:91:e9:fc:8a:37:60:2a:65:ab:ac: 58:eb:e6:d2:e9:33:32:c5:a2:29:16:f5:9e:97:98:e4:3c:e4: ce:2f:10:d9:a6:98:1a:bd:9b:30:4a:6b:1a:f0:0c:e9:8e:c2: 83:66:14:0c:ae:22:da:a1:db:5f:cf:c4:6d:87:2f:64:73:3c: 0c:f8:e5:26:95:38:69:f9:d1:0e:c6:78:c7:10:25:6f:b0:60: ac:8a:95:69:ce:4b:ed:34:ad:35:51:45:b3:9f:e8:1d:61:23: 98:8e:11:f8:9a:fb:7c:1b:fd:cb:df:a6:1d:e2:01:b5:78:50: e1:74:11:42:9f:2a:2e:53:96:7d:7a:42:3c:cc:63:11:1e:3c: 34:38:c1:64:52:c7:44:dc:26:b8:8e:e6:92:9a:78:d7:10:5f: 5c:fe:66:f4:20:cb:1e:d9:1c:a1:1b:94:be:41:0f:f0:b9:85: 28:fb:ac:2b:93:b4:92:b5:c0:b9:8e:15:5d:0a:81:1b:4e:dc: 22:77:d6:1e:2f:42:e6:67:bb:3a:8d:65:fa:46:0e:e4:ea:72: c8:c5:13:9c:22:b1:99:79:aa:c0:2a:89:4e:0f:41:aa:cc:9b: dd:a3:9c:80:1a:51:36:62:e8:6d:94:9c:ad:19:c1:a1:4b:1b: b6:2a:eb:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOD29K8jGXhlLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWJhMTRhNGYtMmJkZS00ODUwLTk1ZjUtNmI2ZWVmNWFlZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+hR66LaemjFfgP3J20mEIB7vpWLLj3aST+9 xoKHdJ3zMSvK1QVr/fkdPZEVBpRiV0vtovpj04EaVkMhT+dJZMKl/V+CI4+b/8Za dtjVamzeluuSgGk0543WEhuFznRRgBE7UyjylvjjD/2hNEP/RBDDDMphifmM9Wsz NqG2ct6bukhb34Zj0UicIL4Z2P9fY+Hj3Li929pZuzQYb3LU8iX28hxJENuj2SFP h41dkkrn944c3fLTOHpOlhHmH8dIEvbQ+6S+swk3yLZ8i8JJKqWxdYlJDEVQKZUL gozHyX0MzYdaa1WZwZD+RKdQ4EW8auQlgo8WSPQGftDeZ1ZoLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDysmcCBGasnDd0hyorBoa2zM2ZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzhhZTA3MmYtYzMwOC0z ZDYyLThiYTgtNGQzYmZhYzUxMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU/0k6igKpdken8ijdgKmWrrFjr5tLpMzLFoikW9Z6XmOQ85M4vENmm mBq9mzBKaxrwDOmOwoNmFAyuItqh21/PxG2HL2RzPAz45SaVOGn50Q7GeMcQJW+w YKyKlWnOS+00rTVRRbOf6B1hI5iOEfia+3wb/cvfph3iAbV4UOF0EUKfKi5Tln16 QjzMYxEePDQ4wWRSx0TcJriO5pKaeNcQX1z+ZvQgyx7ZHKEblL5BD/C5hSj7rCuT tJK1wLmOFV0KgRtO3CJ31h4vQuZnuzqNZfpGDuTqcsjFE5wisZl5qsAqiU4PQarM m92jnIAaUTZi6G2UnK0ZwaFLG7Yq62U= -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:54 2025 by rpki-client