$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4378b54-bc0c-3dc5-8863-0de4459ada35.roa File: d4378b54-bc0c-3dc5-8863-0de4459ada35.roa (raw, json) Hash identifier: cmjEZG6NnFKm+IJHt/bsxA5Tmmx1Qm/i1hVfm47cBvo= Subject key identifier: 90:F4:BA:F8:94:13:77:92:1B:83:43:1C:03:72:50:D9:FC:23:92:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78538605D008C58ACE0CD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4378b54-bc0c-3dc5-8863-0de4459ada35.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.177.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:38:60:5d:00:8c:58:ac:e0:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=41fc3949-6314-4fe9-b2d5-ba28ec6bab22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:79:a1:65:28:4c:f1:a0:55:d5:66:7c:10: ef:b9:a2:8a:7a:b6:96:2e:5a:2a:e6:c7:49:20:90: e8:c0:fb:08:f1:d2:80:88:72:e5:f3:cd:b0:e1:eb: fd:5a:52:0b:1e:ee:0a:99:e0:2c:cc:3c:0c:80:cd: 60:8e:49:05:49:fc:ac:9e:ca:7b:b9:46:29:ad:80: 24:47:b8:c8:b6:9c:bc:32:3d:c9:f4:3d:08:a5:f9: 10:95:91:01:13:0f:33:ed:99:57:c1:fc:4c:88:70: 00:b3:ec:e4:85:43:ac:0f:9b:87:06:f2:57:9c:df: 7e:da:5d:41:e9:2f:fe:54:da:cc:ed:86:cd:3c:69: 2b:f1:4d:ad:b5:3d:de:58:92:1d:1c:ce:27:45:4a: fe:7c:e8:e9:4b:47:8d:c8:7e:18:44:5a:73:e8:d2: c2:5c:12:84:b9:3c:60:df:37:20:7f:9e:82:55:21: a8:a5:a9:ef:0b:ab:5e:82:35:5d:f6:4e:ad:73:f2: d4:fc:00:ba:7e:c0:ae:82:ed:a1:a0:ff:a0:c4:27: d9:ff:f1:aa:6a:9d:de:c5:fd:8d:6d:99:bd:da:60: fd:08:31:65:8f:73:c9:31:34:7b:fd:90:c4:5f:81: b4:2d:ff:ac:2b:38:39:9a:0f:d6:a9:e5:8e:68:cf: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F4:BA:F8:94:13:77:92:1B:83:43:1C:03:72:50:D9:FC:23:92:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d4378b54-bc0c-3dc5-8863-0de4459ada35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.177.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:9a:e3:70:14:8d:47:e9:52:f3:99:fa:31:64:f8:aa:89:0e: 9e:57:99:6b:09:e0:98:d4:eb:1c:d2:47:d9:43:37:db:6a:68: 0e:94:a2:21:20:ce:9f:1b:8b:43:57:4c:c4:15:03:45:77:a8: 92:2f:ca:e7:31:91:6b:a8:0e:a0:20:dd:5e:c7:9f:34:38:29: 00:b2:af:dd:bd:0b:8e:68:98:9a:b7:04:54:4e:54:9b:6b:97: ff:3e:bd:a7:f0:ae:2a:07:53:5b:04:06:9e:f9:cd:04:0f:e8: 49:8b:d9:1f:ca:b0:21:19:54:32:fe:ff:d8:a9:e0:d4:4d:21: 3a:86:ae:36:93:4a:50:f2:46:f7:11:b8:71:48:22:0c:06:c6: ec:39:9f:d8:8b:18:11:14:03:17:78:1d:89:64:2d:81:b7:79: 8b:94:3d:de:ed:74:ea:2c:42:a3:bd:a2:c1:01:5c:fd:db:03: 2e:17:a5:47:a7:fe:71:40:de:21:ed:e7:34:d4:40:df:32:45: 28:f7:95:74:29:26:af:35:08:75:0e:21:a7:64:f0:96:69:17: b7:81:56:4c:5f:78:de:b1:96:07:70:aa:9a:d4:86:1f:49:78: 19:28:21:cd:52:7e:d7:47:02:ff:87:12:f3:cb:cc:77:92:49: 7a:4e:de:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhThgXQCMWKzgzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDFmYzM5NDktNjMxNC00ZmU5LWIyZDUtYmEyOGVjNmJhYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7F5oWUoTPGgVdVmfBDvuaKKeraWLloq5sdJ IJDowPsI8dKAiHLl882w4ev9WlILHu4KmeAszDwMgM1gjkkFSfysnsp7uUYprYAk R7jItpy8Mj3J9D0IpfkQlZEBEw8z7ZlXwfxMiHAAs+zkhUOsD5uHBvJXnN9+2l1B 6S/+VNrM7YbNPGkr8U2ttT3eWJIdHM4nRUr+fOjpS0eNyH4YRFpz6NLCXBKEuTxg 3zcgf56CVSGopanvC6tegjVd9k6tc/LU/AC6fsCugu2hoP+gxCfZ//Gqap3exf2N bZm92mD9CDFlj3PJMTR7/ZDEX4G0Lf+sKzg5mg/WqeWOaM8DuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD0uviUE3eSG4NDHANyUNn8I5KtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQzNzhiNTQtYmMwYy0z ZGM1LTg4NjMtMGRlNDQ1OWFkYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIrGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIia43AUjUfpUvOZ+jFk+KqJDp5XmWsJ4JjU6xzSR9lDN9tqaA6UoiEg zp8bi0NXTMQVA0V3qJIvyucxkWuoDqAg3V7HnzQ4KQCyr929C45omJq3BFROVJtr l/8+vafwrioHU1sEBp75zQQP6EmL2R/KsCEZVDL+/9ip4NRNITqGrjaTSlDyRvcR uHFIIgwGxuw5n9iLGBEUAxd4HYlkLYG3eYuUPd7tdOosQqO9osEBXP3bAy4XpUen /nFA3iHt5zTUQN8yRSj3lXQpJq81CHUOIadk8JZpF7eBVkxfeN6xlgdwqprUhh9J eBkoIc1SftdHAv+HEvPLzHeSSXpO3jQ= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:05 2025 by rpki-client