$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa File: d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa (raw, json) Hash identifier: PBEAXnb9wtkFXJiD4v5fmGpf9urETo9CL2SKDDM0VOo= Subject key identifier: 7F:2F:E8:CF:B5:71:03:1D:41:1D:09:A6:0C:44:03:F7:5A:77:90:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F7892D274F33094FF338 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.128.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f7:89:2d:27:4f:33:09:4f:f3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c410d810-e102-4877-afd4-7388bbf3bf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:87:38:bc:7c:e0:0b:58:31:03:f2:21:ff: 6a:f8:55:7a:79:cd:0b:fc:53:ef:da:e8:7c:2b:c2: 6b:3f:75:55:c5:2a:0a:ac:2a:90:78:60:55:be:72: 18:c5:42:ff:a4:a6:4d:48:f3:a1:3c:70:92:55:cf: 5f:a1:d0:7b:7a:6a:95:2e:5f:43:b1:1d:16:33:9c: 8e:b9:83:65:1f:41:82:5e:04:00:96:55:87:2b:e0: ee:ac:74:49:12:0e:87:6e:8b:6e:5d:d6:37:12:9f: f6:ea:55:20:ba:59:60:e3:d6:44:c9:83:eb:6f:83: a2:fd:7a:9e:a1:ea:03:a9:1e:b4:1c:16:91:47:8e: 5b:90:c6:b0:28:85:f6:26:24:a0:83:bf:35:f4:d4: cf:d8:ca:be:0a:aa:42:ca:73:a0:c1:c4:39:c0:88: 2e:5c:21:cf:8b:14:b9:4f:46:32:ba:5a:6b:13:24: d2:d2:b3:4d:f9:9d:3c:27:b0:8d:26:68:d2:83:45: a1:9c:18:5a:0a:1a:1f:b2:ca:51:ff:41:53:df:89: 1a:4c:18:08:dc:44:30:f5:94:31:1e:08:92:a7:63: ef:ee:16:1a:fa:54:f2:e2:ab:bc:d1:a6:24:02:30: 7d:0d:e5:b3:0f:2f:c4:fd:a3:f2:c4:8a:8f:23:2c: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2F:E8:CF:B5:71:03:1D:41:1D:09:A6:0C:44:03:F7:5A:77:90:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:2b:c8:0e:47:2a:70:c5:15:19:8a:51:1f:1d:51:af:7d:ff: 29:bf:2b:3f:9b:7a:aa:c0:a9:07:1d:a4:c0:aa:80:07:08:ab: 52:3c:93:39:29:2f:2e:b8:86:ee:50:2a:8e:28:5a:ed:91:bd: 46:02:fd:1f:1e:46:8f:85:22:a9:7d:be:e9:bb:59:7e:b1:e8: 55:76:bc:63:50:3b:39:7d:e1:6f:a8:d0:52:cb:dc:96:dc:40: cd:cb:6f:d6:0d:6c:72:75:60:b9:00:31:5b:d1:21:ef:6a:ac: 86:26:91:f0:28:6c:da:ef:33:21:d2:e9:02:87:9b:be:44:ef: cb:11:e9:94:47:9a:5e:7e:cb:f6:1c:b4:4f:de:11:40:3e:00: 4f:87:de:de:ba:01:d4:b1:5b:98:1a:a6:7c:33:c5:f8:1b:df: 91:34:ec:1c:0c:0d:d9:12:44:5c:70:4d:ad:c3:1a:bd:07:cf: cd:b2:8f:a4:71:93:17:e0:94:0e:1d:42:86:52:eb:ad:61:64: 15:e4:7a:48:d3:97:f3:fc:a1:0c:f6:79:65:b9:2b:7f:55:c2: 9d:a0:25:e4:2f:4c:9b:1b:c9:a5:9a:c4:f7:34:a5:4e:64:68: 28:da:8d:d6:c6:49:54:15:df:70:21:27:2b:17:91:e8:68:c7: c6:30:b2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPeJLSdPMwlP8zgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzQxMGQ4MTAtZTEwMi00ODc3LWFmZDQtNzM4OGJiZjNiZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouKHOLx84AtYMQPyIf9q+FV6ec0L/FPv2uh8 K8JrP3VVxSoKrCqQeGBVvnIYxUL/pKZNSPOhPHCSVc9fodB7emqVLl9DsR0WM5yO uYNlH0GCXgQAllWHK+DurHRJEg6HbotuXdY3Ep/26lUgullg49ZEyYPrb4Oi/Xqe oeoDqR60HBaRR45bkMawKIX2JiSgg7819NTP2Mq+CqpCynOgwcQ5wIguXCHPixS5 T0YyulprEyTS0rNN+Z08J7CNJmjSg0WhnBhaChofsspR/0FT34kaTBgI3EQw9ZQx HgiSp2Pv7hYa+lTy4qu80aYkAjB9DeWzDy/E/aPyxIqPIyzdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8v6M+1cQMdQR0JpgxEA/dad5CzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVkYWMxNzMtOTE1OS0z YTI1LTgxMzctMGZkOGNmMWY2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUryA5HKnDFFRmKUR8dUa99/ym/Kz+beqrAqQcdpMCqgAcIq1I8kzkp Ly64hu5QKo4oWu2RvUYC/R8eRo+FIql9vum7WX6x6FV2vGNQOzl94W+o0FLL3Jbc QM3Lb9YNbHJ1YLkAMVvRIe9qrIYmkfAobNrvMyHS6QKHm75E78sR6ZRHml5+y/Yc tE/eEUA+AE+H3t66AdSxW5gapnwzxfgb35E07BwMDdkSRFxwTa3DGr0Hz82yj6Rx kxfglA4dQoZS661hZBXkekjTl/P8oQz2eWW5K39Vwp2gJeQvTJsbyaWaxPc0pU5k aCjajdbGSVQV33AhJysXkehox8Ywsk0= -----END CERTIFICATE-----Generated at Mon Jun 16 07:49:10 2025 by rpki-client