$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc4def19-ef3f-3666-848c-2fdb405a778b.roa File: dc4def19-ef3f-3666-848c-2fdb405a778b.roa (raw, json) Hash identifier: 0dIVWA7s9Bk0hFTZaha8/krsmWiGJI6SPxlaGxV4Bd4= Subject key identifier: 07:0F:FB:A2:36:0D:F5:8C:E1:5E:38:0C:B9:41:1C:6A:C7:0B:0D:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F1119BD6C94CA30FCF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc4def19-ef3f-3666-848c-2fdb405a778b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.148.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f1:11:9b:d6:c9:4c:a3:0f:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fb80c5ad-1a3d-4239-a7b1-6d526e066678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:12:d1:98:9a:3e:11:49:26:16:b3:1c:65: 65:97:5a:5f:cf:35:a4:b1:85:da:8d:d7:78:b6:03: 45:be:67:a0:6b:62:cb:cb:aa:8c:0d:88:5c:35:3e: 17:75:7e:79:d6:09:64:4f:7c:7b:f3:2d:dd:e4:60: 0d:fa:bf:19:4a:99:c9:5f:95:a6:5e:88:c7:0e:a2: a9:04:fd:61:f9:c0:fb:00:d1:fb:15:1c:3c:bb:a3: 36:b8:e4:5d:b1:57:d8:9b:f1:ab:8d:27:1c:96:4f: 85:85:26:6c:85:b7:3a:27:9b:d9:00:5b:e9:65:e1: 66:78:19:49:8d:91:8e:d3:70:53:4c:d3:3c:5d:5a: 7f:5f:54:f9:1d:86:2c:4f:10:8a:1c:5d:23:dc:95: 06:ff:ef:b1:08:10:60:35:cd:da:10:ea:a3:1f:a6: ad:2a:d4:3a:4b:55:59:24:75:a9:17:86:b6:ab:4f: aa:1d:18:38:0b:d2:29:4e:c5:46:18:a1:ec:e4:b5: 71:54:69:99:8d:0a:54:d9:75:41:17:70:b5:4c:23: 01:c7:5a:ed:fc:88:44:6f:f2:e7:ea:72:dd:fa:bd: 48:60:02:6d:19:dd:ff:12:f7:ba:fc:4e:3f:57:4a: 2f:f8:b8:54:a2:72:cd:2b:2f:f8:ba:f7:08:d5:5a: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0F:FB:A2:36:0D:F5:8C:E1:5E:38:0C:B9:41:1C:6A:C7:0B:0D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc4def19-ef3f-3666-848c-2fdb405a778b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:61:21:d5:c7:0d:e0:2b:79:95:d7:69:ec:91:68:50:19:4c: 02:97:eb:d1:91:b3:30:37:01:f8:a5:ee:ef:6a:22:bf:e1:1a: 1f:b1:23:63:b4:ef:e4:34:cd:ed:6a:4f:5c:29:f0:02:ae:a7: ba:cc:ef:4f:50:2d:9d:13:3c:40:e7:17:d0:e4:7a:52:75:86: 7e:c7:89:0e:22:40:bd:36:ff:bc:ab:9f:17:0f:6d:d2:a3:e8: 0d:52:38:bf:05:3d:54:73:fc:38:c4:c5:6a:3e:e1:aa:13:bb: 05:fb:78:35:a7:9f:4f:f8:a5:84:8f:85:49:f5:eb:7e:02:c7: f3:ff:d4:c2:65:92:07:80:18:06:60:1b:43:60:e6:1b:bc:8e: ee:0a:59:2e:80:fa:dd:71:0b:48:7b:58:00:9f:d1:cd:82:b5: 5c:b5:97:70:bc:9a:56:c3:3a:dd:c8:94:ce:3e:3c:8e:fa:55: 51:fe:65:c6:d7:03:0c:a7:f1:1b:b5:e8:c1:eb:f5:88:93:c4: 49:56:01:ac:38:c6:83:df:19:12:a3:86:fb:d3:3e:f5:ed:70: b9:e6:52:5f:b2:fe:32:95:3a:ce:9f:7d:b3:42:ce:93:76:66: e0:50:45:9c:bb:69:6d:ca:e4:c4:95:36:a0:4f:05:e6:e7:56: ad:c0:4b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPERm9bJTKMPz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmI4MGM1YWQtMWEzZC00MjM5LWE3YjEtNmQ1MjZlMDY2Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1ES0ZiaPhFJJhazHGVll1pfzzWksYXajdd4 tgNFvmega2LLy6qMDYhcNT4XdX551glkT3x78y3d5GAN+r8ZSpnJX5WmXojHDqKp BP1h+cD7ANH7FRw8u6M2uORdsVfYm/GrjScclk+FhSZshbc6J5vZAFvpZeFmeBlJ jZGO03BTTNM8XVp/X1T5HYYsTxCKHF0j3JUG/++xCBBgNc3aEOqjH6atKtQ6S1VZ JHWpF4a2q0+qHRg4C9IpTsVGGKHs5LVxVGmZjQpU2XVBF3C1TCMBx1rt/IhEb/Ln 6nLd+r1IYAJtGd3/Eve6/E4/V0ov+LhUonLNKy/4uvcI1VrYtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcP+6I2DfWM4V44DLlBHGrHCw0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGM0ZGVmMTktZWYzZi0z NjY2LTg0OGMtMmZkYjQwNWE3NzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNhIdXHDeAreZXXaeyRaFAZTAKX69GRszA3Afil7u9qIr/hGh+xI2O0 7+Q0ze1qT1wp8AKup7rM709QLZ0TPEDnF9DkelJ1hn7HiQ4iQL02/7yrnxcPbdKj 6A1SOL8FPVRz/DjExWo+4aoTuwX7eDWnn0/4pYSPhUn1634Cx/P/1MJlkgeAGAZg G0Ng5hu8ju4KWS6A+t1xC0h7WACf0c2CtVy1l3C8mlbDOt3IlM4+PI76VVH+ZcbX Awyn8Ru16MHr9YiTxElWAaw4xoPfGRKjhvvTPvXtcLnmUl+y/jKVOs6ffbNCzpN2 ZuBQRZy7aW3K5MSVNqBPBebnVq3AS4w= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:38 2025 by rpki-client