$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc24d23-73f5-3244-8edd-d0fe69eb9075.roa File: 4dc24d23-73f5-3244-8edd-d0fe69eb9075.roa (raw, json) Hash identifier: 9gEfEafTNmtmDWVFnkpWTGWnP/hbcgDgJJxe9fYdtIA= Subject key identifier: BE:85:8D:7B:90:69:1F:72:E7:D3:37:FD:B0:9B:C4:B6:99:5B:3F:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78502D188883D675D5A6F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc24d23-73f5-3244-8edd-d0fe69eb9075.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.16.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:02:d1:88:88:3d:67:5d:5a:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=26dfc11d-2f4f-44bf-94cf-3d2282864944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:81:9d:8a:96:97:ea:95:1b:ab:30:17:d5:1b: 2f:97:9c:a5:4a:d3:1d:91:6a:f6:93:98:2b:8a:d4: 0f:2e:14:41:44:4b:4b:cf:1b:e5:b1:b3:4a:da:02: 0e:44:f8:d2:23:54:c6:a3:50:82:bd:bb:ce:d5:62: e4:fd:68:cf:e1:58:a4:b7:72:9d:8c:be:19:78:68: 45:b0:3a:72:fe:00:ab:ee:35:c4:41:c7:8e:57:14: 53:1c:0c:c9:3f:3d:8a:4e:cf:de:99:70:72:81:f7: 27:44:7d:23:76:9a:a4:d0:ee:74:2a:b4:82:ed:01: 17:54:3e:c2:65:ab:f9:67:83:72:97:d4:1a:06:16: b9:0a:49:ce:b3:94:13:3f:2e:1f:78:b8:b7:1d:9c: 6c:7d:c1:54:4f:cc:39:2a:e1:4c:1f:db:47:09:bf: 5c:7f:e4:0b:be:b4:14:a4:6e:d8:62:46:b3:72:54: cd:19:b3:6d:05:e6:07:93:11:0a:b3:20:80:db:da: 6e:43:9a:b9:ba:78:e9:2b:3d:2d:7a:ec:d0:33:a2: 65:d7:b0:f1:b4:49:41:38:a5:c3:44:41:11:be:11: 3c:40:c5:a3:b6:47:1a:21:bd:90:b5:37:77:a9:b1: 0e:fc:f7:8d:81:99:95:f7:12:76:ad:6f:93:16:ac: 0e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:8D:7B:90:69:1F:72:E7:D3:37:FD:B0:9B:C4:B6:99:5B:3F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc24d23-73f5-3244-8edd-d0fe69eb9075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.16.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:9b:c2:b1:8c:0e:a5:53:48:63:ae:f1:52:99:3c:09:d3:44: 22:79:24:ff:0d:e8:03:e4:30:bd:c9:03:25:4d:88:19:d0:29: d6:96:ac:2b:9d:69:2c:9e:cb:70:ac:6f:3e:30:fd:12:d7:bc: 7e:22:d7:08:34:6f:48:00:1a:e4:d2:c7:56:0f:ba:c3:01:97: 2e:62:98:97:cc:6a:88:3c:31:24:02:70:1f:d8:ba:7e:46:11: 1a:0f:c0:39:fc:db:f6:4d:54:11:ce:7c:11:0b:33:e9:11:5f: 0a:a7:9a:8a:25:13:3c:58:da:55:a6:75:cc:82:9c:92:bd:43: a0:64:36:47:03:8f:a4:11:bc:d9:e9:b3:f3:82:60:f3:2f:13: e3:4d:01:7d:46:5c:d6:6c:1b:3b:47:18:2d:58:7e:64:c1:7c: 1a:92:5b:49:fe:75:90:81:d2:2c:72:00:21:f9:be:bb:d6:4c: d9:f5:ec:70:f8:b8:68:ac:72:4b:41:ad:3b:97:59:8e:46:63: b4:5c:f1:8f:ab:f0:bf:ce:9f:c6:bf:cf:dd:56:49:9e:c8:1d: 4b:7d:7d:f9:2a:3f:17:e5:4f:dd:4e:b9:f1:45:00:10:8c:59: a3:ff:60:da:ed:bd:eb:cf:6b:b7:d0:22:e3:04:bc:94:5e:2e: c1:41:1b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQLRiIg9Z11ab4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjZkZmMxMWQtMmY0Zi00NGJmLTk0Y2YtM2QyMjgyODY0OTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oGdipaX6pUbqzAX1Rsvl5ylStMdkWr2k5gr itQPLhRBREtLzxvlsbNK2gIORPjSI1TGo1CCvbvO1WLk/WjP4Vikt3KdjL4ZeGhF sDpy/gCr7jXEQceOVxRTHAzJPz2KTs/emXBygfcnRH0jdpqk0O50KrSC7QEXVD7C Zav5Z4Nyl9QaBha5CknOs5QTPy4feLi3HZxsfcFUT8w5KuFMH9tHCb9cf+QLvrQU pG7YYkazclTNGbNtBeYHkxEKsyCA29puQ5q5unjpKz0teuzQM6Jl17DxtElBOKXD REERvhE8QMWjtkcaIb2QtTd3qbEO/PeNgZmV9xJ2rW+TFqwO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6FjXuQaR9y59M3/bCbxLaZWz/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRjMjRkMjMtNzNmNS0z MjQ0LThlZGQtZDBmZTY5ZWI5MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSbwrGMDqVTSGOu8VKZPAnTRCJ5JP8N6APkML3JAyVNiBnQKdaWrCud aSyey3Csbz4w/RLXvH4i1wg0b0gAGuTSx1YPusMBly5imJfMaog8MSQCcB/Yun5G ERoPwDn82/ZNVBHOfBELM+kRXwqnmoolEzxY2lWmdcyCnJK9Q6BkNkcDj6QRvNnp s/OCYPMvE+NNAX1GXNZsGztHGC1YfmTBfBqSW0n+dZCB0ixyACH5vrvWTNn17HD4 uGiscktBrTuXWY5GY7Rc8Y+r8L/On8a/z91WSZ7IHUt9ffkqPxflT91OufFFABCM WaP/YNrtvevPa7fQIuMEvJReLsFBG30= -----END CERTIFICATE-----Generated at Fri May 9 10:18:45 2025 by rpki-client