$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa File: 628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa (raw, json) Hash identifier: zEjeUGOp8Sh9MxnJWtc2KMYJNhZoe6tO068q7L1RRn0= Subject key identifier: EE:90:E6:FF:8F:B6:83:78:BA:B8:C4:9B:4B:05:87:2E:6D:52:8B:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C6172A039A96FC4EF300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 34.98.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c6:17:2a:03:9a:96:fc:4e:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f8479bf4-86b7-4735-990b-f067edcbe65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:f3:eb:5c:d8:a7:40:88:48:12:91:fe:2d: 78:94:da:bc:13:8b:b4:9e:56:d5:c1:2b:c8:ea:f2: bc:37:0b:28:e4:33:83:50:59:8f:84:80:0a:4b:d6: e0:df:68:b1:2f:5e:19:a4:2c:0f:8f:41:14:21:82: 45:d4:c6:79:3b:1b:c9:6d:d6:f7:0b:32:75:14:d2: b7:dc:0e:fc:c9:70:41:c1:58:44:8e:3b:93:05:72: 46:e6:6c:dc:74:f1:ab:46:d6:32:f1:64:d2:4d:2a: ed:42:5d:1a:92:61:fe:dc:ea:9e:12:3f:ca:53:23: c4:a6:90:42:16:4d:c3:aa:00:5a:b6:46:01:5f:6a: 41:b3:f9:0b:91:04:07:f0:e7:3e:ca:43:c2:b4:ee: 13:cf:27:b3:d9:9f:90:c4:09:a8:c2:58:76:6e:96: 2b:6d:d2:30:53:a5:0e:f8:60:18:61:db:1f:25:20: 80:e3:f7:53:02:6c:11:76:65:c1:96:5e:b1:47:99: 6f:d0:7e:76:ec:be:e3:fb:2e:d4:4c:21:a8:57:f6: fb:dd:f6:94:91:e0:60:e8:94:6a:d6:e4:01:fc:55: a3:cc:04:1e:aa:e6:f7:c1:df:5d:25:04:a5:27:c5: dc:74:81:3c:04:3b:85:bd:4d:80:e2:00:64:b8:fd: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:90:E6:FF:8F:B6:83:78:BA:B8:C4:9B:4B:05:87:2E:6D:52:8B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/628f8e4e-1a1f-3de8-b2f0-99c0f619c0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:32:2d:09:78:f2:95:39:68:10:60:dd:61:f7:3d:ee:5d:17: 34:a0:bd:97:9d:95:0a:b3:1b:1f:25:1a:12:1d:cf:4e:2b:12: 78:26:a0:3a:94:7c:83:ce:35:a0:29:2b:c9:27:c8:2f:3d:cd: 7d:0a:2f:0a:e5:92:30:91:a1:ab:5f:e1:3a:ae:35:fb:09:af: a3:ab:ac:9e:bf:73:57:3c:31:e5:7d:7c:4a:13:4a:8b:2d:35: d9:b9:a8:76:6c:5e:df:ce:7d:23:11:d3:f4:49:a3:e1:5a:d0: 87:41:86:dd:97:b7:e2:8a:3a:fa:20:7d:95:a0:a0:0b:f3:eb: 75:1b:9c:2e:f4:92:0a:30:69:81:ea:c1:e7:a3:81:73:61:7b: 8a:1c:df:9b:21:69:92:7a:53:f9:7a:47:7f:b2:26:70:92:e4: 3f:86:d2:bc:cf:89:f5:14:da:bb:b7:e9:71:a0:87:24:10:a0: 4d:26:6e:61:b5:23:4f:85:61:8f:25:af:a1:94:b8:b8:c4:b5: 2a:6b:5f:d0:4b:40:90:13:c2:ad:5e:37:56:ba:e8:b4:74:fe: 0a:39:26:2e:73:45:c6:46:b7:cf:40:4b:66:cd:5f:9b:2e:ab: 68:52:42:91:23:8a:3d:46:2a:d7:75:a6:6c:d0:3b:99:7f:06: 11:3d:64:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMYXKgOalvxO8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Zjg0NzliZjQtODZiNy00NzM1LTk5MGItZjA2N2VkY2JlNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXbz61zYp0CISBKR/i14lNq8E4u0nlbVwSvI 6vK8Nwso5DODUFmPhIAKS9bg32ixL14ZpCwPj0EUIYJF1MZ5OxvJbdb3CzJ1FNK3 3A78yXBBwVhEjjuTBXJG5mzcdPGrRtYy8WTSTSrtQl0akmH+3OqeEj/KUyPEppBC Fk3DqgBatkYBX2pBs/kLkQQH8Oc+ykPCtO4Tzyez2Z+QxAmowlh2bpYrbdIwU6UO +GAYYdsfJSCA4/dTAmwRdmXBll6xR5lv0H527L7j+y7UTCGoV/b73faUkeBg6JRq 1uQB/FWjzAQequb3wd9dJQSlJ8XcdIE8BDuFvU2A4gBkuP0G9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6Q5v+PtoN4urjEm0sFhy5tUouOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjI4ZjhlNGUtMWExZi0z ZGU4LWIyZjAtOTljMGY2MTljMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEyLQl48pU5aBBg3WH3Pe5dFzSgvZedlQqzGx8lGhIdz04rEngmoDqU fIPONaApK8knyC89zX0KLwrlkjCRoatf4TquNfsJr6OrrJ6/c1c8MeV9fEoTSost Ndm5qHZsXt/OfSMR0/RJo+Fa0IdBht2Xt+KKOvogfZWgoAvz63UbnC70kgowaYHq weejgXNhe4oc35shaZJ6U/l6R3+yJnCS5D+G0rzPifUU2ru36XGghyQQoE0mbmG1 I0+FYY8lr6GUuLjEtSprX9BLQJATwq1eN1a66LR0/go5Ji5zRcZGt89AS2bNX5su q2hSQpEjij1GKtd1pmzQO5l/BhE9ZEY= -----END CERTIFICATE-----Generated at Sun May 4 11:00:42 2025 by rpki-client