$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa76b124-f789-3dc2-a61e-4f48dcce8274.roa File: aa76b124-f789-3dc2-a61e-4f48dcce8274.roa (raw, json) Hash identifier: qDMXf9KgNw4M/YD31pCGyms3UEOk6tVFEATIL1RNWmY= Subject key identifier: 49:C4:7D:DB:82:2E:CC:EF:37:5E:F8:07:13:86:1E:12:5D:9A:50:2B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EA34B0FEB65A8A9F6880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa76b124-f789-3dc2-a61e-4f48dcce8274.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.98.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:34:b0:fe:b6:5a:8a:9f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5200674d-f984-495e-8219-e878b4eadc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:96:ab:e9:c8:4f:8e:2e:b8:b2:e4:2d:0b:8d: 50:be:40:fa:0f:83:00:9c:97:2e:31:2a:4a:59:de: 84:d3:81:d1:67:c7:10:75:1f:86:98:70:79:98:d1: ca:4b:95:f1:15:2a:93:fe:66:a6:6a:87:fa:b8:f6: 69:73:c2:c3:39:e1:b9:81:96:d4:13:2d:bf:7d:3e: 71:04:a8:33:92:10:93:5f:c5:2b:26:0f:b9:96:a2: cd:48:38:44:91:7b:44:5c:a3:91:70:ef:63:af:98: 78:f1:6d:98:ad:ab:47:e0:3b:0d:6f:ef:e2:31:68: 94:8e:d6:0f:79:af:22:81:d1:34:d2:30:76:73:8d: 2d:7b:9d:16:07:a9:b6:7b:b4:fc:56:f1:2b:05:8a: 23:b2:87:4f:b6:e0:95:bb:65:6f:d3:16:26:d0:55: 41:10:28:d6:a5:d1:04:d1:be:eb:2f:96:61:78:bc: 5c:bf:3f:37:d8:43:72:84:ca:fb:61:9b:68:64:50: 09:18:38:64:85:ba:56:91:6a:8a:80:da:a1:6d:5a: 49:a1:3d:6a:6a:6b:a4:bc:d7:83:45:04:eb:1c:4a: a3:dc:03:6e:e1:b4:32:ab:d7:70:55:3f:cd:32:58: 2f:e9:16:41:96:4b:a9:23:85:a8:80:98:f8:53:07: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:7D:DB:82:2E:CC:EF:37:5E:F8:07:13:86:1E:12:5D:9A:50:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa76b124-f789-3dc2-a61e-4f48dcce8274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:18:0d:6d:0c:ec:af:e0:b4:0e:fe:e2:26:b5:f0:0d:20:47: dc:c2:0f:6b:44:c2:01:92:dc:42:75:bf:32:be:11:63:c9:86: a8:6a:13:db:fc:28:97:11:ea:6e:fd:0b:4b:d1:75:06:da:48: 9d:b7:cb:06:bc:f3:8b:f9:0e:64:99:9a:6a:8f:ee:70:28:2d: be:b8:0b:ba:27:85:25:ae:68:73:e7:65:df:67:00:1f:55:2d: d8:72:a3:4c:7a:0f:10:c1:ca:c7:ee:6b:ae:18:48:50:9c:56: 30:b6:fc:67:eb:4e:6f:07:fe:6a:7b:a1:e0:e9:62:f7:ae:48: 86:8b:2f:ba:0f:11:67:5a:20:3d:88:bf:d7:07:0d:65:1a:3c: db:6f:13:21:2a:37:43:6f:ee:7d:08:99:ee:0f:0e:d4:1b:4d: c6:d2:4b:0a:24:20:d7:c3:a9:43:c3:82:d1:91:8b:ca:c7:3e: fe:0e:02:80:99:6d:53:f3:bb:a9:2d:be:71:56:1d:bd:97:b1: 3b:f1:4f:13:28:da:d8:db:c0:83:67:23:58:ca:17:61:67:1b: 84:bd:c4:ee:af:f8:8e:e9:04:07:a9:8a:db:f2:d6:e1:0c:fa: ac:7e:ac:82:93:bf:26:63:68:bb:d9:70:4b:58:bd:11:08:33: 30:60:cf:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOo0sP62WoqfaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTIwMDY3NGQtZjk4NC00OTVlLTgyMTktZTg3OGI0ZWFkYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZar6chPji64suQtC41QvkD6D4MAnJcuMSpK Wd6E04HRZ8cQdR+GmHB5mNHKS5XxFSqT/mamaof6uPZpc8LDOeG5gZbUEy2/fT5x BKgzkhCTX8UrJg+5lqLNSDhEkXtEXKORcO9jr5h48W2YratH4DsNb+/iMWiUjtYP ea8igdE00jB2c40te50WB6m2e7T8VvErBYojsodPtuCVu2Vv0xYm0FVBECjWpdEE 0b7rL5ZheLxcvz832ENyhMr7YZtoZFAJGDhkhbpWkWqKgNqhbVpJoT1qamukvNeD RQTrHEqj3ANu4bQyq9dwVT/NMlgv6RZBlkupI4WogJj4UwdltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnEfduCLszvN174BxOGHhJdmlArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE3NmIxMjQtZjc4OS0z ZGMyLWE2MWUtNGY0OGRjY2U4Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCImKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgYDW0M7K/gtA7+4ia18A0gR9zCD2tEwgGS3EJ1vzK+EWPJhqhqE9v8 KJcR6m79C0vRdQbaSJ23ywa884v5DmSZmmqP7nAoLb64C7onhSWuaHPnZd9nAB9V Ldhyo0x6DxDBysfua64YSFCcVjC2/GfrTm8H/mp7oeDpYveuSIaLL7oPEWdaID2I v9cHDWUaPNtvEyEqN0Nv7n0Ime4PDtQbTcbSSwokINfDqUPDgtGRi8rHPv4OAoCZ bVPzu6ktvnFWHb2XsTvxTxMo2tjbwINnI1jKF2FnG4S9xO6v+I7pBAepitvy1uEM +qx+rIKTvyZjaLvZcEtYvREIMzBgz2g= -----END CERTIFICATE-----Generated at Sun May 4 19:29:31 2025 by rpki-client