$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa File: b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa (raw, json) Hash identifier: WvHmGRh99u8uymWPeAyEKh1rt+z+NEbgIcfZUDygNZo= Subject key identifier: 40:AB:34:01:65:12:AE:FD:B7:E1:39:08:3A:DF:8B:6E:82:EC:8D:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852A9629E9AF57A81561C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2a:96:29:e9:af:57:a8:15:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ffbf83bd-6486-4b78-8cc4-77f6816d1ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:12:68:55:d3:f2:71:46:b7:78:df:2a:68: 51:7d:dc:4e:0d:f4:0a:78:49:ee:72:b1:5e:4e:16: 07:ed:d5:ff:4c:af:f1:8b:f7:4d:93:58:10:66:ef: cc:0e:2e:ac:df:d4:22:20:55:ea:e6:87:f2:d9:b5: cc:64:e9:f4:4d:86:98:80:f7:f4:68:da:4c:a4:cd: 1f:89:f6:0b:31:85:57:46:ff:a6:57:8f:8c:52:c3: b5:9d:ad:c0:05:d7:ef:f0:82:45:9a:9d:3b:67:fa: 72:72:fc:90:e2:be:d7:cf:1b:88:aa:5c:d0:9d:ef: 86:d4:fd:1d:97:1e:6f:28:89:6d:d5:42:2f:1a:3e: 9f:c3:36:d7:43:ab:5c:3e:c0:42:0e:cd:4a:65:c0: 3b:fa:64:84:02:ea:7d:74:8a:40:37:da:dd:db:d6: 82:6c:d2:d4:12:bb:80:bf:31:00:af:ba:b3:1d:90: 7d:c5:5d:80:b3:be:a9:7b:b3:f6:4a:8a:ba:3b:1c: 7c:8a:45:8e:8d:a6:9a:78:86:ea:04:16:dd:c7:78: 03:11:67:fe:ca:b7:76:c8:fc:29:20:f7:aa:ee:8e: 33:5b:fc:7e:48:dd:3a:20:f8:91:d2:67:4d:ca:6a: 8e:98:f6:d1:a9:dc:1f:35:51:09:16:13:77:fe:e5: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:34:01:65:12:AE:FD:B7:E1:39:08:3A:DF:8B:6E:82:EC:8D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5b41771-9bb5-3e3f-ac5f-9745c6256297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:aa:38:ef:7b:3d:5e:0f:30:d4:c8:28:20:7e:ee:5f:60:c4: de:1f:af:90:67:65:82:13:70:48:f0:13:31:a7:aa:f2:db:75: 4e:1c:0a:76:b0:e2:fa:44:3e:b7:b4:58:93:89:33:f1:15:4f: 64:4a:a2:a7:75:b7:f7:e0:cb:3e:00:2d:00:f6:c1:89:fe:f8: 66:03:5c:95:4d:54:75:8c:71:79:de:93:5f:6e:7c:12:62:6a: 40:6b:ea:de:9e:18:49:19:f6:f6:fb:8f:3e:c6:ad:88:20:83: 24:7c:97:4c:44:97:f5:3b:20:6f:dc:8f:29:24:71:ee:5f:69: e9:b4:46:6f:47:a2:50:a2:db:bb:41:74:68:14:c1:6e:52:10: 42:da:b4:aa:68:19:bc:5f:04:36:5c:07:50:2d:c4:64:6b:80: 4c:15:c9:98:89:b7:fb:e1:a9:39:88:d9:ea:52:25:90:ba:76: d8:ca:c7:24:d7:a4:9d:e0:28:e2:93:5c:a3:e9:f8:43:e2:25: 32:54:58:52:4d:d1:16:b0:f3:1c:37:f8:1e:10:f4:17:03:be: 10:c3:38:6c:0a:ec:ec:d3:a7:4e:83:69:dd:f5:e5:f6:ed:17: cd:5b:93:ae:4a:cd:08:85:4d:35:65:9e:ec:b5:76:5f:8a:d4: 13:24:41:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSqWKemvV6gVYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmZiZjgzYmQtNjQ4Ni00Yjc4LThjYzQtNzdmNjgxNmQxZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW0SaFXT8nFGt3jfKmhRfdxODfQKeEnucrFe ThYH7dX/TK/xi/dNk1gQZu/MDi6s39QiIFXq5ofy2bXMZOn0TYaYgPf0aNpMpM0f ifYLMYVXRv+mV4+MUsO1na3ABdfv8IJFmp07Z/pycvyQ4r7XzxuIqlzQne+G1P0d lx5vKIlt1UIvGj6fwzbXQ6tcPsBCDs1KZcA7+mSEAup9dIpAN9rd29aCbNLUEruA vzEAr7qzHZB9xV2As76pe7P2Soq6Oxx8ikWOjaaaeIbqBBbdx3gDEWf+yrd2yPwp IPeq7o4zW/x+SN06IPiR0mdNymqOmPbRqdwfNVEJFhN3/uWMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECrNAFlEq79t+E5CDrfi26C7I2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjViNDE3NzEtOWJiNS0z ZTNmLWFjNWYtOTc0NWM2MjU2Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIoBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGqOO97PV4PMNTIKCB+7l9gxN4fr5BnZYITcEjwEzGnqvLbdU4cCnaw 4vpEPre0WJOJM/EVT2RKoqd1t/fgyz4ALQD2wYn++GYDXJVNVHWMcXnek19ufBJi akBr6t6eGEkZ9vb7jz7GrYgggyR8l0xEl/U7IG/cjykkce5faem0Rm9HolCi27tB dGgUwW5SEELatKpoGbxfBDZcB1AtxGRrgEwVyZiJt/vhqTmI2epSJZC6dtjKxyTX pJ3gKOKTXKPp+EPiJTJUWFJN0Raw8xw3+B4Q9BcDvhDDOGwK7OzTp06Dad315fbt F81bk65KzQiFTTVlnuy1dl+K1BMkQUY= -----END CERTIFICATE-----Generated at Sun May 4 19:31:12 2025 by rpki-client