$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa File: d1298af5-c68f-32c2-8389-932d2088da4a.roa (raw, json) Hash identifier: BLCvmH4vomYgNYpyLW6m+6EIv3hmGghx7LXkwlZkA14= Subject key identifier: BF:2D:2D:C1:42:94:88:74:D6:10:99:2B:29:22:8D:C8:38:43:E9:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C505485034B7372A5FD4C480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa Signing time: Wed 07 May 2025 02:38:43 +0000 ROA not before: Wed 07 May 2025 02:38:43 +0000 ROA not after: Tue 05 Aug 2025 02:38:43 +0000 asID: 15169 IP address blocks: 34.190.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:05:48:50:34:b7:37:2a:5f:d4:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:38:43 2025 GMT Not After : Aug 5 02:38:43 2025 GMT Subject: CN=629a34d1-a5b9-48fc-85fc-475e4d411862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5c:fc:8d:bd:d0:76:87:9f:7c:9b:b3:97:8f: dc:a6:aa:3d:c7:16:42:77:bc:b0:59:63:f0:5e:e7: 83:db:d0:95:3a:c1:05:55:90:6f:98:51:be:43:da: fc:7c:93:bc:6a:cf:77:4d:87:c2:a5:9a:24:4e:e9: cf:e4:5d:7f:b0:18:9f:5f:b2:44:af:c0:56:4a:4c: a1:6d:1a:b0:04:19:bb:0e:ab:c1:85:8a:8d:d4:c9: 04:22:a0:de:0e:93:c1:6f:15:bc:cd:5f:a2:1a:4d: 52:be:c8:bf:d2:ce:99:99:fb:c9:ae:12:45:2a:42: 52:8a:06:ed:ba:05:ad:92:db:19:38:91:70:80:e4: d2:79:de:40:ba:11:72:8e:0d:16:16:3e:0c:6f:d6: b9:db:7e:eb:36:bb:6a:ef:f5:eb:55:72:b6:59:a5: a3:0d:4d:df:e8:2c:1a:4d:f7:6d:2c:ef:01:2e:91: f4:2f:8d:8b:07:4c:46:e4:aa:a4:d4:d1:24:2d:14: f7:e1:86:a3:b9:41:5d:d4:0f:20:1f:70:a7:28:65: d4:e9:16:e2:d9:f7:07:a6:0f:08:8b:3f:e5:df:7f: f7:41:3d:eb:8a:77:91:a3:e4:2d:4d:83:f9:70:d3: b2:25:f6:43:51:70:59:e5:6d:a9:17:b8:bc:40:ef: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2D:2D:C1:42:94:88:74:D6:10:99:2B:29:22:8D:C8:38:43:E9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1298af5-c68f-32c2-8389-932d2088da4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1b:06:e7:3a:55:b2:f8:e3:cd:4e:69:5e:53:ad:6f:d0:49: ed:2d:f8:ad:90:e7:d1:43:54:e3:90:f0:fe:c9:4e:64:cb:75: e6:66:4a:fa:04:ed:77:a3:7d:ef:d6:3d:db:b5:03:17:71:67: e2:71:62:66:33:b6:a2:07:92:ff:07:ab:3d:02:48:90:15:96: c8:89:28:64:77:10:1a:1f:fb:27:a4:c5:34:47:48:96:2f:07: c2:b2:ca:bd:31:58:c8:92:97:2a:cb:d9:30:ca:3b:42:4f:69: d9:03:85:5e:56:2f:09:02:53:59:ee:03:98:3c:50:2c:3d:89: 8d:aa:7b:66:fd:e7:be:1c:e5:69:4e:65:86:ea:c0:70:f8:2d: 9b:16:ae:0b:1b:96:8b:84:56:64:4b:3d:19:d0:47:b9:e3:9f: 90:2a:06:72:9a:70:05:76:71:ff:fb:ac:7e:e5:c8:b5:42:37: 2a:79:c2:cb:49:05:f4:10:77:8a:aa:09:c5:26:3e:b6:d1:db: d7:2a:e0:48:57:b6:66:9b:79:a0:71:3c:b5:6c:d8:af:f9:0b: 4a:79:4e:4d:65:7c:8a:3a:a6:7a:87:6a:db:8b:99:fa:ca:04: e2:08:a0:e4:3e:df:9d:7e:4f:bf:9d:3d:5d:c7:aa:b7:ce:d5: db:a3:d2:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFBUhQNLc3Kl/UxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyMzg0M1oXDTI1MDgwNTAyMzg0M1owLzEtMCsGA1UEAxMk NjI5YTM0ZDEtYTViOS00OGZjLTg1ZmMtNDc1ZTRkNDExODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlz8jb3QdoeffJuzl4/cpqo9xxZCd7ywWWPw XueD29CVOsEFVZBvmFG+Q9r8fJO8as93TYfCpZokTunP5F1/sBifX7JEr8BWSkyh bRqwBBm7DqvBhYqN1MkEIqDeDpPBbxW8zV+iGk1Svsi/0s6ZmfvJrhJFKkJSigbt ugWtktsZOJFwgOTSed5AuhFyjg0WFj4Mb9a5237rNrtq7/XrVXK2WaWjDU3f6Cwa TfdtLO8BLpH0L42LB0xG5Kqk1NEkLRT34YajuUFd1A8gH3CnKGXU6Rbi2fcHpg8I iz/l33/3QT3rineRo+QtTYP5cNOyJfZDUXBZ5W2pF7i8QO+IhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8tLcFClIh01hCZKykijcg4Q+k3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEyOThhZjUtYzY4Zi0z MmMyLTgzODktOTMyZDIwODhkYTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMbBuc6VbL4481OaV5TrW/QSe0t+K2Q59FDVOOQ8P7JTmTLdeZmSvoE 7Xejfe/WPdu1AxdxZ+JxYmYztqIHkv8Hqz0CSJAVlsiJKGR3EBof+yekxTRHSJYv B8Kyyr0xWMiSlyrL2TDKO0JPadkDhV5WLwkCU1nuA5g8UCw9iY2qe2b9574c5WlO ZYbqwHD4LZsWrgsblouEVmRLPRnQR7njn5AqBnKacAV2cf/7rH7lyLVCNyp5wstJ BfQQd4qqCcUmPrbR29cq4EhXtmabeaBxPLVs2K/5C0p5Tk1lfIo6pnqHatuLmfrK BOIIoOQ+351+T7+dPV3HqrfO1duj0o8= -----END CERTIFICATE-----Generated at Sat May 10 12:10:36 2025 by rpki-client