$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcb259d2-62dc-3a59-b775-b4958f59f3ec.roa File: dcb259d2-62dc-3a59-b775-b4958f59f3ec.roa (raw, json) Hash identifier: vN/+WIIQjXfDrOYINFmzawhFyo+r9dm821kIM+RiQFo= Subject key identifier: B0:44:38:5E:75:E3:4B:C1:5A:75:26:B9:2A:83:E5:FA:EB:52:CC:2C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849AD1A098945F56E4979E35C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcb259d2-62dc-3a59-b775-b4958f59f3ec.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.154.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:09:89:45:f5:6e:49:79:e3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=d7d16ba3-4b53-4d32-a852-b52a008acb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:ed:c2:73:49:ad:88:dd:92:77:ce:94:53: fa:81:14:3d:6d:88:15:ec:e5:a7:c9:98:9d:06:d3: 9e:e4:34:8b:4c:d5:3e:11:95:f0:01:d2:79:1e:0a: 68:b9:26:58:94:98:35:4c:2e:41:fa:d1:8e:af:08: 5f:5a:dc:14:20:d3:c4:7c:07:95:bd:5e:a6:0a:4e: c0:96:2c:61:cb:2e:7b:a8:30:36:17:e8:9b:be:4d: 64:fc:3f:82:01:2d:b1:f4:e7:c6:1f:f7:7e:83:94: 0a:be:88:c5:ad:ec:bd:03:5a:b2:c8:6e:7e:be:fe: a1:3a:51:a9:f9:44:b8:42:cf:ab:61:40:4f:e7:5f: 71:39:78:b9:da:c8:3b:8d:b0:01:52:1e:1d:71:4d: 05:52:5e:d7:e2:b9:d6:4e:77:b7:1b:df:49:42:66: 53:30:6a:b4:c9:89:aa:94:3d:ed:1b:30:b4:fd:8f: c7:a7:6c:6b:95:92:11:c7:fd:5e:7f:0f:51:59:d6: ae:27:73:fc:2f:c5:c7:7a:15:4a:37:e0:cf:09:3a: 6d:2f:14:3b:ae:7a:e5:9f:53:db:d6:8b:8b:71:f2: ef:8a:34:72:e7:0e:59:61:a0:94:f7:4b:2c:ac:9d: c5:ca:ee:3d:50:35:7e:5d:05:83:56:06:8f:d9:a4: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:44:38:5E:75:E3:4B:C1:5A:75:26:B9:2A:83:E5:FA:EB:52:CC:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcb259d2-62dc-3a59-b775-b4958f59f3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8c:2b:96:57:80:2b:58:1d:a5:a6:f3:3f:b6:83:03:45:af: 81:cd:19:cc:4d:22:fb:b6:7e:df:22:51:2f:b3:a4:18:b8:3a: 3a:1c:d3:b9:9d:ca:3d:23:98:41:94:07:5d:c1:f2:89:36:c7: d1:a3:f1:d2:19:3c:4b:35:70:d5:99:10:f6:c5:f0:2e:f3:8a: 5b:91:dd:0a:d5:7e:f0:e9:e0:a5:20:45:2e:75:e9:05:bc:69: 4b:0c:56:fb:e5:07:75:82:e0:1d:61:56:69:53:4c:fa:c3:bd: 56:69:cb:81:63:f2:da:1e:8c:b8:37:89:1b:dd:49:d6:1a:c6: 91:bc:19:70:23:80:83:b4:35:07:cb:62:46:0a:80:27:32:c4: e5:a5:8c:0a:54:75:6d:62:8f:cb:35:35:95:47:f4:31:f9:b6: 06:83:02:62:38:52:e6:4e:1c:13:0d:8b:9e:2f:47:ee:d4:8c: be:fa:20:dd:e0:11:39:ec:9f:f4:e3:fb:1b:3b:ca:0f:d1:39: 44:c5:20:1a:84:f5:8a:10:e2:37:b3:c0:77:c4:35:7d:a5:56: 72:09:a7:e0:d8:c1:f1:7e:67:30:1d:a0:f8:0d:ca:37:aa:13: e6:c2:01:34:24:bc:37:71:3e:37:9c:55:0a:cb:63:12:48:7b: 07:72:90:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgmJRfVuSXnjXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDdkMTZiYTMtNGI1My00ZDMyLWE4NTItYjUyYTAwOGFjYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GjtwnNJrYjdknfOlFP6gRQ9bYgV7OWnyZid BtOe5DSLTNU+EZXwAdJ5HgpouSZYlJg1TC5B+tGOrwhfWtwUINPEfAeVvV6mCk7A lixhyy57qDA2F+ibvk1k/D+CAS2x9OfGH/d+g5QKvojFrey9A1qyyG5+vv6hOlGp +US4Qs+rYUBP519xOXi52sg7jbABUh4dcU0FUl7X4rnWTne3G99JQmZTMGq0yYmq lD3tGzC0/Y/Hp2xrlZIRx/1efw9RWdauJ3P8L8XHehVKN+DPCTptLxQ7rnrln1Pb 1ouLcfLvijRy5w5ZYaCU90ssrJ3Fyu49UDV+XQWDVgaP2aQV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBEOF5140vBWnUmuSqD5frrUswsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGNiMjU5ZDItNjJkYy0z YTU5LWI3NzUtYjQ5NThmNTlmM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuMK5ZXgCtYHaWm8z+2gwNFr4HNGcxNIvu2ft8iUS+zpBi4Ojoc07md yj0jmEGUB13B8ok2x9Gj8dIZPEs1cNWZEPbF8C7ziluR3QrVfvDp4KUgRS516QW8 aUsMVvvlB3WC4B1hVmlTTPrDvVZpy4Fj8toejLg3iRvdSdYaxpG8GXAjgIO0NQfL YkYKgCcyxOWljApUdW1ij8s1NZVH9DH5tgaDAmI4UuZOHBMNi54vR+7UjL76IN3g ETnsn/Tj+xs7yg/ROUTFIBqE9YoQ4jezwHfENX2lVnIJp+DYwfF+ZzAdoPgNyjeq E+bCATQkvDdxPjecVQrLYxJIewdykJM= -----END CERTIFICATE-----Generated at Sun May 4 19:35:06 2025 by rpki-client