$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa File: ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa (raw, json) Hash identifier: sQ+uKnh0IUhv5EOV7PPZvUr7lGZk5GrtKSmQnjrUO3E= Subject key identifier: C9:93:EA:CE:E0:F2:F7:17:50:F2:63:73:E2:73:73:F8:A7:00:FE:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78503BA1A6E8113D483D100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.78.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:03:ba:1a:6e:81:13:d4:83:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3ef456e4-4b39-40c3-a9ce-95473071b485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:04:53:4f:f8:2c:28:0e:fc:21:b6:74:4b: 79:d5:27:ce:bb:26:b7:a2:d5:86:9e:7e:6d:88:19: f8:c1:8c:27:8f:21:fe:af:6b:67:83:dd:e9:83:86: 8a:5f:9b:8c:dc:0f:d2:ae:a3:e0:d8:17:2c:a0:c8: 66:ab:52:8f:8e:ac:b2:a3:1d:7d:72:2a:b2:dd:17: e8:16:44:fc:66:11:43:cc:7d:99:50:24:e9:1c:68: a9:6f:e9:63:5d:b6:57:76:1d:7d:a5:96:c2:8b:6d: 58:82:a9:ef:ff:84:13:ad:36:a5:9e:c4:13:bd:22: 8c:30:f7:03:bf:c4:7d:ce:99:1e:cf:e8:ef:69:18: aa:61:71:16:b9:42:55:54:2f:39:44:e5:95:d5:89: c3:34:2f:3a:f5:b7:ec:79:f1:22:4b:c2:b7:f5:26: 89:2c:e9:63:45:b0:5c:34:0b:4d:82:e2:09:ec:a9: eb:bf:96:40:b3:34:68:ac:d3:c0:25:44:d3:0d:ce: cf:e6:2c:43:cd:19:ec:78:15:d1:a3:3a:a8:3c:aa: 2a:f9:75:06:d1:ba:a9:56:d5:9c:d5:91:92:c0:78: 52:38:b9:98:f7:d2:31:aa:d6:91:e2:25:a2:ab:56: 26:67:78:9b:20:4d:8f:18:06:7a:4e:78:8f:f5:5e: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:EA:CE:E0:F2:F7:17:50:F2:63:73:E2:73:73:F8:A7:00:FE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5b:aa:e8:ea:94:46:67:24:fb:c4:77:31:b6:82:b5:b1:30: 30:9b:57:3e:3a:69:0c:9b:1a:78:80:78:d8:0c:94:fe:f2:6a: 3b:d2:45:2c:ab:61:32:00:9d:c1:af:ed:af:b8:5f:5e:a4:80: 5c:fc:1a:0b:11:86:a3:79:cb:53:d2:8d:5f:65:bc:e9:d1:00: 76:3f:4e:4c:b3:69:02:45:42:da:9a:26:66:3d:fc:07:10:57: d3:d8:ab:76:d5:1c:05:88:d7:3c:28:49:cd:6c:d8:c7:a1:8a: ac:04:f3:b6:e2:b2:5b:25:31:7a:0a:cc:16:60:1d:d7:1f:60: 22:3c:6e:b7:a5:1b:cd:d2:b9:b4:c2:57:3f:8f:ef:55:3d:bb: 7a:a2:1c:c6:76:67:91:7e:3f:d9:1f:85:27:d3:40:e5:36:8e: 3a:06:e0:24:85:3d:27:2f:b6:31:8e:20:0c:95:24:1e:ac:de: 66:f0:c9:78:c8:69:b9:61:8f:28:0d:93:f9:bb:35:db:5e:a5: 49:f3:82:ce:fd:91:aa:1c:a4:d4:96:a1:91:53:f0:a8:3a:70: e0:35:bd:9b:58:d2:47:b3:55:51:a0:04:e8:59:39:47:e6:47: 05:67:ab:dc:bd:79:38:f0:07:eb:02:fb:1c:3a:c1:cc:ee:25: c2:81:af:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQO6Gm6BE9SD0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2VmNDU2ZTQtNGIzOS00MGMzLWE5Y2UtOTU0NzMwNzFiNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYAEU0/4LCgO/CG2dEt51SfOuya3otWGnn5t iBn4wYwnjyH+r2tng93pg4aKX5uM3A/SrqPg2BcsoMhmq1KPjqyyox19ciqy3Rfo FkT8ZhFDzH2ZUCTpHGipb+ljXbZXdh19pZbCi21Ygqnv/4QTrTalnsQTvSKMMPcD v8R9zpkez+jvaRiqYXEWuUJVVC85ROWV1YnDNC869bfsefEiS8K39SaJLOljRbBc NAtNguIJ7Knrv5ZAszRorNPAJUTTDc7P5ixDzRnseBXRozqoPKoq+XUG0bqpVtWc 1ZGSwHhSOLmY99IxqtaR4iWiq1YmZ3ibIE2PGAZ6TniP9V7AQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmT6s7g8vcXUPJjc+Jzc/inAP4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWY2Nzk1YzUtZmY3Mi0z ZjQ3LTljNWYtNGEyYWFkMTYyZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZbqujqlEZnJPvEdzG2grWxMDCbVz46aQybGniAeNgMlP7yajvSRSyr YTIAncGv7a+4X16kgFz8GgsRhqN5y1PSjV9lvOnRAHY/TkyzaQJFQtqaJmY9/AcQ V9PYq3bVHAWI1zwoSc1s2MehiqwE87bislslMXoKzBZgHdcfYCI8brelG83SubTC Vz+P71U9u3qiHMZ2Z5F+P9kfhSfTQOU2jjoG4CSFPScvtjGOIAyVJB6s3mbwyXjI ablhjygNk/m7NdtepUnzgs79kaocpNSWoZFT8Kg6cOA1vZtY0kezVVGgBOhZOUfm RwVnq9y9eTjwB+sC+xw6wczuJcKBr7I= -----END CERTIFICATE-----Generated at Mon May 5 15:04:26 2025 by rpki-client