$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff0578b4-ac2d-3b33-bf34-cbb8027b29b3.roa File: ff0578b4-ac2d-3b33-bf34-cbb8027b29b3.roa (raw, json) Hash identifier: c6uE9W37eZTVMNWA7mDILXiL7CFx50pLJ7dv2vjHvG0= Subject key identifier: D4:9A:34:D6:74:FD:B0:81:9A:9D:6A:14:A0:7C:55:67:6D:5B:28:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C505399669E33FCC1AB78B70 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff0578b4-ac2d-3b33-bf34-cbb8027b29b3.roa Signing time: Wed 07 May 2025 02:38:36 +0000 ROA not before: Wed 07 May 2025 02:38:36 +0000 ROA not after: Tue 05 Aug 2025 02:38:36 +0000 asID: 19527 IP address blocks: 34.190.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:05:39:96:69:e3:3f:cc:1a:b7:8b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 7 02:38:36 2025 GMT Not After : Aug 5 02:38:36 2025 GMT Subject: CN=a32b010f-591d-403a-9186-28aab40a5eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:12:4a:f5:79:73:46:ed:bb:cf:bb:fe:d8: b8:55:24:a5:cb:d8:72:01:55:18:f2:09:7b:e0:d4: f9:9b:b1:af:b0:99:ee:b7:d7:6e:75:f2:d8:34:f8: 58:bd:82:17:76:9a:87:b7:07:30:0d:ca:99:01:7a: 8e:18:84:37:51:f5:63:13:16:cd:02:bc:54:c9:63: 43:ed:b9:00:f7:0b:1b:e5:1c:a0:1a:7a:79:30:ad: 1b:21:c4:34:21:30:1f:f9:20:81:91:f5:49:46:2d: 6d:27:ba:6f:91:ce:c0:3a:46:72:fb:3e:f1:97:33: 41:6a:75:7a:d5:95:54:57:2f:76:68:92:51:3f:cd: 3f:c4:c9:09:7b:e0:a9:19:dd:a9:ae:db:a2:f9:ac: 36:2d:e4:70:e4:33:ca:43:76:27:84:cf:66:c2:50: 4d:f2:29:d9:e5:73:d0:ab:32:df:e7:67:90:9d:a8: 31:db:95:19:82:a0:7d:28:06:92:57:51:33:a9:56: 74:e3:fc:74:91:c5:05:7b:10:b3:69:96:b4:45:3b: d9:41:64:4d:19:75:37:3e:43:55:60:01:cc:b4:92: 41:c5:ee:b9:2d:68:e8:6c:70:89:b8:24:e6:90:3d: c9:01:9d:12:81:0e:2d:70:19:45:65:9e:84:08:d4: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9A:34:D6:74:FD:B0:81:9A:9D:6A:14:A0:7C:55:67:6D:5B:28:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff0578b4-ac2d-3b33-bf34-cbb8027b29b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.190.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8e:b5:6f:8c:b2:73:59:24:6b:e4:a8:d0:25:6b:eb:87:e5: 98:74:62:75:67:c0:40:43:c8:62:27:70:39:b2:54:fb:fb:6c: f1:57:31:aa:c2:97:5c:96:0e:60:0f:86:e0:d4:fe:42:cf:f3: dc:1e:01:f5:3c:1d:5b:97:33:8e:eb:4b:99:b4:08:6d:e7:dc: a7:f9:de:c0:04:6d:05:5e:08:fa:7c:f2:27:90:f6:58:8c:bf: 73:90:b1:fd:05:79:e7:18:06:08:40:7e:8c:68:35:c4:4a:f1: d7:a8:04:01:d1:98:62:bc:77:4f:0c:f3:f6:0d:36:93:aa:9e: 1d:ef:33:2c:8e:09:c3:c5:9c:60:f8:6b:51:3e:0e:13:7a:91: 2d:c6:a6:01:bb:26:66:9a:1a:b6:ad:86:25:3c:b1:d0:df:a7: 15:ec:ee:17:2e:bc:09:01:51:f9:c9:c1:48:0d:94:03:3a:ef: e3:11:51:43:a4:37:de:56:16:b4:54:73:8f:19:e6:00:08:85: 71:27:d1:ac:0d:a0:97:3b:9b:fd:2c:18:dc:0a:b1:b2:0f:b5: 58:42:72:85:b3:cb:4e:d6:e5:1f:4d:97:4b:3d:6d:94:1a:35: 47:39:bb:a1:8a:05:4f:8f:18:c8:83:e4:54:55:f4:4b:7e:06: 86:7b:7c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFBTmWaeM/zBq3i3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNzAyMzgzNloXDTI1MDgwNTAyMzgzNlowLzEtMCsGA1UEAxMk YTMyYjAxMGYtNTkxZC00MDNhLTkxODYtMjhhYWI0MGE1ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovoSSvV5c0btu8+7/ti4VSSly9hyAVUY8gl7 4NT5m7GvsJnut9dudfLYNPhYvYIXdpqHtwcwDcqZAXqOGIQ3UfVjExbNArxUyWND 7bkA9wsb5RygGnp5MK0bIcQ0ITAf+SCBkfVJRi1tJ7pvkc7AOkZy+z7xlzNBanV6 1ZVUVy92aJJRP80/xMkJe+CpGd2prtui+aw2LeRw5DPKQ3YnhM9mwlBN8inZ5XPQ qzLf52eQnagx25UZgqB9KAaSV1EzqVZ04/x0kcUFexCzaZa0RTvZQWRNGXU3PkNV YAHMtJJBxe65LWjobHCJuCTmkD3JAZ0SgQ4tcBlFZZ6ECNShiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSaNNZ0/bCBmp1qFKB8VWdtWyhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYwNTc4YjQtYWMyZC0z YjMzLWJmMzQtY2JiODAyN2IyOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIr54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWOtW+MsnNZJGvkqNAla+uH5Zh0YnVnwEBDyGIncDmyVPv7bPFXMarC l1yWDmAPhuDU/kLP89weAfU8HVuXM47rS5m0CG3n3Kf53sAEbQVeCPp88ieQ9liM v3OQsf0FeecYBghAfoxoNcRK8deoBAHRmGK8d08M8/YNNpOqnh3vMyyOCcPFnGD4 a1E+DhN6kS3GpgG7JmaaGrathiU8sdDfpxXs7hcuvAkBUfnJwUgNlAM67+MRUUOk N95WFrRUc48Z5gAIhXEn0awNoJc7m/0sGNwKsbIPtVhCcoWzy07W5R9Nl0s9bZQa NUc5u6GKBU+PGMiD5FRV9Et+BoZ7fNU= -----END CERTIFICATE-----Generated at Sat May 10 14:40:00 2025 by rpki-client