$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa File: 18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa (raw, json) Hash identifier: MInbanfaVonZ9LejDzycNnWw3eLfVgmJrmXM643yLCI= Subject key identifier: 26:8A:33:4D:17:6A:F5:76:6F:90:C4:83:8F:2B:35:AB:E2:4C:A7:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB68F09F922F5E7C479080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 19527 IP address blocks: 34.1.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:68:f0:9f:92:2f:5e:7c:47:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=965c54a8-62f9-437c-abf4-488ff4c21df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:cb:dd:c9:89:9b:a8:3f:07:eb:46:d5:1b: b7:d7:31:f1:50:10:33:b4:a3:db:8a:2d:78:52:4b: 1a:f5:ff:05:77:95:a8:b6:41:df:dd:24:84:6e:18: bc:fd:3e:45:82:c0:a9:99:35:1d:5c:7b:f2:c7:46: 3f:77:c4:f0:77:9c:fc:8c:76:b8:a0:2a:75:b9:85: 34:d5:d4:b2:bc:06:32:9c:a0:9c:42:04:61:53:af: 91:77:43:7d:b3:c6:43:a5:7f:8c:ce:f2:ab:af:84: 37:1a:da:07:b5:21:ec:40:84:40:d6:06:2c:17:3b: f3:21:14:33:61:bc:15:64:df:72:ed:66:4d:5f:72: 7a:5e:19:e3:2c:03:29:2d:6c:a7:67:8b:d6:16:fc: 37:a3:6b:8c:17:ce:39:17:03:e0:12:65:34:57:14: 1f:9c:f9:51:9b:90:43:38:9d:e5:a5:8a:e7:ee:79: c1:54:43:ab:34:84:da:e1:b9:f8:57:36:c5:33:d9: 9f:96:59:c5:93:0d:dc:2f:03:5a:de:05:1b:a2:1b: 03:3d:92:e9:2f:03:4b:c2:92:85:24:15:4f:62:02: d6:56:ec:1d:42:fa:a5:ba:03:84:c8:25:bb:6f:cb: de:63:3f:a4:a2:79:dc:05:f1:a7:7b:81:89:ba:13: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:33:4D:17:6A:F5:76:6F:90:C4:83:8F:2B:35:AB:E2:4C:A7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/18e9132a-cff7-39aa-b53a-9b8c5d40968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:da:86:70:bf:08:82:dd:09:b9:d6:bf:32:bf:b0:05:d0:5c: cd:eb:7b:34:38:24:0f:3f:ec:5e:e8:e9:79:63:47:25:3a:3f: 1b:42:0d:5d:b5:18:1a:6e:b5:be:78:3c:19:99:6b:af:36:78: 90:11:34:50:b7:e2:d7:c6:46:2f:40:d2:1f:c1:0c:93:19:a0: d5:d3:69:72:9a:a7:c0:78:bb:e8:73:3a:59:00:f3:eb:ba:51: fd:aa:b4:f9:d1:93:38:ed:a8:ed:ff:d7:03:ac:a8:a7:0a:2c: 9f:4c:5f:f8:75:66:a2:ba:a3:f5:2a:5d:f8:cb:20:bf:14:bb: 9a:1a:94:f7:fc:42:1f:3b:71:04:b8:42:43:2d:2b:1e:9c:9f: a0:49:d7:38:67:06:55:d2:d6:00:2a:17:6c:6a:df:d1:40:cb: 21:50:91:5c:00:70:76:c7:04:00:cf:0d:e5:e1:65:6e:4e:3c: 51:0f:83:97:ef:89:a1:a7:94:56:a1:4f:a2:07:d9:05:df:52: e8:36:bb:95:3e:a8:fc:3c:b8:cb:22:a7:0f:a9:ab:77:33:0b: d3:c6:24:ab:03:5a:eb:81:4c:ff:b0:23:bd:b5:09:13:aa:41: da:df:96:75:34:55:9a:b5:f4:ad:b8:73:3a:4e:5c:57:69:49: bc:e3:5c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2jwn5IvXnxHkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTY1YzU0YTgtNjJmOS00MzdjLWFiZjQtNDg4ZmY0YzIxZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtLL3cmJm6g/B+tG1Ru31zHxUBAztKPbii14 Uksa9f8Fd5WotkHf3SSEbhi8/T5FgsCpmTUdXHvyx0Y/d8Twd5z8jHa4oCp1uYU0 1dSyvAYynKCcQgRhU6+Rd0N9s8ZDpX+MzvKrr4Q3GtoHtSHsQIRA1gYsFzvzIRQz YbwVZN9y7WZNX3J6XhnjLAMpLWynZ4vWFvw3o2uMF845FwPgEmU0VxQfnPlRm5BD OJ3lpYrn7nnBVEOrNITa4bn4VzbFM9mfllnFkw3cLwNa3gUbohsDPZLpLwNLwpKF JBVPYgLWVuwdQvqlugOEyCW7b8veYz+konncBfGne4GJuhO78wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaKM00XavV2b5DEg48rNaviTKd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMThlOTEzMmEtY2ZmNy0z OWFhLWI1M2EtOWI4YzVkNDA5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/ahnC/CILdCbnWvzK/sAXQXM3rezQ4JA8/7F7o6XljRyU6PxtCDV21 GBputb54PBmZa682eJARNFC34tfGRi9A0h/BDJMZoNXTaXKap8B4u+hzOlkA8+u6 Uf2qtPnRkzjtqO3/1wOsqKcKLJ9MX/h1ZqK6o/UqXfjLIL8Uu5oalPf8Qh87cQS4 QkMtKx6cn6BJ1zhnBlXS1gAqF2xq39FAyyFQkVwAcHbHBADPDeXhZW5OPFEPg5fv iaGnlFahT6IH2QXfUug2u5U+qPw8uMsipw+pq3czC9PGJKsDWuuBTP+wI721CROq QdrflnU0VZq19K24czpOXFdpSbzjXEY= -----END CERTIFICATE-----Generated at Sun May 4 19:35:55 2025 by rpki-client