$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1db030bc-0f9b-3fba-bc64-36d3b453edfb.roa File: 1db030bc-0f9b-3fba-bc64-36d3b453edfb.roa (raw, json) Hash identifier: j2PGGeZDztevJtUc4HSIL2IdjKxUgBhowbN7icvzUTI= Subject key identifier: 34:96:7C:F5:89:9B:D0:61:D0:FF:01:15:D8:F7:0B:D1:40:D8:98:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849AEAEB2FB128777AC307DB880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1db030bc-0f9b-3fba-bc64-36d3b453edfb.roa Signing time: Tue 29 Apr 2025 02:36:28 +0000 ROA not before: Tue 29 Apr 2025 02:36:28 +0000 ROA not after: Mon 28 Jul 2025 02:36:28 +0000 asID: 19527 IP address blocks: 34.1.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:ae:b2:fb:12:87:77:ac:30:7d:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 29 02:36:28 2025 GMT Not After : Jul 28 02:36:28 2025 GMT Subject: CN=50d070dc-09f8-421f-bbd8-34f65fea8030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:17:a1:15:43:f1:d5:c7:fb:72:6c:b0:4f: 4c:f8:c2:60:6f:9f:93:34:dd:a7:3e:1c:fa:8a:5f: bf:89:11:e5:55:ca:5f:5f:9b:31:4d:82:1b:3c:6c: 21:c4:aa:d5:76:09:fc:31:3f:c3:40:d0:6e:ac:19: 34:78:70:dd:3c:d0:a4:a2:1d:11:12:4d:fb:dc:96: 75:50:87:ad:27:36:e8:7f:03:8d:c4:5c:78:1e:ec: 8e:1d:33:44:a7:fb:78:b9:cd:d6:1c:0b:b3:8f:d5: 72:62:9c:cf:71:7e:1e:c6:6b:15:ab:5a:cb:07:7f: 18:74:7a:2b:bd:7b:5b:ce:eb:8c:2d:3d:7a:6e:ee: 08:ed:52:ea:81:81:19:04:9a:3c:12:a6:1d:4a:b0: af:03:fe:63:f7:71:a8:2a:f1:87:f4:64:f3:c7:54: 78:64:9b:ba:1c:2d:c8:ea:64:35:45:b9:17:f1:cb: 0e:68:07:bd:bf:35:05:ad:8c:70:22:e6:c3:f0:24: 09:e4:1a:03:1a:17:17:bd:d7:69:53:1c:ee:e6:1d: 4e:1a:3d:ed:08:d3:f9:f0:53:04:56:38:51:93:23: 3a:17:bc:8a:3b:5d:b3:67:77:8b:a0:22:70:71:52: 12:00:c4:2c:08:4c:1f:b4:0d:86:32:28:6c:d5:3e: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:96:7C:F5:89:9B:D0:61:D0:FF:01:15:D8:F7:0B:D1:40:D8:98:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1db030bc-0f9b-3fba-bc64-36d3b453edfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:bc:f1:01:f3:ec:bd:c3:f6:02:d6:e5:5a:07:73:e6:eb:45: 0c:0a:23:51:8a:7a:60:c0:07:c0:26:69:25:d1:d6:44:8f:a8: fd:5d:d2:ee:41:14:f2:5d:15:d9:12:c3:ee:be:51:34:74:1a: be:3b:3c:d8:94:27:b3:11:f7:0e:d1:48:84:c0:71:32:e7:be: 9c:b3:fc:a3:72:a3:c9:03:47:a9:b7:4d:24:ef:86:22:8d:25: b1:bb:eb:19:c6:2b:79:5c:14:32:01:1b:95:2a:62:af:78:2d: fd:86:d5:20:f5:9c:85:1a:93:2b:af:03:b3:43:c6:70:4b:d5: 82:e1:96:76:27:e5:07:b3:1a:77:75:21:e1:92:b9:7d:b0:17: cf:1e:d8:8b:7e:bd:0c:38:bf:f7:7b:2e:7f:84:c2:d2:4f:d1: 22:ea:1a:93:7a:58:56:af:78:f6:7e:81:fa:11:d3:d1:61:b3: 72:a3:d0:f1:31:e7:9c:6b:8a:08:c5:da:6c:0d:6e:df:19:1e: 73:a4:10:1f:5a:5a:90:4f:92:bf:ee:d2:75:79:e4:f9:cc:2f: 40:25:41:3e:ad:e5:90:42:25:f8:8b:2a:3c:3d:04:f5:bd:72: 75:f7:f6:e9:3c:76:b3:61:6b:79:2b:62:db:de:43:b6:ce:de: d8:1c:f4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmurrL7Eod3rDB9uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyOTAyMzYyOFoXDTI1MDcyODAyMzYyOFowLzEtMCsGA1UEAxMk NTBkMDcwZGMtMDlmOC00MjFmLWJiZDgtMzRmNjVmZWE4MDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GMXoRVD8dXH+3JssE9M+MJgb5+TNN2nPhz6 il+/iRHlVcpfX5sxTYIbPGwhxKrVdgn8MT/DQNBurBk0eHDdPNCkoh0REk373JZ1 UIetJzbofwONxFx4HuyOHTNEp/t4uc3WHAuzj9VyYpzPcX4exmsVq1rLB38YdHor vXtbzuuMLT16bu4I7VLqgYEZBJo8EqYdSrCvA/5j93GoKvGH9GTzx1R4ZJu6HC3I 6mQ1RbkX8csOaAe9vzUFrYxwIubD8CQJ5BoDGhcXvddpUxzu5h1OGj3tCNP58FME VjhRkyM6F7yKO12zZ3eLoCJwcVISAMQsCEwftA2GMihs1T689QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSWfPWJm9Bh0P8BFdj3C9FA2JgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWRiMDMwYmMtMGY5Yi0z ZmJhLWJjNjQtMzZkM2I0NTNlZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIgFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES88QHz7L3D9gLW5VoHc+brRQwKI1GKemDAB8AmaSXR1kSPqP1d0u5B FPJdFdkSw+6+UTR0Gr47PNiUJ7MR9w7RSITAcTLnvpyz/KNyo8kDR6m3TSTvhiKN JbG76xnGK3lcFDIBG5UqYq94Lf2G1SD1nIUakyuvA7NDxnBL1YLhlnYn5QezGnd1 IeGSuX2wF88e2It+vQw4v/d7Ln+EwtJP0SLqGpN6WFavePZ+gfoR09Fhs3Kj0PEx 55xrigjF2mwNbt8ZHnOkEB9aWpBPkr/u0nV55PnML0AlQT6t5ZBCJfiLKjw9BPW9 cnX39uk8drNha3krYtveQ7bO3tgc9MU= -----END CERTIFICATE-----Generated at Mon May 5 12:25:55 2025 by rpki-client