$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f2b900f-0da8-34aa-b670-9f9c649ed879.roa File: 5f2b900f-0da8-34aa-b670-9f9c649ed879.roa (raw, json) Hash identifier: jVRqrWh1GXqbkKy58KW8FbXAsUJNRVph/qqz5wkziFg= Subject key identifier: 6E:66:60:DF:2A:BC:D8:DF:99:A2:F2:5B:99:EA:9B:4B:11:56:1E:4C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584973DEDDED684DD44613DB3980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f2b900f-0da8-34aa-b670-9f9c649ed879.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 19527 IP address blocks: 34.2.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dd:ed:68:4d:d4:46:13:db:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=1de1e7d6-0712-4a16-b723-25dc686263d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:e1:d4:39:4e:b1:db:1a:9e:db:46:d6:1e: ae:cc:8f:2f:a9:f2:c5:5c:3e:d3:b4:ff:c4:aa:b6: 38:4b:08:ea:bb:64:8b:ee:0f:65:d0:f6:03:6d:10: fa:e8:a1:57:cb:4f:c1:47:f3:f3:99:5a:c8:0b:d8: bf:0d:8a:22:66:9c:8d:4f:f8:7d:f4:a5:2c:96:77: 0e:65:fd:ae:f7:c3:f3:20:ce:df:2c:0d:09:f0:b8: 65:95:0b:42:46:be:9b:ea:32:bc:bb:11:5d:cc:bb: 9b:89:28:cf:84:c6:c2:6d:da:5c:db:36:8a:32:ed: 4a:78:17:bb:50:2c:2f:43:03:36:82:f4:9b:11:a7: 53:1e:97:1e:2d:1a:3c:c5:aa:87:e6:fc:a5:2c:00: 27:4d:e4:49:c0:a6:f4:c3:c9:96:b5:da:8e:61:b6: e0:35:96:b6:ab:ad:33:0a:d9:7d:4e:2c:af:f4:59: 21:02:49:9b:7e:99:e1:0e:e4:1b:1d:96:c8:0b:bc: 0f:88:5c:18:07:d5:cf:6f:b5:aa:aa:cd:c7:d0:b2: 1b:2f:31:eb:2d:8c:bc:a3:7b:94:52:2a:6c:03:64: be:28:d7:ad:e6:b4:7e:c4:b0:83:ba:20:44:00:be: 1f:9c:a6:78:7f:31:e9:11:d6:6d:4a:c6:99:e7:95: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:60:DF:2A:BC:D8:DF:99:A2:F2:5B:99:EA:9B:4B:11:56:1E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f2b900f-0da8-34aa-b670-9f9c649ed879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d4:93:37:a8:cb:56:fa:af:b7:12:97:9d:ac:4e:03:75:eb: 3b:32:7f:6c:1e:d3:f3:d4:95:03:37:ee:1e:df:9f:9f:1b:7c: 70:49:85:9f:72:81:ea:1f:3f:c5:5d:97:14:3b:c5:f3:38:ea: ec:39:04:92:99:bd:76:21:22:65:51:44:9e:11:b2:a6:60:f9: 07:48:14:51:8f:ec:66:3b:ab:b3:aa:a1:ec:c1:ac:49:59:f0: 83:11:66:03:0b:84:ad:65:96:ab:46:f7:fa:be:ae:aa:69:03: e1:51:7f:38:94:71:71:79:7a:db:d5:13:6c:c0:73:64:1a:01: 6a:eb:01:5a:f7:d2:8c:f7:68:1c:d9:18:04:cf:b1:8f:68:d1: 14:13:52:8b:0a:26:81:d9:60:4c:5d:b7:e2:0f:b2:10:f4:36: 98:e0:f5:2f:76:0e:2e:61:e0:ca:69:26:1e:c3:ca:e7:cf:32: 2e:00:b6:de:ce:d8:21:d8:82:a0:ec:39:ff:9d:73:c7:c6:df: b1:ce:7d:56:3d:47:3b:50:67:02:7b:74:2a:40:bc:c7:5e:b6: 74:43:76:73:c7:0a:85:e1:f1:1a:51:14:81:65:64:7a:1f:e8: ef:43:8c:d7:ca:59:05:9c:bc:24:a8:61:ca:b3:d5:08:69:a9: cb:15:af:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3t3taE3URhPbOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MWRlMWU3ZDYtMDcxMi00YTE2LWI3MjMtMjVkYzY4NjI2M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxDh1DlOsdsanttG1h6uzI8vqfLFXD7TtP/E qrY4Swjqu2SL7g9l0PYDbRD66KFXy0/BR/PzmVrIC9i/DYoiZpyNT/h99KUslncO Zf2u98PzIM7fLA0J8LhllQtCRr6b6jK8uxFdzLubiSjPhMbCbdpc2zaKMu1KeBe7 UCwvQwM2gvSbEadTHpceLRo8xaqH5vylLAAnTeRJwKb0w8mWtdqOYbbgNZa2q60z Ctl9Tiyv9FkhAkmbfpnhDuQbHZbIC7wPiFwYB9XPb7Wqqs3H0LIbLzHrLYy8o3uU UipsA2S+KNet5rR+xLCDuiBEAL4fnKZ4fzHpEdZtSsaZ55VYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5mYN8qvNjfmaLyW5nqm0sRVh5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWYyYjkwMGYtMGRhOC0z NGFhLWI2NzAtOWY5YzY0OWVkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7Ukzeoy1b6r7cSl52sTgN16zsyf2we0/PUlQM37h7fn58bfHBJhZ9y geofP8VdlxQ7xfM46uw5BJKZvXYhImVRRJ4RsqZg+QdIFFGP7GY7q7OqoezBrElZ 8IMRZgMLhK1llqtG9/q+rqppA+FRfziUcXF5etvVE2zAc2QaAWrrAVr30oz3aBzZ GATPsY9o0RQTUosKJoHZYExdt+IPshD0Npjg9S92Di5h4MppJh7DyufPMi4Att7O 2CHYgqDsOf+dc8fG37HOfVY9RztQZwJ7dCpAvMdetnRDdnPHCoXh8RpRFIFlZHof 6O9DjNfKWQWcvCSoYcqz1QhpqcsVrxA= -----END CERTIFICATE-----Generated at Sun May 4 19:48:24 2025 by rpki-client