$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ba918d5-f415-35ca-aad2-6fa1cfcad4af.roa File: 7ba918d5-f415-35ca-aad2-6fa1cfcad4af.roa (raw, json) Hash identifier: ljIJQz5oqZF+PeEsu7NjIjc0B+e9CIK2sUbhT04/J8o= Subject key identifier: 8E:B1:49:0A:F0:DF:A2:A3:23:7C:55:1A:83:13:A0:5A:69:C5:D5:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584973DEDF0BA94AFCE5CBFD7300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ba918d5-f415-35ca-aad2-6fa1cfcad4af.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 15169 IP address blocks: 34.2.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:df:0b:a9:4a:fc:e5:cb:fd:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=60a2e5b9-17c4-475e-849d-9d67900c9303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:d0:da:40:1c:b6:c0:97:9d:35:9e:93:95: aa:22:28:04:2e:f1:f3:8e:ea:8b:6a:a3:d3:a1:03: 0b:1a:3c:05:00:aa:0a:32:84:e3:c7:8c:53:1b:5d: 05:fc:8b:63:e7:a1:cc:8f:49:bc:9c:6c:77:5a:48: 5e:f6:90:72:07:56:ae:88:ca:11:8b:de:d6:ce:0c: 6a:2d:58:a7:03:db:75:28:52:b1:3d:87:3e:aa:c0: ed:17:3f:30:f4:b9:63:79:45:97:fe:30:3f:66:55: 38:d4:c7:b3:d6:cf:dd:22:ce:97:d4:03:04:8d:d3: 75:1d:ce:09:4b:8a:c3:03:45:c0:e0:2a:11:83:bc: fa:d4:de:fd:76:a3:5f:37:e5:46:f8:26:22:72:8e: 10:d7:f1:48:47:a0:47:b6:8a:e8:5a:b7:ee:f1:c3: ce:c4:a9:41:ab:ba:de:c4:5c:4c:a1:b4:10:1f:2b: 4a:38:13:1a:71:40:c3:f1:1b:30:8b:75:81:33:a8: a0:6f:61:8f:91:d2:5a:71:f4:8b:2a:19:b0:30:31: 74:08:86:08:3e:e9:e9:de:cd:a5:a9:2d:5a:fb:09: b9:d6:6f:46:cf:71:70:5d:47:8a:10:8e:1b:c2:1d: 6a:c5:6b:3b:5a:68:0f:e3:9d:fc:99:3a:88:1f:6d: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:49:0A:F0:DF:A2:A3:23:7C:55:1A:83:13:A0:5A:69:C5:D5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ba918d5-f415-35ca-aad2-6fa1cfcad4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1d:16:a5:e5:a5:31:41:5e:4b:40:db:d5:de:a5:70:66:65: 37:a4:63:97:05:ff:c0:bb:8c:de:4d:b3:ad:f2:b0:c6:91:54: 9d:51:da:3c:07:a6:3b:0c:26:59:a4:f7:dd:3d:e2:86:19:b0: de:5c:39:c5:cc:f8:c0:e8:d7:4f:62:12:d5:7d:13:c0:b4:d2: 75:61:ac:92:bb:42:8b:1f:1b:36:d3:f1:ff:a1:42:37:9f:22: bb:54:71:2a:f4:c0:a1:fe:11:e7:66:07:e9:f2:7e:8d:69:6c: 4d:7a:66:3f:21:90:12:cd:38:00:2f:df:b4:27:21:f4:ff:b3: a6:d7:41:f7:48:4e:e2:0d:98:4e:91:ce:76:32:4b:b6:c8:29: 27:aa:a6:f9:49:0b:e1:66:43:67:3b:12:66:2b:c4:18:fc:5d: b1:b5:02:88:b8:90:a1:fd:6f:a7:62:28:12:db:7b:88:fa:a5: 94:d5:f7:70:d1:db:26:48:32:69:a8:3c:98:ef:aa:cf:e8:92: dd:aa:20:1f:be:e1:0c:cb:ae:52:18:e7:d5:6f:55:78:d7:bf: f7:9d:f8:27:ec:b5:e3:68:1a:21:d7:01:4e:c2:6c:d4:5d:87: 95:b7:96:ed:2b:e6:f7:26:7d:44:40:b7:6b:29:82:a1:c8:3d: c9:97:71:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3t8LqUr85cv9cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NjBhMmU1YjktMTdjNC00NzVlLTg0OWQtOWQ2NzkwMGM5MzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArinQ2kActsCXnTWek5WqIigELvHzjuqLaqPT oQMLGjwFAKoKMoTjx4xTG10F/Itj56HMj0m8nGx3Wkhe9pByB1auiMoRi97Wzgxq LVinA9t1KFKxPYc+qsDtFz8w9LljeUWX/jA/ZlU41Mez1s/dIs6X1AMEjdN1Hc4J S4rDA0XA4CoRg7z61N79dqNfN+VG+CYico4Q1/FIR6BHtoroWrfu8cPOxKlBq7re xFxMobQQHytKOBMacUDD8Rswi3WBM6igb2GPkdJacfSLKhmwMDF0CIYIPunp3s2l qS1a+wm51m9Gz3FwXUeKEI4bwh1qxWs7WmgP4538mTqIH20BZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6xSQrw36KjI3xVGoMToFppxdUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2JhOTE4ZDUtZjQxNS0z NWNhLWFhZDItNmZhMWNmY2FkNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgdFqXlpTFBXktA29XepXBmZTekY5cF/8C7jN5Ns63ysMaRVJ1R2jwH pjsMJlmk99094oYZsN5cOcXM+MDo109iEtV9E8C00nVhrJK7QosfGzbT8f+hQjef IrtUcSr0wKH+EedmB+nyfo1pbE16Zj8hkBLNOAAv37QnIfT/s6bXQfdITuINmE6R znYyS7bIKSeqpvlJC+FmQ2c7EmYrxBj8XbG1Aoi4kKH9b6diKBLbe4j6pZTV93DR 2yZIMmmoPJjvqs/okt2qIB++4QzLrlIY59VvVXjXv/ed+CfsteNoGiHXAU7CbNRd h5W3lu0r5vcmfURAt2spgqHIPcmXcac= -----END CERTIFICATE-----Generated at Sun May 4 11:49:42 2025 by rpki-client