$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8585ae46-721c-332c-8f15-198bd08a3a1b.roa File: 8585ae46-721c-332c-8f15-198bd08a3a1b.roa (raw, json) Hash identifier: 6JWE4FvHaOB2B+svGWaXII8IylGjiK4XgrCOnqIBNs4= Subject key identifier: 4A:4B:48:75:CD:32:CE:84:2C:DE:19:07:C7:20:76:28:44:DA:CB:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584973DEDE124A06C0E000D39480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8585ae46-721c-332c-8f15-198bd08a3a1b.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 19527 IP address blocks: 34.2.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:de:12:4a:06:c0:e0:00:d3:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=473fe967-f5e5-4b6b-a452-57d5d16b878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:84:41:4c:d8:29:39:58:76:3f:43:43:8b: d8:9f:e4:49:ff:97:a6:0e:31:43:5e:89:87:9c:6f: 72:ea:54:9a:09:cd:b3:8f:c2:2c:3e:e1:cc:d2:9d: a0:97:79:98:a0:46:92:2e:72:3d:b0:1a:c7:3a:c2: 13:51:d4:61:d1:4c:4d:2f:b9:d5:66:f2:18:8e:77: 8a:cd:13:bd:bd:72:2e:6a:5c:f2:42:6c:4e:23:53: 6d:eb:ad:d6:f7:34:4f:8f:c7:e9:e9:83:9b:d9:db: 7e:ef:e5:99:cf:12:e0:cb:62:9c:8f:3b:49:27:69: e5:de:a7:c6:56:d1:bd:c4:3c:15:40:24:7b:63:9e: e0:7c:ea:74:2d:ee:f0:3d:34:4d:44:74:e5:df:a9: 61:9d:f2:64:be:d3:d5:a8:be:c4:57:6e:bf:8e:9c: 7d:bf:34:4a:c9:44:91:ce:7f:67:41:44:9e:77:ff: 67:7d:10:c9:75:39:89:e3:3a:01:02:8a:ae:46:e2: 24:69:78:7a:58:12:0e:b9:b6:2a:07:22:2a:38:e2: 4d:55:f9:39:69:53:fd:f5:02:20:e4:bc:32:6c:77: a1:1f:65:4e:e5:d7:c2:5f:c5:fe:8b:ea:c0:e7:0e: e2:41:20:2f:e8:02:df:33:9f:c6:59:cf:d7:ea:4d: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4B:48:75:CD:32:CE:84:2C:DE:19:07:C7:20:76:28:44:DA:CB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8585ae46-721c-332c-8f15-198bd08a3a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6d:c1:c8:f2:d6:3a:2c:8b:14:1d:08:e5:c8:b9:3d:96:03: ac:90:27:f2:c8:b6:14:47:c9:3a:9e:01:a4:4b:11:1b:41:7f: e2:e3:26:16:c3:ac:0e:ec:d7:53:9a:4c:e7:a5:5c:88:b2:12: 59:18:2f:32:e9:97:92:9a:d9:d5:dd:85:50:d4:6c:33:1f:f9: f2:d5:51:86:ed:69:ae:0d:55:6a:9f:f5:df:b8:71:4d:57:81: 0a:e2:cb:e0:37:36:16:f4:9e:f5:b4:2c:c7:e9:a0:b8:0e:f4: 51:a6:ea:b0:fb:5b:ce:d4:7b:85:dc:14:05:06:bb:67:25:9b: 94:dc:5a:67:52:d6:5b:2a:b2:55:8d:dc:23:d4:d2:46:8e:ac: 5a:41:6d:06:d0:84:77:ed:0f:1e:08:f6:d2:05:b4:9b:d7:fb: 26:34:c3:59:92:56:7e:a5:82:cd:11:67:34:83:ea:3c:20:c6: b2:f2:a1:08:23:56:d9:0b:f6:41:25:1a:bf:e2:04:92:4a:3a: 60:82:3c:63:3a:bf:c1:50:c5:59:26:3b:68:82:d2:e5:dd:8f: 7c:fd:9c:27:69:a4:c8:4e:fd:f6:70:2c:e4:5c:d2:59:f4:6f: 51:82:c7:13:c8:0a:c7:1f:ba:be:83:6a:66:c7:6d:27:cf:39: 9f:93:2d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3t4SSgbA4ADTlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NDczZmU5NjctZjVlNS00YjZiLWE0NTItNTdkNWQxNmI4NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9+EQUzYKTlYdj9DQ4vYn+RJ/5emDjFDXomH nG9y6lSaCc2zj8IsPuHM0p2gl3mYoEaSLnI9sBrHOsITUdRh0UxNL7nVZvIYjneK zRO9vXIualzyQmxOI1Nt663W9zRPj8fp6YOb2dt+7+WZzxLgy2KcjztJJ2nl3qfG VtG9xDwVQCR7Y57gfOp0Le7wPTRNRHTl36lhnfJkvtPVqL7EV26/jpx9vzRKyUSR zn9nQUSed/9nfRDJdTmJ4zoBAoquRuIkaXh6WBIOubYqByIqOOJNVfk5aVP99QIg 5LwybHehH2VO5dfCX8X+i+rA5w7iQSAv6ALfM5/GWc/X6k0GEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpLSHXNMs6ELN4ZB8cgdihE2su0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODU4NWFlNDYtNzIxYy0z MzJjLThmMTUtMTk4YmQwOGEzYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACttwcjy1josixQdCOXIuT2WA6yQJ/LIthRHyTqeAaRLERtBf+LjJhbD rA7s11OaTOelXIiyElkYLzLpl5Ka2dXdhVDUbDMf+fLVUYbtaa4NVWqf9d+4cU1X gQriy+A3Nhb0nvW0LMfpoLgO9FGm6rD7W87Ue4XcFAUGu2clm5TcWmdS1lsqslWN 3CPU0kaOrFpBbQbQhHftDx4I9tIFtJvX+yY0w1mSVn6lgs0RZzSD6jwgxrLyoQgj VtkL9kElGr/iBJJKOmCCPGM6v8FQxVkmO2iC0uXdj3z9nCdppMhO/fZwLORc0ln0 b1GCxxPICscfur6DambHbSfPOZ+TLSQ= -----END CERTIFICATE-----Generated at Wed May 7 04:19:02 2025 by rpki-client