$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa File: 9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa (raw, json) Hash identifier: dOczLflDOx6CCZoMMU1Xmd0D/CtMCJMNJzdc32sRbsQ= Subject key identifier: E9:31:A5:D4:AF:06:AD:59:D9:8A:07:02:07:CA:3F:C8:45:AB:13:6B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785422370A70CF8766B1280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.143.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:42:23:70:a7:0c:f8:76:6b:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=61c145fb-2b5d-4c88-91ee-b0fe7df6a1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:72:3c:01:a8:7b:61:58:e2:45:6b:bc:c5: 5b:bb:a8:c0:1a:b4:12:6f:e1:03:a5:1a:d3:34:22: 30:53:7e:24:9c:8c:8a:08:b2:62:a9:9d:bb:13:a4: c8:83:e1:8a:33:b5:29:b3:20:3b:5f:81:d7:ef:80: 8a:55:6a:8f:f2:d4:1a:e1:56:1a:36:c1:58:95:10: 31:c8:8d:ee:7f:b2:08:45:04:7a:4b:24:af:28:30: 55:b2:1d:49:a9:01:e1:69:28:47:e5:17:ca:f3:85: 7c:69:be:ef:26:f5:c6:2f:58:d5:72:53:ad:e4:e3: a0:58:35:bd:b9:c5:81:14:32:92:43:6a:fa:e8:23: f0:82:db:58:dd:d3:2e:61:b7:30:6d:59:63:f6:a4: 9a:49:95:51:0b:64:4f:72:8a:97:d8:f9:7f:e3:74: 0d:9a:a7:7c:ce:c3:d3:63:89:68:6d:cb:33:a6:69: ad:6f:f8:69:45:5b:62:79:8b:1a:d9:c5:ba:55:93: 5c:0d:19:bc:fd:79:65:e0:1a:ec:84:8b:b5:a6:b2: 17:77:85:40:79:a6:fa:33:47:92:fb:66:25:95:75: 31:d9:54:50:47:d2:12:2b:2e:87:4a:74:f8:ec:79: db:81:29:51:de:84:ed:65:49:26:9f:06:b8:23:53: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:31:A5:D4:AF:06:AD:59:D9:8A:07:02:07:CA:3F:C8:45:AB:13:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a8b02e4-04f1-3bc0-9949-a5141cbd8b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:84:d3:8f:0b:4d:a4:a0:40:a5:db:1a:f1:64:3b:fc:5b:36: b4:23:49:37:44:e2:6c:05:f1:4d:ab:7b:6f:87:b3:62:16:d0: f4:87:d0:2e:bf:40:a4:b5:45:0c:79:0e:16:fa:3d:13:88:89: b9:c3:41:38:33:08:fd:e7:ad:d3:66:ec:70:32:24:42:8f:fa: bb:86:b7:70:35:70:05:57:fc:31:e8:43:fe:ad:f2:5f:c3:e4: 53:e5:cf:6c:71:1d:4e:ce:bf:0a:7d:c2:8d:61:1b:9a:df:0a: 90:2f:e9:d7:99:38:78:1e:6d:f5:0f:be:bb:46:35:c5:d9:ad: e5:90:87:c9:70:a1:81:6f:b0:ba:cc:8a:43:4a:11:e7:61:44: 68:d8:e8:fa:7f:8a:b1:46:98:24:7e:f4:bb:d8:05:89:2c:8d: 3e:a0:42:cf:57:ef:a4:80:a7:38:05:92:25:1e:7a:18:57:bd: 40:ec:f8:9e:af:b5:0d:6a:a7:d9:de:e3:65:6c:af:a2:61:43: 2e:0a:30:28:55:28:29:cd:53:ca:ac:1f:ac:23:e3:67:ff:cb: ae:e0:7e:33:97:82:e0:f0:2c:78:dd:7b:21:9b:7f:06:73:67: 42:bc:5f:22:d7:aa:20:c9:62:4f:cc:3c:14:8a:f6:c6:99:60: 7f:00:3a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhUIjcKcM+HZrEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjFjMTQ1ZmItMmI1ZC00Yzg4LTkxZWUtYjBmZTdkZjZhMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRVyPAGoe2FY4kVrvMVbu6jAGrQSb+EDpRrT NCIwU34knIyKCLJiqZ27E6TIg+GKM7UpsyA7X4HX74CKVWqP8tQa4VYaNsFYlRAx yI3uf7IIRQR6SySvKDBVsh1JqQHhaShH5RfK84V8ab7vJvXGL1jVclOt5OOgWDW9 ucWBFDKSQ2r66CPwgttY3dMuYbcwbVlj9qSaSZVRC2RPcoqX2Pl/43QNmqd8zsPT Y4lobcszpmmtb/hpRVtieYsa2cW6VZNcDRm8/Xll4BrshIu1prIXd4VAeab6M0eS +2YllXUx2VRQR9ISKy6HSnT47HnbgSlR3oTtZUkmnwa4I1OPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkxpdSvBq1Z2YoHAgfKP8hFqxNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWE4YjAyZTQtMDRmMS0z YmMwLTk5NDktYTUxNDFjYmQ4YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIo9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiE048LTaSgQKXbGvFkO/xbNrQjSTdE4mwF8U2re2+Hs2IW0PSH0C6/ QKS1RQx5Dhb6PROIibnDQTgzCP3nrdNm7HAyJEKP+ruGt3A1cAVX/DHoQ/6t8l/D 5FPlz2xxHU7Ovwp9wo1hG5rfCpAv6deZOHgebfUPvrtGNcXZreWQh8lwoYFvsLrM ikNKEedhRGjY6Pp/irFGmCR+9LvYBYksjT6gQs9X76SApzgFkiUeehhXvUDs+J6v tQ1qp9ne42Vsr6JhQy4KMChVKCnNU8qsH6wj42f/y67gfjOXguDwLHjdeyGbfwZz Z0K8XyLXqiDJYk/MPBSK9saZYH8AOn0= -----END CERTIFICATE-----Generated at Sun May 4 19:19:44 2025 by rpki-client