$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa File: fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa (raw, json) Hash identifier: 3+e2hENY8Lar9jLW8na0b347ReDBHqOAtIPTTKuIL9Q= Subject key identifier: 0E:75:63:D5:2A:1E:DF:82:77:50:F1:8B:9A:30:BC:14:F2:F2:3D:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584973DEE055380A0A7F9B5B9E20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 19527 IP address blocks: 34.1.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e0:55:38:0a:0a:7f:9b:5b:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=524d3d53-62a8-4fe9-a263-d155343e64c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0d:54:94:99:6a:6d:e6:09:9f:e4:27:1b:a0: 01:2f:e9:3c:0a:d9:ba:c8:5c:fe:88:25:cc:e4:53: ba:70:8e:02:1e:15:27:d0:75:e9:c8:e7:35:a1:99: 52:8e:21:ab:b9:14:ec:78:5a:37:e1:84:23:ea:a0: cd:bf:99:d2:c2:91:79:12:e0:85:5f:0d:44:63:9d: 56:57:f6:77:85:12:89:1b:22:12:13:0d:38:9a:44: 83:b0:f5:71:81:6d:47:44:4e:49:8d:76:0b:8f:5a: bc:97:5f:12:20:0c:88:58:64:b4:26:72:3e:9c:bb: 10:ca:42:ca:1a:3d:5e:cb:04:3d:0b:4f:a7:d1:c1: 43:e5:ed:41:df:8f:76:0b:0d:8a:b8:78:a0:8a:f5: 95:b9:fb:e5:b8:39:19:db:b7:9e:e7:de:83:27:6d: 1d:02:bd:1c:6d:1b:99:12:a4:f9:1b:c1:21:c8:2b: 16:91:53:b8:f1:0e:2c:50:68:e1:3b:0a:fb:75:fc: a0:43:c9:a4:fa:7e:87:de:2b:76:20:5d:93:74:09: 33:5a:e6:46:ed:1b:bf:b1:4a:82:94:10:cf:f4:41: 2a:f9:63:29:64:68:fd:26:73:85:20:29:48:26:0b: 45:f3:db:38:2e:52:d7:a3:4f:d8:d2:a0:3d:fd:22: 44:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:75:63:D5:2A:1E:DF:82:77:50:F1:8B:9A:30:BC:14:F2:F2:3D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcfcf411-0870-36ea-bdc1-3071e8f6524c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d0:3c:a0:98:eb:f1:65:2c:72:e2:c3:cd:9a:15:54:e9:4b: 3c:62:d0:b1:74:aa:8f:3d:d4:77:6c:a5:d4:5a:23:85:d0:4d: b4:ca:e6:cc:9d:dd:75:85:f7:03:64:91:d5:76:72:0c:45:91: c2:51:75:c6:84:b8:0e:74:bb:01:87:ba:a4:12:46:69:59:75: e2:48:be:cf:c1:e9:60:02:29:53:9a:c2:90:46:65:09:ab:58: 4e:4d:fb:67:2b:ab:6d:e6:b0:98:84:18:c4:16:71:cb:0f:18: 86:11:10:ad:85:5d:57:20:aa:97:20:c1:dd:fd:73:d7:0d:70: b6:f3:cd:79:07:e6:f6:ec:b5:51:67:f4:10:f8:c6:f7:bf:8a: ea:b9:7b:c6:b3:ee:73:6b:14:e2:b7:6a:62:d5:b3:e6:91:a0: d1:10:12:88:fe:f3:2a:9c:b3:71:10:ae:c7:65:c1:a9:39:64: 77:d9:5b:7d:9f:98:62:50:0f:ed:19:0d:4f:4f:3f:e8:13:66: 75:7e:b8:63:18:e4:5c:a8:36:ba:e5:3a:49:84:6a:48:56:5d: 5a:2b:42:23:19:59:b9:0e:5b:ec:47:2f:5c:f6:7e:fe:48:6d: a6:2a:a1:74:f1:b2:37:ac:bb:dd:a4:be:e9:48:a7:b0:35:42: 43:85:12:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uBVOAoKf5tbniAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NTI0ZDNkNTMtNjJhOC00ZmU5LWEyNjMtZDE1NTM0M2U2NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg1UlJlqbeYJn+QnG6ABL+k8Ctm6yFz+iCXM 5FO6cI4CHhUn0HXpyOc1oZlSjiGruRTseFo34YQj6qDNv5nSwpF5EuCFXw1EY51W V/Z3hRKJGyISEw04mkSDsPVxgW1HRE5JjXYLj1q8l18SIAyIWGS0JnI+nLsQykLK Gj1eywQ9C0+n0cFD5e1B3492Cw2KuHigivWVufvluDkZ27ee596DJ20dAr0cbRuZ EqT5G8EhyCsWkVO48Q4sUGjhOwr7dfygQ8mk+n6H3it2IF2TdAkzWuZG7Ru/sUqC lBDP9EEq+WMpZGj9JnOFIClIJgtF89s4LlLXo0/Y0qA9/SJEDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA51Y9UqHt+Cd1Dxi5owvBTy8j3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmNmY2Y0MTEtMDg3MC0z NmVhLWJkYzEtMzA3MWU4ZjY1MjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTQPKCY6/FlLHLiw82aFVTpSzxi0LF0qo891HdspdRaI4XQTbTK5syd 3XWF9wNkkdV2cgxFkcJRdcaEuA50uwGHuqQSRmlZdeJIvs/B6WACKVOawpBGZQmr WE5N+2crq23msJiEGMQWccsPGIYREK2FXVcgqpcgwd39c9cNcLbzzXkH5vbstVFn 9BD4xve/iuq5e8az7nNrFOK3amLVs+aRoNEQEoj+8yqcs3EQrsdlwak5ZHfZW32f mGJQD+0ZDU9PP+gTZnV+uGMY5FyoNrrlOkmEakhWXVorQiMZWbkOW+xHL1z2fv5I baYqoXTxsjesu92kvulIp7A1QkOFEiE= -----END CERTIFICATE-----Generated at Sun May 4 19:32:40 2025 by rpki-client