$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b89a2110-1d83-3612-bc52-31352f457f07.roa File: b89a2110-1d83-3612-bc52-31352f457f07.roa (raw, json) Hash identifier: O2EycOlDJXwhFn9Ao0mAp5DAOGgGEXQY+6uIOSN8bTE= Subject key identifier: 3B:7A:2A:B1:11:17:6B:C5:34:B8:05:1A:07:73:24:40:4C:80:63:F6 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0BDD1A69E462892A1840 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b89a2110-1d83-3612-bc52-31352f457f07.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 15247 IP address blocks: 207.34.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0b:dd:1a:69:e4:62:89:2a:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=dc3a7703-2f43-4602-b2c8-a79afbe85b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:a3:5e:04:b1:b5:85:81:80:a7:c8:13:7b: 18:5d:ae:a4:e2:4b:38:57:1d:49:a4:19:da:73:dd: a3:13:a9:a4:fa:f9:c8:94:40:6c:be:da:36:26:3f: 75:33:08:8d:15:69:b5:e7:50:5f:c3:5b:12:b2:25: 93:91:ad:93:89:b4:37:b2:85:ee:14:c4:6b:84:ac: e8:b3:0d:f7:1d:02:79:47:60:c2:77:81:0d:63:9e: 5d:6d:79:0a:86:c1:17:d8:78:0d:8e:c7:c2:c0:69: 8f:de:6e:95:c0:e3:86:a2:2d:f1:e2:30:b5:8d:46: 2a:05:be:2a:d3:5a:4e:7c:27:d6:96:6b:ac:b1:eb: 9d:10:57:23:7b:bf:e0:0f:ad:23:ad:ff:49:bb:df: 53:1a:16:c9:58:1c:93:66:d9:7b:b4:99:9e:8f:40: 88:9e:7e:ae:d9:9e:2b:b8:04:c1:8b:2b:8f:df:2d: b1:5e:cb:f9:3b:05:be:17:08:21:b8:3a:5e:9c:c2: da:5c:80:e4:7f:64:73:df:97:c3:f2:f0:dd:ef:d8: d3:89:a2:1b:ac:88:dd:31:71:cc:cf:70:bd:5b:86: da:c8:5f:07:6e:37:4e:32:92:00:3c:55:86:64:81: a5:45:15:98:02:3e:7a:c1:b0:ff:aa:f1:6e:ae:db: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7A:2A:B1:11:17:6B:C5:34:B8:05:1A:07:73:24:40:4C:80:63:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b89a2110-1d83-3612-bc52-31352f457f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.34.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption eb:da:40:7a:4a:24:df:6b:16:3d:b4:e5:3b:43:b0:9d:4c:d3: 74:f6:19:5f:91:dc:13:95:bc:87:46:b0:ac:10:d9:96:fa:8b: af:96:20:2f:d4:98:f7:0b:89:5e:f0:9c:0e:25:19:12:98:24: 15:c2:75:ce:9e:07:72:72:20:73:6e:6d:7b:f4:4e:c3:59:12: e4:f5:ce:ca:6c:5b:8b:e3:19:37:d1:1b:08:58:b9:5e:ad:ec: 88:cf:43:54:2a:03:55:ce:3f:71:84:ec:ee:c7:85:e4:8b:95: 2d:8a:88:62:e5:aa:70:82:a2:ba:1b:d9:4a:c5:e4:3f:66:87: 49:3a:15:a4:bb:00:ba:1f:57:d7:09:54:78:74:b3:f9:02:20: 78:77:0f:71:ff:c9:62:cc:2e:66:36:88:ac:be:d1:b2:da:ec: 15:18:55:5f:e8:76:b4:85:a6:d3:07:65:9c:1e:fa:6b:58:c8: b4:19:ce:05:7d:bb:cb:61:d0:09:fd:f3:ac:15:40:56:fc:ed: 0c:27:1b:48:57:26:ea:a6:e4:b3:12:65:7f:40:56:f4:47:a2: 85:ff:c7:cc:d0:68:0c:cd:f2:10:f9:ea:97:a8:a8:07:0f:ab: c9:90:5f:72:89:c0:9d:9b:4d:dc:0c:2e:ad:ca:95:e1:58:8a: 09:39:a0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wvdGmnkYokqGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZGMzYTc3MDMtMmY0My00NjAyLWIyYzgtYTc5YWZiZTg1YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zSjXgSxtYWBgKfIE3sYXa6k4ks4Vx1JpBna c92jE6mk+vnIlEBsvto2Jj91MwiNFWm151Bfw1sSsiWTka2TibQ3soXuFMRrhKzo sw33HQJ5R2DCd4ENY55dbXkKhsEX2HgNjsfCwGmP3m6VwOOGoi3x4jC1jUYqBb4q 01pOfCfWlmusseudEFcje7/gD60jrf9Ju99TGhbJWByTZtl7tJmej0CInn6u2Z4r uATBiyuP3y2xXsv5OwW+FwghuDpenMLaXIDkf2Rz35fD8vDd79jTiaIbrIjdMXHM z3C9W4bayF8HbjdOMpIAPFWGZIGlRRWYAj56wbD/qvFurttFGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt6KrERF2vFNLgFGgdzJEBMgGP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjg5YTIxMTAtMWQ4My0z NjEyLWJjNTItMzEzNTJmNDU3ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOvaQHpKJN9rFj205TtDsJ1M03T2GV+R3BOVvIdGsKwQ2Zb6i6+WIC/U mPcLiV7wnA4lGRKYJBXCdc6eB3JyIHNubXv0TsNZEuT1zspsW4vjGTfRGwhYuV6t 7IjPQ1QqA1XOP3GE7O7HheSLlS2KiGLlqnCCorob2UrF5D9mh0k6FaS7ALofV9cJ VHh0s/kCIHh3D3H/yWLMLmY2iKy+0bLa7BUYVV/odrSFptMHZZwe+mtYyLQZzgV9 u8th0An986wVQFb87QwnG0hXJuqm5LMSZX9AVvRHooX/x8zQaAzN8hD56peoqAcP q8mQX3KJwJ2bTdwMLq3KleFYigk5oDE= -----END CERTIFICATE-----Generated at Mon Apr 28 19:58:38 2025 by rpki-client