$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f92d401-135d-3fb7-ab4c-7332e762c911.roa File: 0f92d401-135d-3fb7-ab4c-7332e762c911.roa (raw, json) Hash identifier: ETWDl59zU9J2i3iMYl0aOInsF9lc9aXN2r8CM/rSs7s= Subject key identifier: 4F:A5:7B:DD:8A:2D:22:40:C9:C9:4E:DC:65:CD:7E:16:CB:51:27:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858497DA473BFE519D767956C9880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f92d401-135d-3fb7-ab4c-7332e762c911.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.144.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:73:bf:e5:19:d7:67:95:6c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=bb92196b-14c2-4ce5-8863-5b210c413bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b4:33:b4:b7:50:30:0d:3c:ce:8c:26:23:19: 52:fd:1e:e8:24:9d:59:f3:5d:a7:38:ce:5d:b8:c9: d8:9e:6f:67:7c:9d:c3:c0:e1:80:30:fb:33:c5:ab: 6b:06:fc:28:98:15:d8:70:64:72:33:19:0d:25:b8: 12:51:78:9b:f7:08:22:8b:16:0a:7c:2e:d0:c7:15: 54:81:2b:c8:a9:9c:d7:14:19:3b:56:38:af:7f:1d: 2e:89:3a:4a:c4:7f:a2:de:46:a5:e4:44:0a:52:62: e4:c6:c9:cb:83:df:e3:c1:21:c0:1e:15:b3:67:8a: 18:1e:a4:5d:72:69:af:ec:8d:b6:d5:3c:f1:06:25: b8:36:b3:e1:bc:ae:cc:c2:1d:4f:b2:77:9d:49:11: e6:55:cc:00:38:52:2b:1d:51:c5:6a:26:ca:f1:3f: 59:e7:a3:92:bd:bf:34:f7:c7:41:ad:ee:97:a2:68: 32:e4:d3:8d:3f:cb:17:91:6b:a4:82:61:90:6b:0d: 77:77:a6:75:ad:7c:e7:9a:a5:20:23:71:ff:ac:bd: 41:76:63:42:a4:e6:fc:d2:6f:34:ab:ca:14:86:78: a2:1d:9c:38:ae:7c:e5:c1:df:fb:af:c4:43:27:3b: c9:f4:58:f5:53:0e:57:19:be:5a:1a:69:1f:95:03: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:7B:DD:8A:2D:22:40:C9:C9:4E:DC:65:CD:7E:16:CB:51:27:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f92d401-135d-3fb7-ab4c-7332e762c911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a0:22:9d:2f:87:81:46:0e:0b:9b:18:b1:fc:db:a4:d6:9e: 1f:09:9d:cf:8a:46:f4:fa:15:59:df:31:fe:d0:0e:2b:83:9d: 7f:79:0f:5d:c2:cf:1a:4b:6c:3c:71:83:b6:03:f5:56:12:63: b7:b3:55:0b:e1:3c:0b:70:93:20:69:78:93:73:8c:8a:2e:7c: 9e:32:33:22:5a:9c:a2:a4:ad:ca:ec:14:26:48:c2:30:36:0f: 7c:45:0f:aa:aa:4c:0d:e0:6a:79:14:f6:b7:0e:8a:cc:63:d6: 7f:df:77:0b:48:88:54:bf:44:ad:73:a9:d0:4a:aa:e0:42:04: 50:e7:ab:73:c2:95:d8:8d:8e:7b:d2:5f:db:8d:43:fc:ac:e0: 25:ac:e1:8c:74:2d:98:f8:af:1f:05:85:c5:5b:aa:83:20:e1: 62:6c:d2:7b:6c:59:2b:97:0a:35:d5:2d:ba:1f:65:50:37:18: 52:15:3e:ea:c8:9d:27:8f:68:42:ac:ed:39:35:f4:e3:5d:8f: 34:56:ed:af:90:51:6e:30:60:92:60:ad:46:d7:74:80:c7:15: ff:a2:54:0c:00:c4:87:c6:2a:c8:1d:26:6e:3e:b8:e8:03:0b: 61:e1:ce:99:94:9b:a5:c6:91:65:56:68:31:85:2e:17:89:85: 4f:9b:0e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHO/5RnXZ5VsmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmI5MjE5NmItMTRjMi00Y2U1LTg4NjMtNWIyMTBjNDEzYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrQztLdQMA08zowmIxlS/R7oJJ1Z812nOM5d uMnYnm9nfJ3DwOGAMPszxatrBvwomBXYcGRyMxkNJbgSUXib9wgiixYKfC7QxxVU gSvIqZzXFBk7Vjivfx0uiTpKxH+i3kal5EQKUmLkxsnLg9/jwSHAHhWzZ4oYHqRd cmmv7I221TzxBiW4NrPhvK7Mwh1PsnedSRHmVcwAOFIrHVHFaibK8T9Z56OSvb80 98dBre6Xomgy5NONP8sXkWukgmGQaw13d6Z1rXznmqUgI3H/rL1BdmNCpOb80m80 q8oUhniiHZw4rnzlwd/7r8RDJzvJ9Fj1Uw5XGb5aGmkflQPUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+le92KLSJAyclO3GXNfhbLUSfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY5MmQ0MDEtMTM1ZC0z ZmI3LWFiNGMtNzMzMmU3NjJjOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOgIp0vh4FGDgubGLH826TWnh8Jnc+KRvT6FVnfMf7QDiuDnX95D13C zxpLbDxxg7YD9VYSY7ezVQvhPAtwkyBpeJNzjIoufJ4yMyJanKKkrcrsFCZIwjA2 D3xFD6qqTA3gankU9rcOisxj1n/fdwtIiFS/RK1zqdBKquBCBFDnq3PCldiNjnvS X9uNQ/ys4CWs4Yx0LZj4rx8FhcVbqoMg4WJs0ntsWSuXCjXVLbofZVA3GFIVPurI nSePaEKs7Tk19ONdjzRW7a+QUW4wYJJgrUbXdIDHFf+iVAwAxIfGKsgdJm4+uOgD C2HhzpmUm6XGkWVWaDGFLheJhU+bDq0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:03 2025 by rpki-client