$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36706b90-1b4e-34ad-b7fd-a3cddac1c234.roa File: 36706b90-1b4e-34ad-b7fd-a3cddac1c234.roa (raw, json) Hash identifier: ad2DfLOS3fCOFD0Z8lBQ3NEgssSBaV+90+oX+9BWDFg= Subject key identifier: 31:51:81:7F:8A:96:3D:46:EC:D6:3E:53:DC:4F:B8:DF:10:B1:B4:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EAE81C262E3DC4EBB9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36706b90-1b4e-34ad-b7fd-a3cddac1c234.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.143.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:e8:1c:26:2e:3d:c4:eb:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1ebe4d07-231f-46c2-9c71-bf21648eec8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:e3:d9:18:a4:e1:50:d6:20:bc:f8:0d:e3: a2:8a:8b:ce:67:04:ab:4e:b0:fb:d7:76:c5:3f:6f: d5:38:45:86:17:24:fa:a0:1e:a7:de:a4:7c:40:cc: d6:da:e3:95:da:27:93:1a:ab:37:2e:1f:6b:b9:42: 82:8b:51:e0:54:3b:8c:cf:72:16:7f:87:4b:e4:e7: 9c:a5:20:b1:60:b4:6f:d8:68:e0:00:11:f6:96:d6: b5:91:d3:81:e6:d5:f6:ce:45:a1:4c:57:f1:54:20: be:ac:48:f7:d5:7a:19:00:42:18:8f:97:3e:3b:e6: a4:0b:e2:c6:21:13:5d:1c:ce:62:61:13:42:96:15: a6:5c:0c:0f:4d:5b:73:31:33:fd:21:ad:9a:91:30: b9:4b:18:08:ad:4d:e9:45:cc:2d:ef:34:b8:be:fc: ca:b0:33:90:83:21:3e:8e:27:81:5c:71:19:97:c5: 52:09:21:12:c4:de:a8:1d:8d:d4:35:85:99:04:55: 8f:47:5a:5b:ff:4b:77:df:fe:4c:ed:ae:1a:af:20: 06:8f:e2:8c:cc:4a:d6:8a:3a:66:8e:4b:f5:ce:ab: 5c:29:a5:e0:ec:19:b1:f2:8a:a0:0e:d6:13:d3:90: 97:9e:80:59:8f:d2:05:16:78:13:c0:61:e5:3e:1a: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:51:81:7F:8A:96:3D:46:EC:D6:3E:53:DC:4F:B8:DF:10:B1:B4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36706b90-1b4e-34ad-b7fd-a3cddac1c234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.143.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5d:0b:2b:bd:1b:09:aa:e7:b0:a2:7a:2e:6b:f6:3f:e8:18: d1:c1:ce:e0:5f:82:8f:6d:26:b3:a8:03:25:60:de:c7:ff:73: 13:8d:b9:fb:a7:7a:e2:88:c6:19:9a:e9:ac:5b:cc:8e:bc:f9: f3:1b:af:ce:55:ad:54:94:8d:01:90:d0:c1:c7:01:78:5c:e5: d3:01:87:26:11:0e:15:8d:55:f5:02:14:c3:9f:d4:29:9f:37: 40:3f:52:ea:66:02:d4:74:84:74:8d:5b:c7:33:20:dd:de:e1: ae:67:9b:0a:b0:21:87:97:0e:ec:e0:47:e0:4c:37:5a:4c:56: 1d:7c:b7:b6:5d:86:80:b1:92:c3:4e:3b:8e:4d:c1:ad:aa:6f: ad:f3:e1:3d:2e:1c:6a:de:fb:8d:92:94:4a:43:e0:8f:5a:e5: dc:aa:b8:e6:86:19:a6:e9:cf:95:7f:d7:0b:61:ec:19:53:9d: 2a:9d:54:af:c6:79:bf:c3:f4:c6:42:9c:3e:0f:a8:79:7b:3d: 99:a9:5a:d5:2c:df:17:bf:94:93:8b:a2:e6:85:e0:a1:7f:09: d0:91:41:f1:70:8b:f2:47:68:01:b0:6f:b9:a2:26:a2:25:4a: 36:71:73:9a:25:f0:a1:ae:78:38:88:88:04:c8:f1:5e:08:b2: f2:14:e9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOroHCYuPcTrucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWViZTRkMDctMjMxZi00NmMyLTljNzEtYmYyMTY0OGVlYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqPj2Rik4VDWILz4DeOiiovOZwSrTrD713bF P2/VOEWGFyT6oB6n3qR8QMzW2uOV2ieTGqs3Lh9ruUKCi1HgVDuMz3IWf4dL5Oec pSCxYLRv2GjgABH2lta1kdOB5tX2zkWhTFfxVCC+rEj31XoZAEIYj5c+O+akC+LG IRNdHM5iYRNClhWmXAwPTVtzMTP9Ia2akTC5SxgIrU3pRcwt7zS4vvzKsDOQgyE+ jieBXHEZl8VSCSESxN6oHY3UNYWZBFWPR1pb/0t33/5M7a4aryAGj+KMzErWijpm jkv1zqtcKaXg7Bmx8oqgDtYT05CXnoBZj9IFFngTwGHlPhqFmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFRgX+Klj1G7NY+U9xPuN8QsbQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzY3MDZiOTAtMWI0ZS0z NGFkLWI3ZmQtYTNjZGRhYzFjMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIo9PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACddCyu9Gwmq57Ciei5r9j/oGNHBzuBfgo9tJrOoAyVg3sf/cxONufun euKIxhma6axbzI68+fMbr85VrVSUjQGQ0MHHAXhc5dMBhyYRDhWNVfUCFMOf1Cmf N0A/UupmAtR0hHSNW8czIN3e4a5nmwqwIYeXDuzgR+BMN1pMVh18t7ZdhoCxksNO O45Nwa2qb63z4T0uHGre+42SlEpD4I9a5dyquOaGGabpz5V/1wth7BlTnSqdVK/G eb/D9MZCnD4PqHl7PZmpWtUs3xe/lJOLouaF4KF/CdCRQfFwi/JHaAGwb7miJqIl SjZxc5ol8KGueDiIiATI8V4IsvIU6Tk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:15 2025 by rpki-client