$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa File: 44b84c45-6b44-3064-97a5-840e10be1c91.roa (raw, json) Hash identifier: Qi5v/g5teQ7EU2ot81x//lFnl1pu15zRXCm4f3DdTVg= Subject key identifier: 55:3B:DD:0F:26:78:B4:8B:4F:93:88:A6:3D:A7:E3:3B:83:7A:23:01 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB6F00176FF300DAE9E130 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.104.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6f:00:17:6f:f3:00:da:e9:e1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7c251885-d6bd-485e-820e-a87e39756492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:59:94:2a:6e:dd:e2:24:1a:0f:c8:dc:64: d5:c1:db:7b:6f:19:c6:41:86:6d:9e:d9:e4:22:fb: b0:16:c3:ff:96:59:10:97:bc:e2:38:f4:ee:72:c6: cb:5a:b6:c7:43:35:21:68:9b:dc:3f:5e:49:8b:53: de:c8:4a:8e:28:9b:3e:41:24:eb:1b:2f:6d:83:d2: b9:8a:b7:ea:17:1b:17:34:5b:a1:66:47:0a:08:21: 82:b2:ff:86:e4:84:c9:b8:fb:73:a2:7c:1b:0e:d5: 88:44:73:4a:7f:34:d0:e0:18:b5:01:89:53:2b:99: 95:25:61:ec:a3:f8:7a:b7:8d:3c:59:61:fa:c1:e2: 87:4d:7b:e2:bc:6d:b9:7e:84:87:34:a7:8c:e6:8d: ce:e9:73:91:a3:7b:1c:29:18:9e:f2:66:18:ce:e1: 35:b1:70:bd:c0:05:33:d3:2f:65:00:6e:fe:c5:c3: cf:b4:13:c4:1e:2f:1c:c1:1a:76:b0:59:61:26:eb: 85:b4:31:90:70:a6:8c:d3:61:06:5f:fb:6e:17:62: 8f:04:ec:d5:54:51:bc:3d:ab:bc:ba:67:78:b9:d0: 06:0f:a5:26:91:a8:a9:ba:dc:34:d4:94:67:21:a3: 61:0e:b9:77:49:65:52:7c:19:ee:6f:1a:ea:6b:5a: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3B:DD:0F:26:78:B4:8B:4F:93:88:A6:3D:A7:E3:3B:83:7A:23:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/44b84c45-6b44-3064-97a5-840e10be1c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:5a:21:de:9f:ba:1f:85:18:19:62:1d:5a:69:fa:52:0a:f4: 7b:dc:09:34:aa:a8:c1:12:81:79:92:bb:4c:9a:8a:0b:c6:cc: 84:40:82:87:1b:ed:3c:3f:d4:d5:9a:13:79:25:7f:f3:3d:00: 13:30:11:e3:51:15:b8:af:97:0e:7f:b5:75:99:9f:6a:dd:65: 1f:fe:e1:ba:c6:74:7f:0a:25:29:8e:79:35:2e:80:4f:93:f4: 9d:56:3f:77:76:cc:dc:0c:ac:9c:e0:36:f0:62:b4:0a:df:46: 83:0b:d9:b3:b1:65:b4:24:30:6a:3a:49:9b:b7:8a:45:3c:c4: f2:b6:75:68:c2:92:0f:2c:07:cd:fc:de:86:20:ca:23:92:67: ae:fd:0c:0d:7c:66:17:81:4a:0c:77:51:4a:f3:1f:0e:68:44: fc:96:6c:be:83:69:c0:17:7e:33:02:21:de:01:f1:f9:ec:ec: 2f:c5:72:8b:d0:59:e3:87:d9:6a:56:c5:85:c0:0c:c9:ea:17: 97:aa:8a:33:f8:8d:85:7f:5e:b8:ff:7d:f9:6e:c5:47:f8:b3: af:00:c8:41:74:a1:89:dd:55:7b:a0:b7:28:7b:32:cf:cb:da: 2c:66:07:2b:64:d1:df:fd:37:4f:bd:36:40:f1:eb:47:23:8f: f6:b4:c9:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku28AF2/zANrp4TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2MyNTE4ODUtZDZiZC00ODVlLTgyMGUtYTg3ZTM5NzU2NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq1ZlCpu3eIkGg/I3GTVwdt7bxnGQYZtntnk IvuwFsP/llkQl7ziOPTucsbLWrbHQzUhaJvcP15Ji1PeyEqOKJs+QSTrGy9tg9K5 irfqFxsXNFuhZkcKCCGCsv+G5ITJuPtzonwbDtWIRHNKfzTQ4Bi1AYlTK5mVJWHs o/h6t408WWH6weKHTXvivG25foSHNKeM5o3O6XORo3scKRie8mYYzuE1sXC9wAUz 0y9lAG7+xcPPtBPEHi8cwRp2sFlhJuuFtDGQcKaM02EGX/tuF2KPBOzVVFG8Pau8 umd4udAGD6Umkaiputw01JRnIaNhDrl3SWVSfBnubxrqa1pmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU73Q8meLSLT5OIpj2n4zuDeiMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDRiODRjNDUtNmI0NC0z MDY0LTk3YTUtODQwZTEwYmUxYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImgdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5aId6fuh+FGBliHVpp+lIK9HvcCTSqqMESgXmSu0yaigvGzIRAgocb 7Tw/1NWaE3klf/M9ABMwEeNRFbivlw5/tXWZn2rdZR/+4brGdH8KJSmOeTUugE+T 9J1WP3d2zNwMrJzgNvBitArfRoML2bOxZbQkMGo6SZu3ikU8xPK2dWjCkg8sB838 3oYgyiOSZ679DA18ZheBSgx3UUrzHw5oRPyWbL6DacAXfjMCId4B8fns7C/FcovQ WeOH2WpWxYXADMnqF5eqijP4jYV/Xrj/ffluxUf4s68AyEF0oYndVXugtyh7Ms/L 2ixmBytk0d/9N0+9NkDx60cjj/a0yeY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:43 2025 by rpki-client