$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa File: 668d5a3e-df97-3fd9-881f-29cee41e2d88.roa (raw, json) Hash identifier: TqRwyCRPkwm3/G2Gyu/etg6psJRDLk5KAEDwlJhpjg8= Subject key identifier: 18:E9:45:66:B0:9D:9C:4C:23:A5:23:2B:5C:61:D5:4E:A8:8F:5B:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584973DEE0812B32788989EAD500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 15169 IP address blocks: 34.1.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e0:81:2b:32:78:89:89:ea:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=9ef07d8a-1d70-40d9-b509-de945d4635eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:85:b2:fe:64:32:63:9c:10:1f:5c:d0:f6: bb:50:7d:a7:f8:22:0e:44:4d:5f:48:06:0d:54:bd: cf:18:64:5f:1a:64:b6:b6:05:fd:cb:fe:18:88:16: 08:58:46:54:1b:1f:fc:55:56:a8:d5:48:60:22:94: 09:c5:71:53:f1:c3:43:e8:0b:89:4f:38:3a:35:a5: 5d:cf:cf:15:df:89:94:4a:61:61:dc:a7:01:7b:94: 3a:d8:68:0e:88:32:61:10:9b:e4:db:44:d8:bf:90: f9:1d:b3:ae:f5:fa:43:13:64:35:3e:b7:a4:81:7c: f2:58:8c:59:f6:3b:27:21:7c:68:f9:4c:ae:a7:71: 62:ac:a0:38:62:6f:05:a6:c2:43:a7:b7:ec:d5:e5: 01:6a:f7:ae:c1:13:ab:e7:90:36:a3:4b:06:46:04: 35:98:ef:8a:59:62:47:41:43:dc:71:92:96:63:e5: 1e:1c:7f:2e:d1:98:fd:14:1d:5a:70:0c:f0:9f:c0: 65:73:9c:f3:32:ba:b7:0b:38:90:a9:e3:8a:f8:5c: 99:f8:6b:73:3c:ec:40:09:7c:64:58:92:da:4b:c2: 5d:a2:8e:09:db:74:8c:cf:bc:41:62:6a:b6:bf:16: 44:83:12:3d:a6:9c:46:9b:7d:7d:aa:a7:7e:47:46: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:45:66:B0:9D:9C:4C:23:A5:23:2B:5C:61:D5:4E:A8:8F:5B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/668d5a3e-df97-3fd9-881f-29cee41e2d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cd:11:05:d1:26:84:c6:1c:37:43:87:2c:be:00:be:12:00: a6:e8:48:2c:ba:e7:8a:6f:6d:f7:9d:a8:04:5e:07:c4:5d:03: 9b:99:05:db:a4:26:f1:4a:74:94:cb:5a:22:6f:7b:66:9a:b1: d0:c7:15:9d:1f:59:86:21:b6:4b:79:0c:28:03:a5:3c:e5:55: f6:94:3c:70:7b:15:5b:e7:34:63:5c:3e:d9:48:d6:c9:ae:3e: 0a:41:a8:04:fa:2d:49:9f:6c:de:03:35:3d:de:89:15:c3:3f: f3:7b:f4:d6:6d:85:91:85:59:8a:57:c3:a8:f1:82:9d:e1:81: 1f:71:c4:4f:73:9e:22:9c:8f:ee:87:cb:2c:7b:57:f1:fe:9c: 78:2e:12:dc:42:e4:6c:bb:cf:08:a7:d0:61:1b:d0:1b:1e:f5: 7a:35:6f:eb:5f:3c:1c:06:1b:e7:48:0f:0c:38:97:53:c6:f9: 6f:a4:eb:bc:9c:15:81:31:5a:04:df:0b:96:32:86:df:6f:b5: ad:b7:50:9d:5b:d4:60:79:ac:df:25:e0:7a:7c:3c:2b:80:7a: 3b:fd:ba:3d:58:3c:47:92:38:8b:99:a6:1f:b4:6e:f1:aa:dd: e5:41:e7:95:9f:20:86:91:53:bc:a9:dc:7c:17:4c:88:55:91: b6:e3:d7:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uCBKzJ4iYnq1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk OWVmMDdkOGEtMWQ3MC00MGQ5LWI1MDktZGU5NDVkNDYzNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPmFsv5kMmOcEB9c0Pa7UH2n+CIORE1fSAYN VL3PGGRfGmS2tgX9y/4YiBYIWEZUGx/8VVao1UhgIpQJxXFT8cND6AuJTzg6NaVd z88V34mUSmFh3KcBe5Q62GgOiDJhEJvk20TYv5D5HbOu9fpDE2Q1PrekgXzyWIxZ 9jsnIXxo+Uyup3FirKA4Ym8FpsJDp7fs1eUBaveuwROr55A2o0sGRgQ1mO+KWWJH QUPccZKWY+UeHH8u0Zj9FB1acAzwn8Blc5zzMrq3CziQqeOK+FyZ+GtzPOxACXxk WJLaS8Jdoo4J23SMz7xBYmq2vxZEgxI9ppxGm319qqd+R0Y0HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjpRWawnZxMI6UjK1xh1U6oj1uEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY4ZDVhM2UtZGY5Ny0z ZmQ5LTg4MWYtMjljZWU0MWUyZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTNEQXRJoTGHDdDhyy+AL4SAKboSCy654pvbfedqAReB8RdA5uZBduk JvFKdJTLWiJve2aasdDHFZ0fWYYhtkt5DCgDpTzlVfaUPHB7FVvnNGNcPtlI1smu PgpBqAT6LUmfbN4DNT3eiRXDP/N79NZthZGFWYpXw6jxgp3hgR9xxE9zniKcj+6H yyx7V/H+nHguEtxC5Gy7zwin0GEb0Bse9Xo1b+tfPBwGG+dIDww4l1PG+W+k67yc FYExWgTfC5Yyht9vta23UJ1b1GB5rN8l4Hp8PCuAejv9uj1YPEeSOIuZph+0bvGq 3eVB55WfIIaRU7yp3HwXTIhVkbbj19E= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:00 2025 by rpki-client