$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b5c8e94-2383-3e10-be41-7fb32d089042.roa File: 7b5c8e94-2383-3e10-be41-7fb32d089042.roa (raw, json) Hash identifier: xGqSaXNFhSUJA4+jfCpqdo+Ha0DSreZp4cjwCJJ8R1w= Subject key identifier: A7:D3:18:A5:B8:2D:64:08:2B:22:5E:8E:2D:B3:16:1B:31:4C:F0:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849912F495435F3481B475F3940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b5c8e94-2383-3e10-be41-7fb32d089042.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 396982 IP address blocks: 34.104.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:49:54:35:f3:48:1b:47:5f:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=f5eda89e-051a-400c-bcdd-4e8eb20468d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:66:a5:ab:f9:65:57:a7:29:99:53:96:45: 33:17:78:57:bd:97:57:f1:71:86:59:16:a2:29:b0: cb:fe:bb:ea:45:31:a3:f5:04:13:fc:06:5f:70:e5: b2:9c:2e:24:4b:2d:0b:51:6f:57:d0:c9:07:45:24: d4:f6:81:2c:74:f0:ca:7f:b1:e2:21:76:76:6a:37: f8:77:53:29:a2:12:f2:8b:b8:af:4e:33:49:fb:32: ab:33:5e:9e:65:d1:c4:e3:c0:33:fa:57:39:e2:4a: f2:48:ed:bb:c9:f7:7a:8b:ce:bc:10:4d:7e:01:ac: dd:16:51:fc:ab:82:55:75:55:b0:34:7d:93:01:e4: 1d:cd:f2:83:6b:f5:48:68:05:b1:77:af:a0:7c:53: 06:18:39:f5:f2:dd:7c:4f:f5:1d:b8:e7:ba:11:a9: cc:52:ef:56:26:a7:1b:d1:91:97:b1:ae:5f:7d:58: e9:8b:9e:35:6d:a6:1d:b6:b4:02:5f:19:cf:2d:bd: 6b:70:0a:87:40:31:1d:5e:53:ab:43:35:bc:5a:70: 83:8b:3c:05:b6:a9:5f:1d:b4:6a:db:64:fd:39:aa: fa:23:c4:e7:0f:17:82:33:5e:36:8c:94:61:4f:75: 98:5f:00:04:fd:b4:a0:28:24:8a:7c:b3:8d:5e:ad: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D3:18:A5:B8:2D:64:08:2B:22:5E:8E:2D:B3:16:1B:31:4C:F0:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7b5c8e94-2383-3e10-be41-7fb32d089042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fe:ce:f8:b4:39:27:50:ff:9b:18:21:9e:5b:4e:99:01:93: 3b:9f:0b:9d:0c:e1:cc:6f:28:27:ed:2c:47:be:4f:b4:dd:01: ab:0c:a9:81:3b:e8:7f:18:4b:69:90:b0:ec:8f:da:d0:64:ac: 3f:43:16:65:1f:db:1d:89:97:02:f3:99:81:1b:21:ce:ca:b6: 74:88:54:97:fe:df:65:3d:84:bd:e2:3a:ca:0d:2c:e3:29:3b: 65:b1:3c:f8:c4:e9:2a:e9:af:89:b7:fd:ad:e6:c4:ea:87:d9: 20:18:d5:49:24:8d:cc:0f:66:61:b9:ed:a7:cb:b5:25:2e:fb: f7:7a:bd:b2:a6:a8:b9:22:9f:8f:2a:d7:fa:21:30:8e:8d:f4: 5a:75:3a:5c:60:e1:8c:55:85:fa:56:e1:d0:49:a1:21:2c:b3: 28:d5:7e:ec:ab:6f:58:9a:e9:e8:1b:d2:c3:d3:0a:81:d0:86: eb:6e:4b:81:be:c2:e6:3c:dd:17:10:11:a1:0a:30:3c:0f:cb: 08:03:b5:cd:de:6d:d5:1b:b1:41:9d:fd:e2:89:49:9a:68:0d: 36:cc:0c:70:48:af:a4:b6:be:03:7e:8e:dd:1e:fc:a9:51:7d: 0b:94:ad:50:9f:14:1a:31:36:b6:ae:cb:25:43:3b:70:c0:0b: 72:91:09:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0lUNfNIG0dfOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZjVlZGE4OWUtMDUxYS00MDBjLWJjZGQtNGU4ZWIyMDQ2OGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV5mpav5ZVenKZlTlkUzF3hXvZdX8XGGWRai KbDL/rvqRTGj9QQT/AZfcOWynC4kSy0LUW9X0MkHRSTU9oEsdPDKf7HiIXZ2ajf4 d1MpohLyi7ivTjNJ+zKrM16eZdHE48Az+lc54krySO27yfd6i868EE1+AazdFlH8 q4JVdVWwNH2TAeQdzfKDa/VIaAWxd6+gfFMGGDn18t18T/UduOe6EanMUu9WJqcb 0ZGXsa5ffVjpi541baYdtrQCXxnPLb1rcAqHQDEdXlOrQzW8WnCDizwFtqlfHbRq 22T9Oar6I8TnDxeCM142jJRhT3WYXwAE/bSgKCSKfLONXq2hXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfTGKW4LWQIKyJeji2zFhsxTPBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2I1YzhlOTQtMjM4My0z ZTEwLWJlNDEtN2ZiMzJkMDg5MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImgfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr+zvi0OSdQ/5sYIZ5bTpkBkzufC50M4cxvKCftLEe+T7TdAasMqYE7 6H8YS2mQsOyP2tBkrD9DFmUf2x2JlwLzmYEbIc7KtnSIVJf+32U9hL3iOsoNLOMp O2WxPPjE6Srpr4m3/a3mxOqH2SAY1UkkjcwPZmG57afLtSUu+/d6vbKmqLkin48q 1/ohMI6N9Fp1Olxg4YxVhfpW4dBJoSEssyjVfuyrb1ia6egb0sPTCoHQhutuS4G+ wuY83RcQEaEKMDwPywgDtc3ebdUbsUGd/eKJSZpoDTbMDHBIr6S2vgN+jt0e/KlR fQuUrVCfFBoxNrauyyVDO3DAC3KRCcc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:10 2025 by rpki-client