$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa File: 929b3699-faae-3b8b-b46e-fa550ac3dea9.roa (raw, json) Hash identifier: 463N3bWtktixL2JKvYusUjlopEwxSPf5IJOImWXqhNQ= Subject key identifier: D8:B7:5B:A7:FA:C2:1F:43:F8:34:6C:57:F0:C2:9A:42:03:B6:36:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78514C3CF1009EB8AFA0F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.144.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:14:c3:cf:10:09:eb:8a:fa:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d43aefad-30d4-4fd0-81cc-31860354c817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:1e:e5:de:e4:ac:4b:2a:f9:57:3a:c9:11: 53:4d:8a:53:3f:8f:df:ab:0a:90:0a:b1:9d:6a:d1: 2f:4e:e8:ec:bc:d5:0e:12:8d:66:a0:1a:10:58:ae: 1f:c6:e5:0a:4a:30:1e:5c:b7:fe:b2:11:54:63:7e: 91:a4:f0:bb:5d:92:25:4f:31:b0:85:75:ef:73:b6: d6:7f:dd:5a:d7:59:3c:e4:80:4b:38:b3:2a:8f:6f: a6:80:21:93:44:91:a0:ee:2a:87:0a:38:af:11:8b: 08:44:60:ad:81:c0:a0:df:82:e3:27:e8:75:33:3b: 1a:13:1d:41:e9:f1:e8:70:21:4f:75:af:7d:22:74: 11:76:c1:db:43:c8:85:0b:ca:36:21:1c:94:3f:7f: b2:21:bf:6c:aa:a0:e3:7c:90:47:aa:a9:d3:11:9e: d4:bf:38:90:56:b3:20:d8:1d:e5:a4:00:28:70:0a: e9:d9:64:37:c5:78:0b:33:f7:cd:84:4e:ea:19:c2: eb:46:94:75:c6:86:16:fb:55:4e:8d:66:dd:39:49: f2:ea:9a:e3:38:a1:e8:c4:7d:5b:c5:a1:0d:82:52: a5:8f:57:5e:ba:cf:45:97:4c:06:3e:bd:7e:ed:1e: b0:37:1a:92:26:d1:fe:4c:d2:ad:cf:69:c5:9f:3c: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:5B:A7:FA:C2:1F:43:F8:34:6C:57:F0:C2:9A:42:03:B6:36:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d8:a7:ce:7e:2a:88:e6:fc:ec:89:19:63:55:66:ad:fd:80: c0:1f:5e:48:0a:28:00:c6:fa:01:a2:df:16:fb:f3:44:2c:95: fa:05:85:3b:98:f7:7a:c0:2e:11:ce:48:fc:0e:94:ae:d5:3c: 59:a3:0a:79:db:33:a5:67:0e:0f:34:f2:3e:1c:d1:e6:df:0a: 33:ed:fd:f8:9c:3b:0f:29:a5:f8:45:06:57:27:89:d5:bc:dd: 5d:f6:c2:32:de:96:49:50:c0:f6:27:96:ec:eb:14:c8:02:8c: 48:31:d4:16:89:d4:d7:f8:78:38:fd:66:f9:bc:49:fc:8a:0a: 92:f9:44:67:32:81:b5:fd:bb:21:53:ac:df:3f:93:9e:91:b3: 86:07:9a:b1:75:ac:bb:79:69:56:94:b2:87:92:cf:a1:2b:5c: 39:e0:1d:9b:de:3a:cf:eb:e2:e0:5c:73:29:d5:bd:ec:24:91: 3a:41:aa:da:27:cf:56:89:f7:28:1f:b3:2e:11:f6:bf:84:26: 28:0b:85:f5:75:9a:63:85:c6:7a:6c:fe:37:dc:f1:f8:b9:b2: b0:e7:87:17:db:57:a4:d0:f4:49:b9:59:80:ba:a9:9d:b9:75: 7d:fe:26:f0:15:2a:66:eb:80:7d:f2:b4:ab:5a:d1:74:45:26: 97:13:91:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRTDzxAJ64r6D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDQzYWVmYWQtMzBkNC00ZmQwLTgxY2MtMzE4NjAzNTRjODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MYe5d7krEsq+Vc6yRFTTYpTP4/fqwqQCrGd atEvTujsvNUOEo1moBoQWK4fxuUKSjAeXLf+shFUY36RpPC7XZIlTzGwhXXvc7bW f91a11k85IBLOLMqj2+mgCGTRJGg7iqHCjivEYsIRGCtgcCg34LjJ+h1MzsaEx1B 6fHocCFPda99InQRdsHbQ8iFC8o2IRyUP3+yIb9sqqDjfJBHqqnTEZ7UvziQVrMg 2B3lpAAocArp2WQ3xXgLM/fNhE7qGcLrRpR1xoYW+1VOjWbdOUny6prjOKHoxH1b xaENglKlj1deus9Fl0wGPr1+7R6wNxqSJtH+TNKtz2nFnzzikwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi3W6f6wh9D+DRsV/DCmkIDtjY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTI5YjM2OTktZmFhZS0z YjhiLWI0NmUtZmE1NTBhYzNkZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzYp85+Kojm/OyJGWNVZq39gMAfXkgKKADG+gGi3xb780QslfoFhTuY 93rALhHOSPwOlK7VPFmjCnnbM6VnDg808j4c0ebfCjPt/ficOw8ppfhFBlcnidW8 3V32wjLelklQwPYnluzrFMgCjEgx1BaJ1Nf4eDj9Zvm8SfyKCpL5RGcygbX9uyFT rN8/k56Rs4YHmrF1rLt5aVaUsoeSz6ErXDngHZveOs/r4uBccynVvewkkTpBqton z1aJ9ygfsy4R9r+EJigLhfV1mmOFxnps/jfc8fi5srDnhxfbV6TQ9Em5WYC6qZ25 dX3+JvAVKmbrgH3ytKta0XRFJpcTkck= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:04 2025 by rpki-client