$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa File: b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa (raw, json) Hash identifier: mAjgXqPwgaOsOOXowIHNIVEIMUxMQ+Ep06mB/URGprQ= Subject key identifier: BD:E1:96:3C:D2:52:0A:F7:2D:8B:24:8B:E8:DD:C1:17:75:F8:51:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB68E316689A6E22955880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 34.1.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:68:e3:16:68:9a:6e:22:95:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bfffb53c-7785-4587-9307-2c527d1c3ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:09:2a:3f:ae:73:a6:2a:97:47:f8:8b:c2: 27:43:56:a2:43:07:bf:67:3e:3e:9e:ec:0d:76:fd: a2:12:ad:88:85:e2:9f:28:ce:18:98:65:db:58:5f: b0:e7:89:b8:49:6f:67:13:36:2b:3d:46:c6:78:4b: bb:4e:08:1c:40:7f:32:30:f7:27:73:3e:a5:4a:b6: 95:12:05:82:69:af:b7:75:93:73:a8:a0:81:47:69: 08:0c:89:9d:98:79:ed:e2:9f:e2:82:b7:2c:d9:5e: f4:1b:a1:c0:23:e4:9b:00:67:8a:33:41:3c:27:1a: d6:83:2c:f5:c1:a4:5b:73:b9:7d:5a:fe:90:4c:07: e1:44:2e:19:36:a9:9d:6f:8f:89:4a:fd:19:74:f2: 65:c9:c9:52:25:4b:a4:92:46:fa:41:3e:a3:51:28: 4e:37:01:30:3e:0b:ec:e0:c1:7e:0d:9e:7c:c9:e7: e6:19:5d:01:1c:db:cd:82:56:82:f6:15:8e:f9:88: 73:a7:d6:00:1f:ba:70:55:34:88:19:04:7b:cb:3e: ad:d1:a8:c3:55:07:cf:bb:b2:5f:33:c1:6a:ba:c5: 78:36:4e:3c:37:d7:c3:0f:1c:18:59:5e:36:00:df: b9:fc:8a:ea:d7:a5:40:aa:1e:ad:0d:4f:24:a6:7c: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:96:3C:D2:52:0A:F7:2D:8B:24:8B:E8:DD:C1:17:75:F8:51:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4fea620-f77a-3fd7-b1ac-544a07bdbd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6d:13:6a:50:01:c4:dc:c2:36:cd:d5:18:73:ad:ec:01:43: d2:11:60:e8:34:fc:72:27:8e:e3:a4:d5:f2:fb:65:82:47:4d: 56:cf:3b:62:72:a2:db:2c:12:0b:ca:26:5d:8e:4e:1d:98:e1: 7f:8d:64:0e:a4:c2:44:24:99:72:1d:29:7e:ee:69:3c:92:65: 6d:f7:66:52:ea:51:e3:c1:86:c7:3a:bd:4b:57:88:ca:d7:0b: 9d:5b:c0:73:44:de:82:b3:cb:66:fb:16:64:87:fc:3a:2b:ed: 33:bb:13:83:07:00:28:4b:46:26:b9:f9:e3:e9:0b:0c:a5:90: b6:ef:90:59:c1:e9:4d:7d:24:8f:02:6b:bc:15:00:c7:6f:16: f3:6d:a0:ac:53:70:ff:64:4d:f5:06:b3:ab:68:0d:b3:e0:a6: 2a:97:c2:69:04:d2:43:62:a0:7a:66:ae:01:79:0a:c5:bb:65: 3c:80:3b:86:94:20:c5:07:88:b2:ab:5c:6e:ee:d9:67:fd:79: ad:a6:c8:2a:0b:51:51:b0:74:7f:6c:00:6e:c6:ca:6a:ae:eb: 22:64:fa:a8:7e:c3:fa:02:6d:9c:86:32:54:16:6d:3a:77:47: cc:7b:da:9b:fc:41:d1:45:c4:f3:1f:0f:f4:8f:05:cc:55:25: 80:c0:78:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2jjFmiabiKVWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmZmZmI1M2MtNzc4NS00NTg3LTkzMDctMmM1MjdkMWMzY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7MJKj+uc6Yql0f4i8InQ1aiQwe/Zz4+nuwN dv2iEq2IheKfKM4YmGXbWF+w54m4SW9nEzYrPUbGeEu7TggcQH8yMPcncz6lSraV EgWCaa+3dZNzqKCBR2kIDImdmHnt4p/igrcs2V70G6HAI+SbAGeKM0E8JxrWgyz1 waRbc7l9Wv6QTAfhRC4ZNqmdb4+JSv0ZdPJlyclSJUukkkb6QT6jUShONwEwPgvs 4MF+DZ58yefmGV0BHNvNglaC9hWO+Yhzp9YAH7pwVTSIGQR7yz6t0ajDVQfPu7Jf M8FqusV4Nk48N9fDDxwYWV42AN+5/Irq16VAqh6tDU8kpnyT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3hljzSUgr3LYski+jdwRd1+FGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjRmZWE2MjAtZjc3YS0z ZmQ3LWIxYWMtNTQ0YTA3YmRiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNtE2pQAcTcwjbN1RhzrewBQ9IRYOg0/HInjuOk1fL7ZYJHTVbPO2Jy otssEgvKJl2OTh2Y4X+NZA6kwkQkmXIdKX7uaTySZW33ZlLqUePBhsc6vUtXiMrX C51bwHNE3oKzy2b7FmSH/Dor7TO7E4MHAChLRia5+ePpCwylkLbvkFnB6U19JI8C a7wVAMdvFvNtoKxTcP9kTfUGs6toDbPgpiqXwmkE0kNioHpmrgF5CsW7ZTyAO4aU IMUHiLKrXG7u2Wf9ea2myCoLUVGwdH9sAG7Gymqu6yJk+qh+w/oCbZyGMlQWbTp3 R8x72pv8QdFFxPMfD/SPBcxVJYDAeJM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:59 2025 by rpki-client