$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa File: 86df3606-9c38-3727-9c8b-256389082390.roa (raw, json) Hash identifier: ePjaosS+ki97hIXMXs2eThA9R8df+0Z7hrvNJYlRi0Y= Subject key identifier: 42:0F:CB:EE:61:6C:45:19:AC:64:C7:8A:18:66:2E:0F:FE:1A:7E:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848A9961561E4146E627B8D5980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 139190 IP address blocks: 34.1.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:15:61:e4:14:6e:62:7b:8d:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=67d13715-9c79-4b5d-92d6-db73b2a818f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:ba:50:69:67:ea:a7:42:d4:bb:78:4e:07: a9:8e:b2:89:d0:ad:bd:a3:2d:3c:ca:cc:a2:29:eb: a6:cd:ae:16:0b:68:8f:35:bc:5b:09:01:79:62:be: 3e:47:0f:9c:15:f8:66:1e:5e:1f:b8:2e:f0:7f:b3: 6d:14:58:ec:b6:8a:7a:0f:93:90:74:85:23:43:37: d6:8b:b0:c7:e2:c3:9b:d0:ba:bb:cc:e9:76:29:ad: 51:e4:95:eb:f8:fc:9d:ad:5f:3c:03:a2:00:89:7b: d9:18:56:91:a8:6f:54:af:17:de:65:4e:44:df:ac: c8:26:03:b7:ba:aa:51:91:63:aa:9d:21:b0:7a:c2: 14:94:9d:cd:f3:ad:5f:7c:9d:57:ec:cf:23:7d:bc: f6:d1:c9:ab:f3:74:fc:1a:52:2f:31:6e:4d:08:bf: b1:e0:c5:ca:e5:18:40:81:35:36:7e:99:11:36:93: c5:da:50:12:bd:6f:02:e7:06:04:f4:cc:77:cd:95: 3d:4d:9b:ff:e3:9b:8c:31:bd:57:e7:da:d1:51:bc: 4c:cb:7b:7f:70:b5:8a:85:4a:33:00:a6:f3:c5:b2: 66:12:ad:01:c6:01:48:e0:ce:df:7e:54:82:1e:21: dd:d8:b8:5b:49:9f:89:08:c5:3f:ab:19:ef:f1:b5: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:CB:EE:61:6C:45:19:AC:64:C7:8A:18:66:2E:0F:FE:1A:7E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86df3606-9c38-3727-9c8b-256389082390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e2:3d:c8:f8:19:1b:8b:a8:e1:04:32:3b:dd:04:70:65:4e: 85:93:24:15:eb:0a:a4:d9:cf:61:d7:01:e6:48:6e:4a:0f:0a: 42:ab:d6:db:c9:b9:66:f6:9f:92:89:33:52:3c:8e:38:60:7c: f9:64:7c:7c:8e:03:38:04:e9:72:65:c1:d2:ec:db:77:e0:1c: 6f:5e:e7:3c:19:59:e7:41:c4:6e:5f:26:03:c7:4f:bf:62:e9: a7:63:e2:28:96:e7:bd:43:4d:23:ec:fa:c3:ea:0e:81:40:c0: 39:6d:e0:be:da:93:f5:07:87:b4:cc:c4:0c:81:32:0d:a1:46: 1e:bc:b2:3f:44:43:be:25:dc:9c:9d:fc:b6:7e:98:62:48:fa: 86:de:4a:31:c9:58:ab:77:b9:14:1c:d2:0f:b2:a7:0e:0b:07: 52:f2:01:65:9a:3c:d1:c2:9f:bc:37:25:6f:de:ee:b9:26:37: 34:1b:ce:2d:39:6b:90:5e:7f:4c:f4:34:94:f4:51:53:da:ea: 4d:c9:4b:4c:a3:b2:7a:f3:60:55:b6:ab:12:8d:c8:95:6a:fe: 32:60:dd:2f:3f:e3:5f:1c:4b:c7:5b:f3:af:76:6c:79:5f:f2: 22:ab:a4:b9:ee:89:15:b6:2c:59:c5:07:b6:0b:cb:bb:3a:85: 5e:60:e4:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhVh5BRuYnuNWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjdkMTM3MTUtOWM3OS00YjVkLTkyZDYtZGI3M2IyYTgxOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIW6UGln6qdC1Lt4TgepjrKJ0K29oy08ysyi Keumza4WC2iPNbxbCQF5Yr4+Rw+cFfhmHl4fuC7wf7NtFFjstop6D5OQdIUjQzfW i7DH4sOb0Lq7zOl2Ka1R5JXr+PydrV88A6IAiXvZGFaRqG9UrxfeZU5E36zIJgO3 uqpRkWOqnSGwesIUlJ3N861ffJ1X7M8jfbz20cmr83T8GlIvMW5NCL+x4MXK5RhA gTU2fpkRNpPF2lASvW8C5wYE9Mx3zZU9TZv/45uMMb1X59rRUbxMy3t/cLWKhUoz AKbzxbJmEq0BxgFI4M7fflSCHiHd2LhbSZ+JCMU/qxnv8bXxKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIPy+5hbEUZrGTHihhmLg/+Gn4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZkZjM2MDYtOWMzOC0z NzI3LTljOGItMjU2Mzg5MDgyMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIniPcj4GRuLqOEEMjvdBHBlToWTJBXrCqTZz2HXAeZIbkoPCkKr1tvJ uWb2n5KJM1I8jjhgfPlkfHyOAzgE6XJlwdLs23fgHG9e5zwZWedBxG5fJgPHT79i 6adj4iiW571DTSPs+sPqDoFAwDlt4L7ak/UHh7TMxAyBMg2hRh68sj9EQ74l3Jyd /LZ+mGJI+obeSjHJWKt3uRQc0g+ypw4LB1LyAWWaPNHCn7w3JW/e7rkmNzQbzi05 a5Bef0z0NJT0UVPa6k3JS0yjsnrzYFW2qxKNyJVq/jJg3S8/418cS8db8692bHlf 8iKrpLnuiRW2LFnFB7YLy7s6hV5g5AA= -----END CERTIFICATE-----Generated at Sun Apr 6 00:15:08 2025 by rpki-client