$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0be71801-63ac-3fa2-8457-8be33d72a178.roa File: 0be71801-63ac-3fa2-8457-8be33d72a178.roa (raw, json) Hash identifier: /GxvH8KIZbxkPPW+R3Vjg1RB1FgwMBRPhnZYAgbGMjE= Subject key identifier: E8:28:74:AF:0A:81:28:54:4E:A1:89:BC:CD:6D:FC:FD:3C:5D:E7:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5817DF6757C86110763C490 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0be71801-63ac-3fa2-8457-8be33d72a178.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 34.0.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7d:f6:75:7c:86:11:07:63:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=33ef222d-36c1-4b6d-98a8-0d67cf34ea9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:d1:61:4b:a0:cb:d1:86:00:b0:93:09:00: c9:20:d9:09:ee:9a:e3:f5:3d:01:0e:a4:98:b3:b9: b0:8b:48:12:64:1b:5d:57:2d:4f:a0:88:51:95:6f: 3f:87:35:bb:29:65:d1:4a:81:24:b9:14:35:b4:20: b0:37:50:e4:4c:8c:f4:6d:1a:da:94:c3:7e:b6:ea: ef:49:1b:9a:f8:3a:c1:2c:9b:1b:22:f2:07:7e:28: 7d:96:ce:c0:ac:6f:b7:fb:30:44:52:52:bb:df:39: 15:40:d3:2a:0b:82:88:b5:55:58:ba:30:1c:72:cf: 99:35:9c:57:76:42:d2:ce:f1:3a:5d:8a:98:50:75: 52:a0:0c:1b:14:69:ed:81:91:a1:4c:a5:71:24:de: 38:ed:e1:0f:7f:cf:27:90:be:65:d7:d8:c4:28:88: 0a:a8:2c:53:f8:24:0a:80:6c:96:44:0e:fa:cc:37: d6:20:1f:29:ff:d0:da:dc:71:a5:14:c3:bc:a3:b0: 5c:69:70:7e:95:d6:73:cf:bd:f3:b6:e7:f0:13:52: f5:ff:96:9d:1e:2a:73:18:e9:95:bb:b7:83:0e:c1: 73:11:fd:5a:e8:e8:39:29:32:6a:c1:b3:91:8f:36: b2:8f:1a:c4:58:c1:77:3e:bf:bc:e5:71:a8:12:23: ca:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:28:74:AF:0A:81:28:54:4E:A1:89:BC:CD:6D:FC:FD:3C:5D:E7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0be71801-63ac-3fa2-8457-8be33d72a178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:16:b5:53:3b:34:6a:b2:ed:da:07:8c:2d:a5:b8:05:80:3b: 4f:03:96:41:26:62:b3:f5:4f:3c:e7:f8:0d:fd:32:5b:aa:4a: e5:c8:fc:fb:62:29:18:af:5d:ec:f7:ca:00:29:8a:b5:73:06: 2b:16:28:fd:60:91:47:1b:2b:55:1a:95:12:8a:6f:62:3d:ba: 80:51:94:07:9b:9f:63:81:af:0e:f0:4a:2c:f9:3a:f8:08:01: 36:a6:a1:c1:e8:81:73:04:61:09:f3:3d:13:89:d4:96:07:a9: fb:17:7d:6b:2e:9a:f1:b7:c5:21:e5:a5:c3:ed:e1:cd:33:65: f3:bc:e1:c4:9b:79:ab:26:ee:0d:b4:d2:d7:ae:68:e4:78:7e: 87:f5:bb:71:14:1f:0f:6d:e8:34:8a:07:24:56:d0:4f:2b:66: d7:29:27:8e:7b:92:e1:37:cf:e1:66:33:c3:f9:7f:6c:d9:73: 04:0e:88:f1:f2:71:6e:12:4d:41:1a:eb:d7:f9:66:ea:17:69: f6:db:db:e4:a5:e8:92:db:4e:2a:19:1f:a4:63:1a:3f:d7:0e: e4:6d:6d:07:16:d0:73:18:44:ea:50:73:9f:73:31:4f:be:22: 35:ac:08:f0:17:c7:db:54:27:bf:2b:90:05:40:46:60:09:4d: 00:5b:ea:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX32dXyGEQdjxJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzNlZjIyMmQtMzZjMS00YjZkLTk4YTgtMGQ2N2NmMzRlYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6XRYUugy9GGALCTCQDJINkJ7prj9T0BDqSY s7mwi0gSZBtdVy1PoIhRlW8/hzW7KWXRSoEkuRQ1tCCwN1DkTIz0bRralMN+turv SRua+DrBLJsbIvIHfih9ls7ArG+3+zBEUlK73zkVQNMqC4KItVVYujAccs+ZNZxX dkLSzvE6XYqYUHVSoAwbFGntgZGhTKVxJN447eEPf88nkL5l19jEKIgKqCxT+CQK gGyWRA76zDfWIB8p/9Da3HGlFMO8o7BcaXB+ldZzz73ztufwE1L1/5adHipzGOmV u7eDDsFzEf1a6Og5KTJqwbORjzayjxrEWMF3Pr+85XGoEiPKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgodK8KgShUTqGJvM1t/P08XeexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGJlNzE4MDEtNjNhYy0z ZmEyLTg0NTctOGJlMzNkNzJhMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4WtVM7NGqy7doHjC2luAWAO08DlkEmYrP1Tzzn+A39MluqSuXI/Pti KRivXez3ygApirVzBisWKP1gkUcbK1UalRKKb2I9uoBRlAebn2OBrw7wSiz5OvgI ATamocHogXMEYQnzPROJ1JYHqfsXfWsumvG3xSHlpcPt4c0zZfO84cSbeasm7g20 0teuaOR4fof1u3EUHw9t6DSKByRW0E8rZtcpJ457kuE3z+FmM8P5f2zZcwQOiPHy cW4STUEa69f5ZuoXafbb2+Sl6JLbTioZH6RjGj/XDuRtbQcW0HMYROpQc59zMU++ IjWsCPAXx9tUJ78rkAVARmAJTQBb6tk= -----END CERTIFICATE-----Generated at Fri Apr 4 09:03:45 2025 by rpki-client