$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15e7e527-060c-3644-9326-03b7c6d60c21.roa File: 15e7e527-060c-3644-9326-03b7c6d60c21.roa (raw, json) Hash identifier: 21z6LmAZLP89bCcYefQHwLBThlqMgXgt8imjJivatfk= Subject key identifier: 95:1D:81:F7:38:4F:FB:48:C5:F7:7F:BB:C4:4A:98:A2:2E:C5:8E:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BBCEC7ED85ECF240D0954840 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15e7e527-060c-3644-9326-03b7c6d60c21.roa Signing time: Sat 01 Feb 2025 02:39:41 +0000 ROA not before: Sat 01 Feb 2025 02:39:41 +0000 ROA not after: Fri 02 May 2025 01:39:41 +0000 asID: 19527 IP address blocks: 34.2.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:ce:c7:ed:85:ec:f2:40:d0:95:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 1 02:39:41 2025 GMT Not After : May 2 01:39:41 2025 GMT Subject: CN=d9a475f8-3db7-45bc-9f10-230b881c2ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:8a:b6:ab:d6:63:9e:ea:24:45:6b:1a:86: 3b:f0:09:39:cf:c2:f5:13:9b:42:47:1e:01:b5:50: 0b:92:1d:b5:3c:0a:83:eb:ff:d2:e7:8d:09:fc:10: 87:10:53:c3:78:66:c4:3c:b3:b9:83:3a:16:b2:f1: 15:fb:76:5c:7b:98:c6:36:fa:b8:a6:35:b9:f6:0c: d9:b8:6d:cf:41:40:6c:bf:c1:e6:87:33:5d:28:c7: 75:08:12:ed:65:a0:8b:de:67:09:d1:b4:2f:c6:e8: cb:80:3e:23:60:b9:16:0b:ca:8d:36:88:10:2f:7a: ca:a7:50:65:97:8a:93:e1:9b:2b:56:11:ed:7c:08: 6e:d3:3a:92:c0:c3:17:20:48:2c:5c:0d:dd:c1:4b: ac:52:85:ba:85:ee:66:24:ef:01:33:c8:8c:2f:60: 2c:96:e1:a2:45:6c:cb:d7:e5:09:93:dd:93:75:de: d3:4f:78:78:e8:3d:f5:b0:d6:3c:8d:ca:24:39:a4: b7:5f:8e:fd:e9:0e:a5:0e:9e:28:2d:ce:20:5c:21: 46:e1:0d:12:cc:ca:18:ef:37:dd:53:33:eb:bc:f7: a7:e2:8d:16:d1:9a:ab:91:f6:45:a9:70:a9:aa:50: 2b:98:fc:36:90:e0:43:ae:54:fb:c4:43:28:65:8e: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1D:81:F7:38:4F:FB:48:C5:F7:7F:BB:C4:4A:98:A2:2E:C5:8E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/15e7e527-060c-3644-9326-03b7c6d60c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:03:2d:d5:49:3a:d0:54:c6:33:0d:52:e1:75:bc:7d:b3:9d: 97:32:6f:1e:fc:d6:e4:e0:32:76:b9:53:88:71:4a:8e:da:6f: d9:98:2b:dc:8f:8a:78:17:dc:34:4d:4a:13:16:4c:b0:73:01: 79:84:5b:75:f6:2d:54:2b:3a:a0:ee:ef:40:9b:90:a1:36:69: 3f:83:26:28:07:cd:fe:e5:9b:1b:ef:7f:b5:1e:01:ae:88:9d: 15:37:fd:d5:db:45:10:eb:76:b0:81:8c:be:c6:e3:cd:78:d6: 5b:7b:ff:14:21:e7:13:a4:6c:fa:71:b0:e9:68:b6:5a:21:0f: a3:ae:68:64:88:85:98:f1:07:b9:16:84:5f:6c:df:82:d6:1c: 51:2d:3c:dd:78:c0:36:eb:a5:10:60:57:7a:9c:8a:f7:bb:dd: 8a:19:f5:65:7a:87:0b:e0:f5:a6:dc:ac:77:45:bb:14:20:98: 54:53:1b:30:83:4c:af:68:ed:54:8e:87:a7:c6:38:94:7d:f5: 34:fa:a5:1e:1e:04:af:88:e1:da:2e:d7:73:d8:03:b3:fb:9d: d3:34:96:44:70:b1:7a:ec:97:d6:52:f5:62:25:3b:78:9d:a9: ab:79:c6:82:65:2e:09:00:6a:75:92:81:bc:57:34:47:ac:7b: d7:25:e1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7zsfthezyQNCVSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMTAyMzk0MVoXDTI1MDUwMjAxMzk0MVowLzEtMCsGA1UEAxMk ZDlhNDc1ZjgtM2RiNy00NWJjLTlmMTAtMjMwYjg4MWMyYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBCKtqvWY57qJEVrGoY78Ak5z8L1E5tCRx4B tVALkh21PAqD6//S540J/BCHEFPDeGbEPLO5gzoWsvEV+3Zce5jGNvq4pjW59gzZ uG3PQUBsv8HmhzNdKMd1CBLtZaCL3mcJ0bQvxujLgD4jYLkWC8qNNogQL3rKp1Bl l4qT4ZsrVhHtfAhu0zqSwMMXIEgsXA3dwUusUoW6he5mJO8BM8iML2AsluGiRWzL 1+UJk92Tdd7TT3h46D31sNY8jcokOaS3X4796Q6lDp4oLc4gXCFG4Q0SzMoY7zfd UzPrvPen4o0W0ZqrkfZFqXCpqlArmPw2kOBDrlT7xEMoZY7vJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUdgfc4T/tIxfd/u8RKmKIuxY62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTVlN2U1MjctMDYwYy0z NjQ0LTkzMjYtMDNiN2M2ZDYwYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwDLdVJOtBUxjMNUuF1vH2znZcybx781uTgMna5U4hxSo7ab9mYK9yP ingX3DRNShMWTLBzAXmEW3X2LVQrOqDu70CbkKE2aT+DJigHzf7lmxvvf7UeAa6I nRU3/dXbRRDrdrCBjL7G48141lt7/xQh5xOkbPpxsOlotlohD6OuaGSIhZjxB7kW hF9s34LWHFEtPN14wDbrpRBgV3qcive73YoZ9WV6hwvg9abcrHdFuxQgmFRTGzCD TK9o7VSOh6fGOJR99TT6pR4eBK+I4dou13PYA7P7ndM0lkRwsXrsl9ZS9WIlO3id qat5xoJlLgkAanWSgbxXNEese9cl4XU= -----END CERTIFICATE-----Generated at Fri Apr 4 08:54:35 2025 by rpki-client