$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/221f7774-45b7-3260-8a2d-44a18e8f611d.roa File: 221f7774-45b7-3260-8a2d-44a18e8f611d.roa (raw, json) Hash identifier: K6mqGAYJ4K9Pt0lnLxKYqln3fajyRH68ZDJ9UlbAofs= Subject key identifier: AB:78:F2:4C:00:65:F1:12:E9:5C:47:16:90:D8:6C:0D:F4:CF:21:CB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584894052789DBEE11E84DCF2180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/221f7774-45b7-3260-8a2d-44a18e8f611d.roa Signing time: Fri 17 Jan 2025 20:36:55 +0000 ROA not before: Fri 17 Jan 2025 20:36:55 +0000 ROA not after: Thu 17 Apr 2025 19:36:55 +0000 asID: 19527 IP address blocks: 34.1.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:05:27:89:db:ee:11:e8:4d:cf:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 17 20:36:55 2025 GMT Not After : Apr 17 19:36:55 2025 GMT Subject: CN=88179190-2859-472f-9658-6011ab5ea135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:87:b9:c1:75:6e:9a:a8:b4:c7:2d:b9:5e: 16:bb:ff:6c:62:40:d9:b7:23:a9:d2:ed:19:43:bb: a4:9b:1d:26:3c:a8:f2:c2:b5:af:8b:43:fc:4c:d4: a9:05:4d:94:78:c8:46:91:c3:98:8b:5a:87:72:5c: 1f:f0:77:89:e8:e0:df:52:35:9e:93:16:f8:c3:99: 7a:f3:b2:3d:45:39:79:64:62:64:cb:a8:72:e7:1c: d1:2d:9d:4a:78:0e:8c:b0:77:3c:d1:6f:23:9f:7e: 11:01:72:6c:05:cd:80:eb:0b:d0:59:8d:9b:04:33: 3b:07:d0:60:05:1c:eb:62:c6:19:b8:1b:1f:74:61: 9d:88:36:96:56:fe:b3:b2:e2:ca:66:60:aa:4c:f0: 91:85:d9:c8:e6:7c:39:f5:c3:8a:54:86:96:aa:ce: 7c:5a:0a:e7:25:9f:35:a6:8b:fe:e9:53:10:6e:41: 12:4b:5d:d3:ad:cd:6d:b7:75:7c:a9:f9:c9:f7:e7: 36:ce:1d:6c:c2:c8:2f:2c:83:b1:b1:6f:e7:48:89: df:85:a7:88:a0:40:4c:48:dc:cc:bb:9c:d1:d6:ac: e5:d6:cb:32:cb:81:4e:69:63:0f:d7:e4:7e:4e:bb: 7c:16:c9:fd:19:c6:df:56:6d:48:40:0f:0d:39:75: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:78:F2:4C:00:65:F1:12:E9:5C:47:16:90:D8:6C:0D:F4:CF:21:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/221f7774-45b7-3260-8a2d-44a18e8f611d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e7:bf:44:9a:5d:20:6c:16:af:ec:76:40:63:8d:40:63:ca: 78:61:b4:8f:2f:d6:32:42:e4:af:3c:1b:e9:d5:bb:54:e6:c0: 34:9e:60:47:a7:71:c0:ab:20:3d:41:fa:2f:5a:f6:0d:3e:96: fe:e1:69:00:83:fa:87:2f:36:a2:1c:94:53:07:2b:f6:ef:5a: f2:96:d1:33:ee:07:8a:08:a5:bc:0c:73:54:47:4d:4a:d8:7c: a2:03:60:29:af:8f:54:c5:f3:88:a7:41:5b:f0:5b:d5:4a:bc: 2c:a0:6c:cf:b8:4d:07:c2:13:db:4b:15:ed:a5:97:28:7e:43: d7:6d:3d:b9:ef:83:98:07:d2:33:63:94:1d:b4:56:76:47:7b: 79:c3:c5:3b:6f:8a:96:2f:4c:ec:40:b8:b8:0c:67:0f:44:f3: 0f:5f:bb:0a:7d:9c:e4:44:22:6d:e1:d3:bd:e6:fe:0f:c5:ee: c2:6c:96:a8:f5:3d:4b:44:50:7c:f7:3b:2e:bc:80:3d:f5:c2: 72:15:00:32:94:76:ab:2b:44:62:9e:12:50:90:b0:56:f3:e0: 51:7e:66:cf:d9:47:9c:1c:c0:ba:d9:17:23:ac:5e:53:0c:d3: 2a:6e:6a:ae:fb:54:b5:a5:49:6d:56:bc:92:d0:dc:a3:57:ec: d1:b7:33:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUBSeJ2+4R6E3PIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDExNzIwMzY1NVoXDTI1MDQxNzE5MzY1NVowLzEtMCsGA1UEAxMk ODgxNzkxOTAtMjg1OS00NzJmLTk2NTgtNjAxMWFiNWVhMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7WHucF1bpqotMctuV4Wu/9sYkDZtyOp0u0Z Q7ukmx0mPKjywrWvi0P8TNSpBU2UeMhGkcOYi1qHclwf8HeJ6ODfUjWekxb4w5l6 87I9RTl5ZGJky6hy5xzRLZ1KeA6MsHc80W8jn34RAXJsBc2A6wvQWY2bBDM7B9Bg BRzrYsYZuBsfdGGdiDaWVv6zsuLKZmCqTPCRhdnI5nw59cOKVIaWqs58WgrnJZ81 pov+6VMQbkESS13Trc1tt3V8qfnJ9+c2zh1swsgvLIOxsW/nSInfhaeIoEBMSNzM u5zR1qzl1ssyy4FOaWMP1+R+Trt8Fsn9GcbfVm1IQA8NOXWLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt48kwAZfES6VxHFpDYbA30zyHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjIxZjc3NzQtNDViNy0z MjYwLThhMmQtNDRhMThlOGY2MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnnv0SaXSBsFq/sdkBjjUBjynhhtI8v1jJC5K88G+nVu1TmwDSeYEen ccCrID1B+i9a9g0+lv7haQCD+ocvNqIclFMHK/bvWvKW0TPuB4oIpbwMc1RHTUrY fKIDYCmvj1TF84inQVvwW9VKvCygbM+4TQfCE9tLFe2llyh+Q9dtPbnvg5gH0jNj lB20VnZHe3nDxTtvipYvTOxAuLgMZw9E8w9fuwp9nOREIm3h073m/g/F7sJslqj1 PUtEUHz3Oy68gD31wnIVADKUdqsrRGKeElCQsFbz4FF+Zs/ZR5wcwLrZFyOsXlMM 0ypuaq77VLWlSW1WvJLQ3KNX7NG3M3E= -----END CERTIFICATE-----Generated at Fri Apr 4 08:59:26 2025 by rpki-client