$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa File: 2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa (raw, json) Hash identifier: ZW69Xu5KUL/9TR93Q0XopM93z2paFd9iHX1+FE1uRHk= Subject key identifier: BF:BF:4F:6A:A4:DA:2A:13:09:8C:9B:F2:6B:A4:95:34:6A:E3:83:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584968E5963ACA8C2001241259E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa Signing time: Fri 04 Apr 2025 02:40:29 +0000 ROA not before: Fri 04 Apr 2025 02:40:29 +0000 ROA not after: Thu 03 Jul 2025 02:40:29 +0000 asID: 15169 IP address blocks: 34.3.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:e5:96:3a:ca:8c:20:01:24:12:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 4 02:40:29 2025 GMT Not After : Jul 3 02:40:29 2025 GMT Subject: CN=a5497abb-0ec5-402d-8a99-d64b43e3b9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:9f:b2:a5:c8:ae:64:b5:0f:07:4f:63:f9: c1:fa:bb:31:2f:83:ad:2a:dc:f2:4f:a2:a5:c1:33: 32:cd:0c:86:80:c8:bb:2e:03:92:1b:7f:1f:01:cf: 13:61:76:0c:df:37:d3:14:7c:c7:1e:63:e7:2a:dd: e1:00:91:e2:1e:36:57:42:3a:e1:3d:ce:e3:53:c1: 63:e2:00:ad:36:91:d8:ec:5c:28:7b:79:e5:ec:4c: 65:92:fa:8e:83:91:83:a3:92:0a:3a:c5:47:6f:ef: 6c:49:04:26:7b:17:b5:8a:e4:46:2f:2e:48:83:f6: 38:77:c6:fb:93:10:f2:aa:d4:b4:86:34:89:2a:a4: 39:c7:de:1b:30:95:eb:3e:18:0f:ea:14:19:3e:40: 17:a0:6b:86:ad:13:00:f7:dc:98:35:1c:ce:35:7b: bd:14:de:61:1d:8a:f0:61:1c:e9:94:72:af:63:fd: 63:6f:b8:04:44:70:a8:3d:51:3a:c5:66:f9:99:47: 36:13:bd:82:3e:3a:5c:d8:cc:17:1d:50:2f:4c:8f: ba:49:88:1f:8f:86:ed:d4:ce:99:23:d1:db:73:5c: 87:2a:f3:93:af:49:ca:23:86:df:8b:44:c2:a8:d3: a5:d2:49:f6:75:f3:bf:c7:85:89:09:0d:4e:90:52: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:4F:6A:A4:DA:2A:13:09:8C:9B:F2:6B:A4:95:34:6A:E3:83:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2997db3d-8ce0-3327-ba82-ab8000cf6e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1c:6e:39:0a:b9:77:48:fe:8f:1f:23:92:d0:e8:21:ed:98: d9:e4:44:b8:57:aa:21:80:fe:ef:4d:8e:a6:cb:8d:62:5c:e8: f3:15:b6:f4:14:8f:91:70:98:00:2b:ab:32:40:f7:25:70:f0: 98:4d:4c:bb:c1:82:65:94:6f:9a:7c:b1:65:64:4c:4f:08:8b: 4f:bc:ac:ca:2f:95:c0:b0:4f:27:6a:0d:1c:b3:1d:b5:71:0b: f2:b7:e5:c4:a9:d1:39:f4:05:bc:49:cd:73:bb:38:00:8c:65: 0b:c1:b1:89:ae:c9:5e:e2:e1:b0:4b:08:ce:c3:c0:f9:65:b0: a3:7b:81:f3:14:ba:e7:91:e2:23:99:da:4d:82:be:34:29:49: b1:bf:2f:96:0c:c9:27:b4:eb:7c:d7:1f:9b:50:40:24:3e:62: 05:72:03:05:d0:3c:23:eb:39:35:03:ab:e7:73:9d:01:7f:94: 02:f0:48:c3:6f:3e:4f:d5:ca:61:bc:9f:ca:7d:8d:da:9f:a8: 72:85:25:40:ef:5e:0a:5b:d0:c8:b4:fa:bd:f1:75:6b:39:9c: 90:f5:c3:f5:19:ab:83:6a:65:99:40:47:97:28:31:48:58:81: c4:97:d6:8a:60:03:da:6d:9c:2f:79:1d:47:b0:7a:50:83:e6: ba:b0:af:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElo5ZY6yowgASQSWeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwNDAyNDAyOVoXDTI1MDcwMzAyNDAyOVowLzEtMCsGA1UEAxMk YTU0OTdhYmItMGVjNS00MDJkLThhOTktZDY0YjQzZTNiOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscWfsqXIrmS1DwdPY/nB+rsxL4OtKtzyT6Kl wTMyzQyGgMi7LgOSG38fAc8TYXYM3zfTFHzHHmPnKt3hAJHiHjZXQjrhPc7jU8Fj 4gCtNpHY7Fwoe3nl7ExlkvqOg5GDo5IKOsVHb+9sSQQmexe1iuRGLy5Ig/Y4d8b7 kxDyqtS0hjSJKqQ5x94bMJXrPhgP6hQZPkAXoGuGrRMA99yYNRzONXu9FN5hHYrw YRzplHKvY/1jb7gERHCoPVE6xWb5mUc2E72CPjpc2MwXHVAvTI+6SYgfj4bt1M6Z I9Hbc1yHKvOTr0nKI4bfi0TCqNOl0kn2dfO/x4WJCQ1OkFIUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+/T2qk2ioTCYyb8muklTRq44OhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjk5N2RiM2QtOGNlMC0z MzI3LWJhODItYWI4MDAwY2Y2ZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYcbjkKuXdI/o8fI5LQ6CHtmNnkRLhXqiGA/u9NjqbLjWJc6PMVtvQU j5FwmAArqzJA9yVw8JhNTLvBgmWUb5p8sWVkTE8Ii0+8rMovlcCwTydqDRyzHbVx C/K35cSp0Tn0BbxJzXO7OACMZQvBsYmuyV7i4bBLCM7DwPllsKN7gfMUuueR4iOZ 2k2CvjQpSbG/L5YMySe063zXH5tQQCQ+YgVyAwXQPCPrOTUDq+dznQF/lALwSMNv Pk/VymG8n8p9jdqfqHKFJUDvXgpb0Mi0+r3xdWs5nJD1w/UZq4NqZZlAR5coMUhY gcSX1opgA9ptnC95HUewelCD5rqwr8A= -----END CERTIFICATE-----Generated at Thu Apr 10 10:32:16 2025 by rpki-client