$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6140595a-c5ef-3b01-b814-46f0cfa3ebfe.roa File: 6140595a-c5ef-3b01-b814-46f0cfa3ebfe.roa (raw, json) Hash identifier: 65y1DvKo0AFXCxlW68f1q3q8CxHm69zzC4hehH4H8v0= Subject key identifier: 7A:36:CA:CD:52:CF:21:D2:AD:77:16:D8:5F:A9:A5:9D:86:CB:79:B1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581724504F7DAFC46B47000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6140595a-c5ef-3b01-b814-46f0cfa3ebfe.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 11344 IP address blocks: 34.104.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:72:45:04:f7:da:fc:46:b4:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8a647acd-e043-4b02-8700-21b23b392b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:63:9a:9d:42:98:f4:b3:d4:31:f2:ae:2c: 9d:cf:f7:ec:e7:e8:d7:35:71:cf:db:02:dd:f3:0f: 15:39:f7:b0:d0:f2:35:ae:21:6b:31:15:a9:9d:04: 85:68:e0:05:68:da:e1:26:9c:e1:1f:f3:ae:f3:bf: 39:93:2e:eb:b8:52:62:0a:31:db:39:ee:26:13:4b: c5:4a:af:ae:f9:3e:e5:eb:db:2b:40:aa:08:92:7c: b3:44:a4:b7:c8:79:38:91:d2:3a:bd:89:32:0b:e8: d8:af:9e:e1:32:36:93:6c:25:3b:d7:97:39:83:14: 9d:b9:d6:ef:dd:b2:52:5e:92:98:24:a9:31:aa:79: ea:9e:f2:7b:8b:61:8a:1b:9f:96:ac:48:28:4e:93: 46:e0:49:5b:bf:93:ca:8f:5b:1c:5e:93:99:b6:b2: 8e:55:3a:2f:c8:6c:50:49:f7:0d:2c:78:fc:17:fd: 2f:f5:03:88:75:6c:5a:38:11:c9:8e:cb:73:8e:9a: 70:96:b3:9a:43:3b:32:94:57:5f:d5:3b:92:ff:b7: 66:d5:1a:9b:8d:a5:2b:62:ee:85:d5:f9:0a:80:a7: 3b:2d:dc:1f:ac:ad:58:86:61:c6:16:8e:66:96:64: 0c:c9:ba:bd:6d:7e:a2:05:67:0e:c3:67:f8:be:bb: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:36:CA:CD:52:CF:21:D2:AD:77:16:D8:5F:A9:A5:9D:86:CB:79:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6140595a-c5ef-3b01-b814-46f0cfa3ebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3c:3d:ab:cb:c4:a8:f7:f9:90:60:2f:fe:d5:58:67:92:29: b3:38:27:6c:ae:12:03:b4:1f:34:3f:3a:1b:87:21:9e:8d:61: 44:da:2a:7d:cf:a1:0c:56:d5:02:da:d1:86:7e:10:83:dc:ff: 6e:f2:7c:91:70:65:f4:16:55:8a:87:03:21:c9:70:41:c6:50: f0:e4:79:a5:87:85:95:f8:93:51:4b:e9:a8:0e:5d:9d:40:76: 6f:75:eb:7f:9a:1a:b7:cf:80:26:84:35:58:7d:bb:54:b0:31: 04:b6:e3:e2:52:08:25:19:8d:6b:d7:fa:d3:d5:87:50:a8:e9: b2:7f:12:cb:b9:76:3c:f3:fe:0a:57:ab:c8:21:95:13:06:cc: ff:a3:81:58:5f:0c:63:0e:19:8a:11:93:98:81:82:fa:76:46: 32:26:7a:97:6e:a7:76:b3:b0:19:45:4e:33:ed:85:34:00:fa: 57:fe:9c:96:72:f3:92:10:96:5b:6a:37:50:ab:4a:47:6a:16: 65:b3:3c:d1:de:96:0e:78:69:71:4a:47:3f:b3:bb:cd:7e:33: b2:15:a1:69:df:79:8f:48:43:04:3b:6e:c7:0c:ac:c2:78:44: b2:4e:c5:b5:ba:36:d3:39:92:32:56:60:bf:65:dd:f0:26:8f: 5e:e5:1a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXJFBPfa/Ea0cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGE2NDdhY2QtZTA0My00YjAyLTg3MDAtMjFiMjNiMzkyYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr89jmp1CmPSz1DHyriydz/fs5+jXNXHP2wLd 8w8VOfew0PI1riFrMRWpnQSFaOAFaNrhJpzhH/Ou8785ky7ruFJiCjHbOe4mE0vF Sq+u+T7l69srQKoIknyzRKS3yHk4kdI6vYkyC+jYr57hMjaTbCU715c5gxSdudbv 3bJSXpKYJKkxqnnqnvJ7i2GKG5+WrEgoTpNG4Elbv5PKj1scXpOZtrKOVTovyGxQ SfcNLHj8F/0v9QOIdWxaOBHJjstzjppwlrOaQzsylFdf1TuS/7dm1RqbjaUrYu6F 1fkKgKc7LdwfrK1YhmHGFo5mlmQMybq9bX6iBWcOw2f4vrsUIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo2ys1SzyHSrXcW2F+ppZ2Gy3mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjE0MDU5NWEtYzVlZi0z YjAxLWI4MTQtNDZmMGNmYTNlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo8PavLxKj3+ZBgL/7VWGeSKbM4J2yuEgO0HzQ/OhuHIZ6NYUTaKn3P oQxW1QLa0YZ+EIPc/27yfJFwZfQWVYqHAyHJcEHGUPDkeaWHhZX4k1FL6agOXZ1A dm9163+aGrfPgCaENVh9u1SwMQS24+JSCCUZjWvX+tPVh1Co6bJ/Esu5djzz/gpX q8ghlRMGzP+jgVhfDGMOGYoRk5iBgvp2RjImepdup3azsBlFTjPthTQA+lf+nJZy 85IQlltqN1CrSkdqFmWzPNHelg54aXFKRz+zu81+M7IVoWnfeY9IQwQ7bscMrMJ4 RLJOxbW6NtM5kjJWYL9l3fAmj17lGvk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:24:24 2025 by rpki-client