$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7391f59a-238a-3185-a09c-912ed1ee1086.roa File: 7391f59a-238a-3185-a09c-912ed1ee1086.roa (raw, json) Hash identifier: uLeMDPpzM0kNxr6NZwi4YWE6cWTWlUN6KPhJ4vPAqkE= Subject key identifier: 34:F1:98:12:C1:86:E6:C3:E6:C4:DE:85:40:71:FC:AF:7D:96:2A:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858492CB0319CC1F4FDC3FE12C980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7391f59a-238a-3185-a09c-912ed1ee1086.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.13.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:31:9c:c1:f4:fd:c3:fe:12:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1d543b34-7e33-431d-97a4-dc2cabed3f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6e:3a:7a:7e:86:bf:59:c8:cf:a4:b6:fe:68: 6d:6b:22:0f:33:69:af:88:05:76:15:ba:7b:db:bf: f1:79:05:ee:bc:8e:fb:3d:b8:67:55:23:03:f6:eb: ac:02:cd:41:c5:11:42:fc:14:4e:b2:a2:02:51:75: 58:a2:0c:a5:c2:55:0b:48:53:6a:5a:d1:8e:49:de: b6:bf:b9:01:8d:1b:21:64:6e:64:b0:a8:3b:44:22: 05:56:8b:b0:57:dc:3b:7f:1d:43:0f:94:e9:6b:52: e4:8f:5f:97:41:69:d1:5a:99:86:b6:1c:5c:8f:c0: 4d:b7:ae:6a:77:01:5f:63:2d:23:99:1b:bb:5b:17: 8a:9f:f6:38:b2:34:c1:d3:a4:c3:ec:2d:95:ed:a7: bc:db:1b:0a:24:57:64:06:dd:a9:cf:3f:21:84:aa: 69:5f:d4:9b:7b:82:4f:33:f6:55:3f:60:dc:ef:30: bd:75:ec:09:8c:e5:86:6d:1f:72:54:b9:30:12:c7: ce:ab:37:96:d9:28:0f:83:73:b3:d2:9c:5d:49:97: c9:36:ec:0d:3f:05:e9:f5:5e:f9:19:eb:e0:5c:38: 83:45:23:22:90:fe:2d:90:54:38:03:71:ff:a8:ab: 9d:73:8a:21:63:0c:d8:79:e0:81:ab:f1:48:af:09: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F1:98:12:C1:86:E6:C3:E6:C4:DE:85:40:71:FC:AF:7D:96:2A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7391f59a-238a-3185-a09c-912ed1ee1086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.13.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3f:77:39:60:56:39:0c:69:15:8a:ea:61:b1:82:6e:2e:af: fe:8a:bb:4d:6a:8e:e2:66:71:6e:dc:5f:21:0b:cb:1a:eb:bf: a4:e7:3e:3b:b2:d4:13:c2:fe:16:80:00:0a:12:8e:ff:fc:d2: 35:46:29:17:0e:fa:75:a9:0b:4f:0e:c3:e8:c6:89:dc:c4:d7: fb:ad:cf:22:ae:fd:58:df:06:db:b0:16:7c:d0:60:d3:bb:0f: a7:c3:4c:f7:d1:f9:cd:66:7a:d1:ff:b7:6d:a5:74:4b:13:64: 20:df:ca:6d:ae:49:6c:51:d3:6e:2b:95:51:04:c0:0f:a0:32: 6f:7b:1e:cf:e3:34:44:a8:8d:e2:52:e1:5d:b5:6b:1d:e4:68: ae:b3:ac:c5:75:47:bd:1a:59:92:56:b6:4b:3c:e7:e3:04:b8: 6b:ed:95:5f:6d:7e:3e:20:fb:4d:6a:35:40:57:6e:15:49:08: 5c:3a:5a:0f:50:3e:a2:73:96:2b:e5:43:73:2b:93:97:09:66: 35:3c:37:2b:d3:09:02:b7:38:d2:bb:9f:8a:8c:f1:2b:31:44: 80:11:9a:13:87:7a:bb:3c:02:7c:75:d2:0e:96:71:d9:dd:ce: 83:3a:3b:22:6b:76:6f:8c:e0:ef:7e:ba:0a:93:d3:1e:67:5f: 1e:08:93:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssDGcwfT9w/4SyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWQ1NDNiMzQtN2UzMy00MzFkLTk3YTQtZGMyY2FiZWQzZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm46en6Gv1nIz6S2/mhtayIPM2mviAV2Fbp7 27/xeQXuvI77PbhnVSMD9uusAs1BxRFC/BROsqICUXVYogylwlULSFNqWtGOSd62 v7kBjRshZG5ksKg7RCIFVouwV9w7fx1DD5Tpa1Lkj1+XQWnRWpmGthxcj8BNt65q dwFfYy0jmRu7WxeKn/Y4sjTB06TD7C2V7ae82xsKJFdkBt2pzz8hhKppX9Sbe4JP M/ZVP2Dc7zC9dewJjOWGbR9yVLkwEsfOqzeW2SgPg3Oz0pxdSZfJNuwNPwXp9V75 GevgXDiDRSMikP4tkFQ4A3H/qKudc4ohYwzYeeCBq/FIrwmM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTxmBLBhubD5sTehUBx/K99liqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzM5MWY1OWEtMjM4YS0z MTg1LWEwOWMtOTEyZWQxZWUxMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIg1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8/dzlgVjkMaRWK6mGxgm4ur/6Ku01qjuJmcW7cXyELyxrrv6TnPjuy 1BPC/haAAAoSjv/80jVGKRcO+nWpC08Ow+jGidzE1/utzyKu/VjfBtuwFnzQYNO7 D6fDTPfR+c1metH/t22ldEsTZCDfym2uSWxR024rlVEEwA+gMm97Hs/jNESojeJS 4V21ax3kaK6zrMV1R70aWZJWtks85+MEuGvtlV9tfj4g+01qNUBXbhVJCFw6Wg9Q PqJzlivlQ3Mrk5cJZjU8NyvTCQK3ONK7n4qM8SsxRIARmhOHers8Anx10g6Wcdnd zoM6OyJrdm+M4O9+ugqT0x5nXx4IkzA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:16 2025 by rpki-client