$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76aa2681-93ba-32ec-b4e7-1b052d385876.roa File: 76aa2681-93ba-32ec-b4e7-1b052d385876.roa (raw, json) Hash identifier: Ib0BF3KFPQK5Yud5Xa2/AOP7qbe9zZePSY1FNrECC+c= Subject key identifier: 70:7F:A0:03:9A:4E:75:8A:DB:BE:6B:BA:78:38:C6:0F:A5:BB:E5:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858489E6B5E9A8A5B21707BB51180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76aa2681-93ba-32ec-b4e7-1b052d385876.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 19527 IP address blocks: 34.2.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:5e:9a:8a:5b:21:70:7b:b5:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9d4ebc9e-57fe-4821-9fc2-e04b3b48f6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:33:80:03:45:2d:8c:7f:ae:fe:3b:b5:76: 5b:16:5f:01:ab:39:db:f6:a1:b4:82:9c:fb:47:0c: 4b:f2:da:33:cd:24:02:cc:69:82:09:63:71:13:fb: 25:4a:8f:c2:80:78:6e:0c:c7:ad:0f:33:6e:68:1a: be:c1:e5:22:1a:28:1d:d0:95:28:cc:a1:bc:ba:d9: f7:47:6b:af:b5:8d:da:6a:e0:8b:c1:2f:bc:19:a0: cf:d5:99:c7:dd:e3:48:54:7b:8b:5d:64:43:95:c1: cb:2a:32:64:74:1b:98:d7:40:a7:a9:4d:3e:35:1e: bd:b0:6e:89:5d:f2:8c:f5:df:9d:95:07:c4:eb:17: f0:e4:01:40:01:60:45:eb:fe:f5:d5:9a:93:1f:2e: 23:a0:72:dd:d4:a5:7d:a4:88:33:19:27:4d:e5:7b: d8:f8:32:c0:cc:49:5c:22:1e:f7:77:b8:d1:cb:b4: cd:2d:b5:bd:6b:95:93:0c:cd:40:ed:c5:90:7b:c2: 05:d7:0b:ec:2c:30:59:51:b4:c2:17:8b:39:f1:31: 50:38:11:59:e5:94:42:fe:f5:9b:97:c9:1b:ab:ac: 5e:7a:0e:7f:ce:6f:1c:f5:fc:92:1a:c5:03:d5:b4: e0:5d:ce:24:5a:86:40:87:50:02:6f:92:79:d3:92: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:A0:03:9A:4E:75:8A:DB:BE:6B:BA:78:38:C6:0F:A5:BB:E5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/76aa2681-93ba-32ec-b4e7-1b052d385876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:86:8f:e3:f9:48:30:b9:f4:77:7c:38:e8:79:0a:dc:db:95: 4d:e2:59:21:3a:4f:33:c8:65:4c:e6:60:3d:e2:c8:03:b9:c0: a9:ba:f1:dd:51:50:d7:bf:17:85:eb:59:25:97:29:eb:26:89: 90:33:d2:91:53:44:73:7c:c0:07:57:83:bf:87:9e:35:22:25: f7:08:2c:66:42:13:75:18:c8:73:ea:21:03:77:0e:66:1f:7e: 99:bb:aa:fc:ce:51:1b:e8:ea:38:3f:94:ed:a5:7f:ad:cc:cb: 53:43:c9:00:58:f7:d5:5d:cd:09:22:9f:ea:66:71:ce:ea:f4: 82:63:a5:fc:cf:28:b5:85:29:5f:d8:c7:2f:6c:70:be:4b:06: 9e:6c:15:a3:1f:d9:39:95:ce:3d:0f:e1:97:ff:07:2e:30:06: a2:9d:7f:dd:09:8a:c2:e2:21:e7:a7:42:fe:05:15:18:c8:8f: 6c:8d:bc:27:83:7c:29:70:0d:5a:d3:05:5d:bb:0c:21:08:17: 1c:d1:13:2c:3b:e3:92:73:94:99:91:0a:8d:3d:c4:5a:e9:78: e5:0a:9e:9a:e8:83:19:2b:8f:9c:4b:3b:f8:ce:52:39:bc:3f: c0:b8:20:9a:95:85:f2:e3:e6:9a:3d:bc:1a:ce:58:26:e6:2b: 75:81:b9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea16ailshcHu1EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWQ0ZWJjOWUtNTdmZS00ODIxLTlmYzItZTA0YjNiNDhmNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGEzgANFLYx/rv47tXZbFl8Bqznb9qG0gpz7 RwxL8tozzSQCzGmCCWNxE/slSo/CgHhuDMetDzNuaBq+weUiGigd0JUozKG8utn3 R2uvtY3aauCLwS+8GaDP1ZnH3eNIVHuLXWRDlcHLKjJkdBuY10CnqU0+NR69sG6J XfKM9d+dlQfE6xfw5AFAAWBF6/711ZqTHy4joHLd1KV9pIgzGSdN5XvY+DLAzElc Ih73d7jRy7TNLbW9a5WTDM1A7cWQe8IF1wvsLDBZUbTCF4s58TFQOBFZ5ZRC/vWb l8kbq6xeeg5/zm8c9fySGsUD1bTgXc4kWoZAh1ACb5J505KaGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB/oAOaTnWK275rung4xg+lu+XWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzZhYTI2ODEtOTNiYS0z MmVjLWI0ZTctMWIwNTJkMzg1ODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuGj+P5SDC59Hd8OOh5CtzblU3iWSE6TzPIZUzmYD3iyAO5wKm68d1R UNe/F4XrWSWXKesmiZAz0pFTRHN8wAdXg7+HnjUiJfcILGZCE3UYyHPqIQN3DmYf fpm7qvzOURvo6jg/lO2lf63My1NDyQBY99VdzQkin+pmcc7q9IJjpfzPKLWFKV/Y xy9scL5LBp5sFaMf2TmVzj0P4Zf/By4wBqKdf90JisLiIeenQv4FFRjIj2yNvCeD fClwDVrTBV27DCEIFxzREyw745JzlJmRCo09xFrpeOUKnprogxkrj5xLO/jOUjm8 P8C4IJqVhfLj5po9vBrOWCbmK3WBuaU= -----END CERTIFICATE-----Generated at Fri Apr 4 09:02:58 2025 by rpki-client