$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa File: 929b3699-faae-3b8b-b46e-fa550ac3dea9.roa (raw, json) Hash identifier: u0NfETLe3b/NmZaPAlNmxiIznMkZSYZJOkkchHUHSbc= Subject key identifier: AF:D2:68:A1:17:9D:50:B2:B9:BC:4A:2A:ED:03:D2:B6:8C:2E:F9:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF737FB7E3B5252FE6D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.144.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f7:37:fb:7e:3b:52:52:fe:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5074b8fb-81bb-41f6-965d-b5610fde46b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4b:a8:00:17:7b:4a:5d:21:7e:54:6d:fc:dc: 33:8a:cb:cb:a3:5a:c7:d6:bc:10:71:32:0c:cd:29: e8:e3:01:4f:0c:2d:d1:00:a0:2c:e8:d5:2b:b2:85: 24:0b:a4:31:a2:53:26:c9:96:17:f5:ba:60:2a:57: 1c:df:98:1b:58:c9:4b:18:0d:45:1c:41:61:63:c7: c8:89:8b:59:22:dc:da:84:a7:b1:2a:ed:d4:a2:51: 42:88:eb:f1:ae:b1:6c:a2:dc:35:5b:b3:f6:ba:7a: 3c:d8:86:64:72:7d:3d:f6:94:bf:5f:02:1d:00:33: 90:af:da:f8:b1:9a:36:c1:e4:df:8f:6d:86:cb:93: 44:3d:b3:ad:82:8c:b3:38:8a:04:43:1b:38:38:26: 57:9c:a9:23:fb:97:53:32:51:48:79:fa:fc:c9:94: 86:18:43:ef:6c:d8:76:56:17:c4:05:23:d5:54:a6: c8:c3:ab:90:78:01:67:1e:9d:93:01:d0:fc:a7:4c: 8b:42:d4:5c:26:8e:cf:ec:16:9c:3f:f1:93:60:af: 75:53:d2:37:25:25:2c:43:18:62:e8:c4:13:e9:bf: d7:46:a2:22:34:c5:71:8d:f1:bb:4a:7c:a5:67:24: b3:6c:d9:32:07:25:c0:31:a5:a5:a3:4d:41:f0:a6: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D2:68:A1:17:9D:50:B2:B9:BC:4A:2A:ED:03:D2:B6:8C:2E:F9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/929b3699-faae-3b8b-b46e-fa550ac3dea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d8:93:27:5b:db:24:a2:3b:80:bc:2d:21:ad:74:5b:29:32: d3:a2:a2:50:f1:73:34:fd:50:74:86:aa:f5:49:c3:ee:03:2d: 00:e3:d3:01:f7:19:a0:61:74:26:1a:1d:82:45:69:e7:04:a8: 25:e4:6e:fe:f4:4b:5b:21:92:a0:d8:4f:a9:75:49:3c:33:04: 22:1e:a1:4d:53:d5:e6:f3:bb:e2:89:db:b4:31:62:dc:e2:34: 4d:a6:b5:49:cb:09:83:89:10:7f:a8:17:36:ab:02:02:ce:cf: 2a:a6:d4:d5:14:d0:ff:c9:cf:33:21:47:7b:24:33:35:d0:d6: 43:3b:43:52:5d:62:23:a4:b9:b0:c7:6e:a0:e5:0c:35:2b:7b: 1a:c5:6c:5f:4e:04:85:28:90:71:10:a3:8e:77:de:71:bc:a5: 61:77:23:a5:93:12:62:c9:75:42:7e:bb:db:fc:b8:3e:63:ef: 48:0a:1b:64:c2:7a:a4:68:8a:08:b9:52:cb:dc:78:47:42:44: 7b:cf:13:b1:da:ca:0f:6e:66:cf:f1:c0:fd:fe:1e:5e:53:4b: 35:10:18:08:9b:f4:35:65:41:81:c9:25:77:7c:0d:0c:09:6f: 2c:36:1e:13:a1:4c:f9:10:29:18:54:22:33:2a:ad:dc:e5:d1: f2:77:e1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/c3+347UlL+bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTA3NGI4ZmItODFiYi00MWY2LTk2NWQtYjU2MTBmZGU0NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUuoABd7Sl0hflRt/NwzisvLo1rH1rwQcTIM zSno4wFPDC3RAKAs6NUrsoUkC6QxolMmyZYX9bpgKlcc35gbWMlLGA1FHEFhY8fI iYtZItzahKexKu3UolFCiOvxrrFsotw1W7P2uno82IZkcn099pS/XwIdADOQr9r4 sZo2weTfj22Gy5NEPbOtgoyzOIoEQxs4OCZXnKkj+5dTMlFIefr8yZSGGEPvbNh2 VhfEBSPVVKbIw6uQeAFnHp2TAdD8p0yLQtRcJo7P7BacP/GTYK91U9I3JSUsQxhi 6MQT6b/XRqIiNMVxjfG7SnylZySzbNkyByXAMaWlo01B8KZsaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/SaKEXnVCyubxKKu0D0raMLvncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTI5YjM2OTktZmFhZS0z YjhiLWI0NmUtZmE1NTBhYzNkZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIpCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbYkydb2ySiO4C8LSGtdFspMtOiolDxczT9UHSGqvVJw+4DLQDj0wH3 GaBhdCYaHYJFaecEqCXkbv70S1shkqDYT6l1STwzBCIeoU1T1ebzu+KJ27QxYtzi NE2mtUnLCYOJEH+oFzarAgLOzyqm1NUU0P/JzzMhR3skMzXQ1kM7Q1JdYiOkubDH bqDlDDUrexrFbF9OBIUokHEQo4533nG8pWF3I6WTEmLJdUJ+u9v8uD5j70gKG2TC eqRoigi5UsvceEdCRHvPE7Hayg9uZs/xwP3+Hl5TSzUQGAib9DVlQYHJJXd8DQwJ byw2HhOhTPkQKRhUIjMqrdzl0fJ34Ts= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:13 2025 by rpki-client