$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b5f8152-0c85-3796-8175-beef7acf2e2d.roa File: 9b5f8152-0c85-3796-8175-beef7acf2e2d.roa (raw, json) Hash identifier: YxLLGkDDHGHt43MCYlHgvC8Ohc3crBpZAaG0E2jlX/w= Subject key identifier: B9:B3:31:C1:42:EB:89:5B:B7:6B:3E:2D:29:E8:D9:1F:B1:EB:4C:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584965E98096DBE0DAA1E0790940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b5f8152-0c85-3796-8175-beef7acf2e2d.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 34.1.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:80:96:db:e0:da:a1:e0:79:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=63408bd3-5ac2-4394-bbd3-8e929e037085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:55:76:41:43:d4:3b:5d:4b:36:cb:b8:3d: c2:75:46:12:cd:7a:31:ff:a9:f3:af:2b:ad:4f:b0: da:79:f5:d7:dc:81:1a:73:42:2d:54:15:40:e8:18: 67:22:fb:80:fd:26:6b:32:b6:cf:4b:24:04:00:ad: cd:2a:b4:b9:da:c3:c8:1f:ff:3b:39:1a:b7:5a:4e: b5:1b:ab:87:44:1c:6a:36:ae:06:3d:30:57:80:78: f2:94:ef:5e:38:57:1a:d5:e9:45:f3:73:db:5c:22: 1b:85:4f:b3:80:3e:c2:bf:93:c0:b5:61:82:0d:4a: 71:c4:af:06:ac:c1:47:78:6d:43:8b:b0:c9:4d:64: 42:6a:f8:57:d2:cb:4c:ef:06:e6:5d:53:fb:14:33: 1c:24:fc:cb:59:f4:b1:f7:60:de:e3:4a:0e:94:f0: c0:67:3b:f3:9e:51:a4:d6:e2:ff:aa:1c:38:d1:c2: 81:7d:f3:6a:92:54:44:01:2f:ff:84:96:43:e9:c2: 0d:2c:29:d2:9b:35:e3:2a:7c:42:da:19:55:c9:05: 90:b0:cc:53:1e:b6:5c:de:59:7c:46:eb:39:9a:c4: f9:54:ad:61:15:50:ee:14:0d:ae:98:2f:71:dc:76: cb:7f:4a:cf:40:37:3a:ec:65:c6:95:c3:f3:33:4b: 6f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B3:31:C1:42:EB:89:5B:B7:6B:3E:2D:29:E8:D9:1F:B1:EB:4C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b5f8152-0c85-3796-8175-beef7acf2e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:01:d7:e3:8c:3b:dc:b3:64:5e:c1:e7:9d:0b:eb:73:0d:06: 9f:cd:ce:1e:b9:33:cc:45:16:ac:85:2c:a1:09:71:44:98:4a: 29:9e:d0:b2:cd:bd:74:9f:ec:42:73:ac:25:48:52:c1:0d:4f: 95:57:94:f4:04:33:2a:dc:8a:a0:5d:a9:c4:ef:59:07:2a:1b: 12:d6:0c:8f:76:9a:2e:58:cc:69:ae:e8:dd:c1:f7:68:40:cf: 94:f7:ec:32:57:e7:13:ec:28:fe:37:7e:80:ae:02:d5:22:27: 4e:f0:32:1e:3d:bc:6a:f3:35:76:0e:3a:37:1f:b8:e3:b2:46: 7b:8c:1c:59:f2:e3:aa:53:67:95:7a:b4:49:3a:95:45:2a:b6: 14:2e:5e:f0:fc:16:8f:f7:d9:97:14:95:51:9a:ab:a7:6f:9c: ee:a6:b2:a2:9f:9a:56:a5:2e:f7:2f:ac:e2:d3:8f:1e:12:62: 69:3b:73:5d:7b:01:f4:65:6e:11:ff:b4:4a:cb:ed:5f:32:c4: bf:a7:b9:b7:fd:05:47:42:1d:b6:d1:ca:ce:14:a9:36:43:00: 63:20:5c:83:c6:9d:20:f7:06:fd:c2:a9:39:a8:dc:37:5c:57: e7:3e:07:d0:9d:75:a9:14:5b:05:d8:2a:15:ca:bc:cb:13:01: b4:c0:db:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6YCW2+DaoeB5CUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NjM0MDhiZDMtNWFjMi00Mzk0LWJiZDMtOGU5MjllMDM3MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1VdkFD1DtdSzbLuD3CdUYSzXox/6nzryut T7DaefXX3IEac0ItVBVA6BhnIvuA/SZrMrbPSyQEAK3NKrS52sPIH/87ORq3Wk61 G6uHRBxqNq4GPTBXgHjylO9eOFca1elF83PbXCIbhU+zgD7Cv5PAtWGCDUpxxK8G rMFHeG1Di7DJTWRCavhX0stM7wbmXVP7FDMcJPzLWfSx92De40oOlPDAZzvznlGk 1uL/qhw40cKBffNqklREAS//hJZD6cINLCnSmzXjKnxC2hlVyQWQsMxTHrZc3ll8 Rus5msT5VK1hFVDuFA2umC9x3HbLf0rPQDc67GXGlcPzM0tv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmzMcFC64lbt2s+LSno2R+x60zTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWI1ZjgxNTItMGM4NS0z Nzk2LTgxNzUtYmVlZjdhY2YyZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8B1+OMO9yzZF7B550L63MNBp/Nzh65M8xFFqyFLKEJcUSYSime0LLN vXSf7EJzrCVIUsENT5VXlPQEMyrciqBdqcTvWQcqGxLWDI92mi5YzGmu6N3B92hA z5T37DJX5xPsKP43foCuAtUiJ07wMh49vGrzNXYOOjcfuOOyRnuMHFny46pTZ5V6 tEk6lUUqthQuXvD8Fo/32ZcUlVGaq6dvnO6msqKfmlalLvcvrOLTjx4SYmk7c117 AfRlbhH/tErL7V8yxL+nubf9BUdCHbbRys4UqTZDAGMgXIPGnSD3Bv3CqTmo3Ddc V+c+B9CddakUWwXYKhXKvMsTAbTA200= -----END CERTIFICATE-----Generated at Fri Apr 4 09:02:58 2025 by rpki-client