$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa File: 9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa (raw, json) Hash identifier: 4DASRcQE6czs7OdLmYXQW6SXKrH8L8I26uaXKhS3LHI= Subject key identifier: 08:A6:31:91:23:44:E2:DE:2D:C2:08:1B:FA:E6:E7:C7:2B:A1:05:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858489404EFD2A3B213380E46B340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa Signing time: Fri 17 Jan 2025 20:36:28 +0000 ROA not before: Fri 17 Jan 2025 20:36:28 +0000 ROA not after: Thu 17 Apr 2025 19:36:28 +0000 asID: 15169 IP address blocks: 34.2.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:04:ef:d2:a3:b2:13:38:0e:46:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 17 20:36:28 2025 GMT Not After : Apr 17 19:36:28 2025 GMT Subject: CN=f859c963-ead7-4bab-8f21-6d714862dc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:10:9f:34:09:92:4d:a7:95:6b:3b:62:d5:92: 5f:3f:45:d8:d7:17:08:99:ad:e0:22:8c:bd:ea:0e: ad:21:06:28:3a:81:c6:e5:7b:d9:54:0a:38:7e:2d: 1e:27:0c:4f:0d:ab:1c:dc:a3:38:a4:29:0c:0f:1f: 4d:98:2e:3f:5f:a4:e4:21:bd:67:26:6e:34:78:b5: 18:9f:c3:15:4b:f2:23:35:f7:bf:7b:55:58:e1:74: 4a:11:a1:a3:d4:65:23:f6:17:8c:30:00:5f:06:b2: 23:5c:e6:70:20:a5:2f:9f:d7:2e:b3:f7:15:11:83: f1:4a:70:06:16:3c:15:9e:11:a3:14:76:f2:53:21: d2:9c:c2:62:61:35:2d:9c:11:df:a1:bd:eb:fe:e4: 3f:51:1a:65:45:d8:5c:a1:18:64:94:9f:34:fa:9e: 72:2e:93:d6:be:9f:c7:7a:bc:12:8d:32:7e:2f:38: 7d:b1:ea:42:6c:1b:f2:1f:40:ad:3b:57:6b:f3:9b: a3:d0:a7:e7:64:af:21:9b:21:17:75:9f:52:3b:49: e9:54:4a:ae:13:2f:d7:12:b7:9d:1a:cc:f1:94:a6: 68:2f:a5:b1:ca:9b:d2:53:df:8a:01:03:b3:92:c5: 70:49:a4:7e:2c:eb:81:65:4a:74:16:fb:80:12:c3: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A6:31:91:23:44:E2:DE:2D:C2:08:1B:FA:E6:E7:C7:2B:A1:05:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbd9a6b-4a1c-3f77-ba96-29db332a32a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:68:ea:c0:4e:37:f0:e4:86:f2:51:f9:45:fe:77:19:1a:d2: 8a:e9:c9:73:8b:4b:90:d4:08:fb:1f:23:08:a0:aa:e1:2b:b6: a1:b4:7b:60:b8:8b:12:0b:fc:97:60:b2:e2:3e:cf:9a:b6:a4: 13:19:3c:a3:df:02:d5:87:50:50:d2:a8:f9:e4:13:e1:06:da: d3:a4:3e:50:0a:1d:dd:04:cb:8d:bb:65:43:f5:55:aa:f5:73: 74:31:9d:92:e9:f9:7a:06:0e:21:f6:7e:11:48:3e:d6:a1:44: 64:53:d5:29:07:1a:93:8a:bf:b7:3b:bd:d5:65:a9:8d:6b:bc: 3a:aa:a1:bc:0a:16:ec:ed:d8:af:39:6e:dd:b0:18:b5:9f:85: 69:1c:7d:74:59:9c:93:70:71:80:61:4e:c9:81:f8:da:63:b0: b0:11:77:d0:d0:07:b7:d1:1f:61:09:65:fa:11:cf:8f:c9:1c: d3:67:a4:bd:ad:cd:4e:99:e5:c7:12:b1:c6:65:00:d3:8f:bc: f8:0f:ae:a6:5a:05:aa:3d:9e:f1:89:12:dd:25:a9:bb:25:5f: e3:91:53:89:05:be:d3:16:ed:50:28:06:ea:8f:c0:f6:f8:3c: 8b:58:1b:3e:7a:9e:f3:21:50:37:3e:7b:7e:66:dd:5a:7e:b9: 19:89:4d:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUBO/So7ITOA5Gs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDExNzIwMzYyOFoXDTI1MDQxNzE5MzYyOFowLzEtMCsGA1UEAxMk Zjg1OWM5NjMtZWFkNy00YmFiLThmMjEtNmQ3MTQ4NjJkYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRCfNAmSTaeVazti1ZJfP0XY1xcIma3gIoy9 6g6tIQYoOoHG5XvZVAo4fi0eJwxPDasc3KM4pCkMDx9NmC4/X6TkIb1nJm40eLUY n8MVS/IjNfe/e1VY4XRKEaGj1GUj9heMMABfBrIjXOZwIKUvn9cus/cVEYPxSnAG FjwVnhGjFHbyUyHSnMJiYTUtnBHfob3r/uQ/URplRdhcoRhklJ80+p5yLpPWvp/H erwSjTJ+Lzh9sepCbBvyH0CtO1dr85uj0KfnZK8hmyEXdZ9SO0npVEquEy/XEred GszxlKZoL6WxypvSU9+KAQOzksVwSaR+LOuBZUp0FvuAEsOwpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAimMZEjROLeLcIIG/rm58croQWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWRiZDlhNmItNGExYy0z Zjc3LWJhOTYtMjlkYjMzMmEzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFo6sBON/DkhvJR+UX+dxka0orpyXOLS5DUCPsfIwigquErtqG0e2C4 ixIL/JdgsuI+z5q2pBMZPKPfAtWHUFDSqPnkE+EG2tOkPlAKHd0Ey427ZUP1Var1 c3QxnZLp+XoGDiH2fhFIPtahRGRT1SkHGpOKv7c7vdVlqY1rvDqqobwKFuzt2K85 bt2wGLWfhWkcfXRZnJNwcYBhTsmB+NpjsLARd9DQB7fRH2EJZfoRz4/JHNNnpL2t zU6Z5ccSscZlANOPvPgPrqZaBao9nvGJEt0lqbslX+ORU4kFvtMW7VAoBuqPwPb4 PItYGz56nvMhUDc+e35m3Vp+uRmJTaI= -----END CERTIFICATE-----Generated at Fri Apr 4 08:51:35 2025 by rpki-client