$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4d51337-c1ca-33d7-9160-6741649e6d35.roa File: b4d51337-c1ca-33d7-9160-6741649e6d35.roa (raw, json) Hash identifier: lZj8UIEOeiBLUgKFLlWSu8xUQpBJIxP83VJX5ZqHgL8= Subject key identifier: 2C:3C:11:27:AC:08:3A:C4:49:B2:D6:BE:76:83:F0:2B:B4:0E:A7:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584882809C29971DBF22B4140140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4d51337-c1ca-33d7-9160-6741649e6d35.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.124.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:9c:29:97:1d:bf:22:b4:14:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=e281eb2f-275f-41d9-a32d-3d709764072c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:d5:22:1f:64:86:1f:ef:49:56:d2:63:43: 45:f6:d7:04:fd:16:50:4d:75:9a:44:55:55:e8:80: 73:ef:fc:77:80:d3:f6:fa:3e:97:c5:5c:d2:86:4e: 61:9d:54:77:96:3b:f1:f3:a9:0b:f8:e3:89:0c:16: 2a:34:01:cf:bf:78:48:a9:9f:e7:5e:d3:99:4d:38: c0:d1:73:c2:74:f5:43:c3:2f:81:e9:a8:bd:ab:93: c5:c2:09:a3:61:a5:38:ec:e0:25:0c:a8:27:c4:32: ab:20:40:24:f5:a1:41:dc:d6:f8:2d:73:23:3f:b6: 43:19:1f:df:e7:9c:77:2d:45:26:22:6b:3a:4d:6f: d3:83:23:68:27:31:9d:fa:58:d2:ec:a5:f0:22:39: 88:7c:e7:e4:20:78:10:d7:59:96:0c:7d:51:db:5a: 31:97:2f:96:88:13:33:f9:c8:16:2d:ac:87:e1:45: d8:f3:59:4e:4c:c1:02:bb:f2:30:34:be:ab:36:6e: 74:ad:ee:57:09:ed:c0:90:ad:a6:33:0e:89:51:3a: c5:ee:53:75:46:0e:a4:95:4d:ca:51:1b:bf:8a:42: f9:a4:d4:dd:93:e5:45:4e:c6:7d:6f:40:da:8e:68: e7:35:65:b0:83:b4:c0:4b:16:52:53:a9:ff:a1:c1: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:11:27:AC:08:3A:C4:49:B2:D6:BE:76:83:F0:2B:B4:0E:A7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4d51337-c1ca-33d7-9160-6741649e6d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0c:e5:0f:65:62:fa:13:c6:2d:8f:d7:8b:ff:58:ac:27:95: 0c:5d:42:35:d2:46:05:b0:c4:b5:d8:59:73:0c:d0:3d:ff:6c: 35:c8:09:0e:58:fc:c9:c3:71:40:4c:6d:8e:16:30:dd:39:0f: 12:4c:db:bd:f7:4f:28:da:4b:74:d9:3c:0b:81:00:42:55:62: ac:75:6a:d2:34:df:23:48:3d:93:16:62:2a:0b:43:f8:23:b9: ba:8c:83:21:08:a2:10:94:a1:1b:ad:d5:1a:a2:32:66:57:73: 80:8b:28:5b:4b:30:d7:06:ba:93:f5:65:ef:27:d0:76:9c:3e: 68:16:8e:7b:b9:b8:8b:fa:7f:52:72:26:00:9b:e9:61:f2:22: 6f:41:0c:16:3f:c4:cb:63:0e:b8:ae:d6:67:d8:cb:12:24:ac: 81:60:b6:06:5a:07:31:91:4f:44:a5:7f:82:c7:68:71:4c:e1: ff:02:23:88:12:b2:bc:14:70:f8:1e:ce:1f:64:bb:77:ee:39: 0a:50:fd:d3:fb:1b:7e:c3:92:36:ea:c4:da:05:2c:54:9a:ea: 71:da:0c:f9:73:9b:b8:27:94:be:9f:34:51:53:07:c3:40:06: 52:93:f9:de:69:3a:9c:f9:28:53:c1:10:0e:ad:1c:12:58:00: 3c:25:50:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJwplx2/IrQUAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTI4MWViMmYtMjc1Zi00MWQ5LWEzMmQtM2Q3MDk3NjQwNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ivVIh9khh/vSVbSY0NF9tcE/RZQTXWaRFVV 6IBz7/x3gNP2+j6XxVzShk5hnVR3ljvx86kL+OOJDBYqNAHPv3hIqZ/nXtOZTTjA 0XPCdPVDwy+B6ai9q5PFwgmjYaU47OAlDKgnxDKrIEAk9aFB3Nb4LXMjP7ZDGR/f 55x3LUUmIms6TW/TgyNoJzGd+ljS7KXwIjmIfOfkIHgQ11mWDH1R21oxly+WiBMz +cgWLayH4UXY81lOTMECu/IwNL6rNm50re5XCe3AkK2mMw6JUTrF7lN1Rg6klU3K URu/ikL5pNTdk+VFTsZ9b0DajmjnNWWwg7TASxZSU6n/ocGuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw8ESesCDrESbLWvnaD8Cu0DqfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjRkNTEzMzctYzFjYS0z M2Q3LTkxNjAtNjc0MTY0OWU2ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAInxbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcM5Q9lYvoTxi2P14v/WKwnlQxdQjXSRgWwxLXYWXMM0D3/bDXICQ5Y /MnDcUBMbY4WMN05DxJM2733TyjaS3TZPAuBAEJVYqx1atI03yNIPZMWYioLQ/gj ubqMgyEIohCUoRut1RqiMmZXc4CLKFtLMNcGupP1Ze8n0HacPmgWjnu5uIv6f1Jy JgCb6WHyIm9BDBY/xMtjDriu1mfYyxIkrIFgtgZaBzGRT0Slf4LHaHFM4f8CI4gS srwUcPgezh9ku3fuOQpQ/dP7G37DkjbqxNoFLFSa6nHaDPlzm7gnlL6fNFFTB8NA BlKT+d5pOpz5KFPBEA6tHBJYADwlUOE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:34:09 2025 by rpki-client