$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2ff6167-a95b-33a8-b47d-a51574a6c209.roa File: c2ff6167-a95b-33a8-b47d-a51574a6c209.roa (raw, json) Hash identifier: Sr5aK9Fd20J9jur2oQo5GzaO26Ng95A3KHhQBrG5i50= Subject key identifier: 67:32:72:64:8A:6E:51:F5:20:1D:1B:53:21:3C:2E:06:03:3E:21:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582117D0B5F18F6A66D8F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2ff6167-a95b-33a8-b47d-a51574a6c209.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 19527 IP address blocks: 34.1.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:11:7d:0b:5f:18:f6:a6:6d:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2f7dfa14-686c-4611-a53d-ee6a35926bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3e:20:a7:41:72:f6:95:f7:6d:de:fe:35:23: 48:72:16:9d:02:7d:d8:4a:8a:a5:80:4c:9b:8e:65: 4a:1c:41:bb:6b:cf:d2:44:6d:80:48:77:9d:f1:3f: 6c:35:33:9f:35:34:3b:f4:96:8e:c6:a8:48:94:63: bb:86:9d:22:96:06:2b:d4:0d:58:e1:d7:78:63:64: 8c:2f:32:a8:3c:dd:23:47:dd:f0:e4:28:a8:3c:95: da:f3:72:ef:33:2e:00:03:60:b9:07:5a:53:9d:3d: 87:e3:71:4a:de:3b:72:f0:81:5b:50:d1:b6:d2:b1: d3:d0:35:f5:3a:48:68:81:6a:81:5a:05:59:84:7a: e1:fe:9c:ac:08:09:fc:02:11:be:bd:c4:ca:9d:01: 2e:20:76:e8:4f:6e:04:21:9a:3d:99:d4:ee:d6:0d: 95:fa:50:85:0d:a1:31:ff:1a:94:7f:6f:c1:27:df: a0:c2:57:25:94:61:61:fa:b6:a4:44:9b:dd:60:60: ae:22:4b:d8:c1:da:44:ad:b9:0b:35:35:28:95:16: ec:ba:18:7f:43:27:18:ae:a2:a7:8b:c3:0d:5f:bf: 50:b6:93:a2:b3:b4:b2:cf:5b:33:ea:2c:e9:df:02: 83:0d:7a:6d:e4:06:a5:f1:f5:7c:4c:ba:32:75:b8: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:32:72:64:8A:6E:51:F5:20:1D:1B:53:21:3C:2E:06:03:3E:21:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c2ff6167-a95b-33a8-b47d-a51574a6c209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8f:c9:7f:47:a1:f3:45:05:b3:ee:d7:b3:26:45:4f:f3:40: e4:be:59:7d:d5:a4:b3:76:fe:44:e7:73:ab:5e:52:cb:bc:d4: 79:3b:bc:6d:8e:a4:f9:68:b5:94:44:96:73:ea:5f:13:69:85: ca:ed:10:87:a3:50:f7:45:2e:1d:9f:97:6a:f7:30:9c:8e:67: 2b:f5:58:91:99:fd:59:3d:dd:61:34:91:a8:09:a6:ca:13:82: 1c:d8:a2:14:96:fd:89:81:f7:de:aa:68:91:38:02:08:5e:90: 4c:26:1a:43:e8:14:35:6e:29:60:81:9f:1f:97:df:87:c4:01: 1e:86:3e:87:79:c3:d9:37:5f:b4:14:71:4a:fc:52:0f:af:13: fa:d4:a1:39:0b:4c:d0:79:71:4f:d6:80:e5:a9:42:41:6f:83: d2:db:41:a6:99:d0:30:c2:11:03:ad:49:79:1c:81:48:96:1c: a4:86:2a:05:01:51:00:b7:2b:f8:db:24:7b:f1:a9:1e:11:d8: 9d:ae:bc:80:f9:8a:16:c2:51:32:31:7f:4b:0f:fb:47:bc:43: 3b:bd:e2:2f:b2:96:92:cb:8e:59:12:a9:7e:20:a8:4a:10:0c: ed:4e:52:5f:a2:de:e7:25:39:b9:51:c6:cd:43:79:aa:64:c9: c4:5a:76:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghF9C18Y9qZtjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmY3ZGZhMTQtNjg2Yy00NjExLWE1M2QtZWU2YTM1OTI2YmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz4gp0Fy9pX3bd7+NSNIchadAn3YSoqlgEyb jmVKHEG7a8/SRG2ASHed8T9sNTOfNTQ79JaOxqhIlGO7hp0ilgYr1A1Y4dd4Y2SM LzKoPN0jR93w5CioPJXa83LvMy4AA2C5B1pTnT2H43FK3jty8IFbUNG20rHT0DX1 OkhogWqBWgVZhHrh/pysCAn8AhG+vcTKnQEuIHboT24EIZo9mdTu1g2V+lCFDaEx /xqUf2/BJ9+gwlcllGFh+rakRJvdYGCuIkvYwdpErbkLNTUolRbsuhh/QycYrqKn i8MNX79QtpOis7Syz1sz6izp3wKDDXpt5Aal8fV8TLoydbjAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcycmSKblH1IB0bUyE8LgYDPiGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzJmZjYxNjctYTk1Yi0z M2E4LWI0N2QtYTUxNTc0YTZjMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGPyX9HofNFBbPu17MmRU/zQOS+WX3VpLN2/kTnc6teUsu81Hk7vG2O pPlotZRElnPqXxNphcrtEIejUPdFLh2fl2r3MJyOZyv1WJGZ/Vk93WE0kagJpsoT ghzYohSW/YmB996qaJE4AghekEwmGkPoFDVuKWCBnx+X34fEAR6GPod5w9k3X7QU cUr8Ug+vE/rUoTkLTNB5cU/WgOWpQkFvg9LbQaaZ0DDCEQOtSXkcgUiWHKSGKgUB UQC3K/jbJHvxqR4R2J2uvID5ihbCUTIxf0sP+0e8Qzu94i+ylpLLjlkSqX4gqEoQ DO1OUl+i3uclOblRxs1DeapkycRadp4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:07 2025 by rpki-client