$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5ab17e3-12c6-34ca-a7b3-ebc08cf14cf9.roa File: c5ab17e3-12c6-34ca-a7b3-ebc08cf14cf9.roa (raw, json) Hash identifier: mdu+gtgTmGd871v3yI+gcvlYTY/rwZk8aPaWVyAGgGk= Subject key identifier: 35:43:1B:3F:D4:8C:80:06:A6:44:48:7E:13:17:83:2C:90:00:36:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848FE1C322EBA993E23059AD5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5ab17e3-12c6-34ca-a7b3-ebc08cf14cf9.roa Signing time: Mon 24 Feb 2025 20:39:01 +0000 ROA not before: Mon 24 Feb 2025 20:39:01 +0000 ROA not after: Sun 25 May 2025 19:39:01 +0000 asID: 396982 IP address blocks: 34.3.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:1c:32:2e:ba:99:3e:23:05:9a:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 24 20:39:01 2025 GMT Not After : May 25 19:39:01 2025 GMT Subject: CN=6c849405-bd38-4999-b7d0-d0db818dbfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:9c:90:23:2f:6d:3d:ca:56:0d:f8:e8:3d: 5e:69:7e:b9:b2:c9:89:2d:0c:d0:94:da:c9:ac:fe: 57:fa:3b:2d:c0:a9:1f:0f:4d:f3:38:25:ce:27:df: 3a:0a:3a:18:a8:ac:f1:48:fc:ef:49:26:ad:2a:fb: be:77:61:c9:48:b9:64:3d:f9:84:a3:4a:47:43:c9: 2c:26:23:73:81:9c:85:ab:1a:3c:6a:05:54:22:8d: ca:a3:aa:bc:50:61:1d:93:c5:93:ea:90:43:d0:c1: f5:2a:ca:ab:e5:51:41:38:d4:fd:52:6b:21:a5:ca: 21:08:35:55:16:89:18:e8:77:47:97:43:6c:c1:89: 0a:d7:df:95:95:47:57:2d:64:53:51:9d:d7:4b:50: e3:4c:91:95:8c:d5:33:7a:3c:68:38:f5:36:a6:47: 41:d0:f4:6c:75:34:ef:9f:bf:c3:2b:bc:79:81:a0: 5f:4e:5c:a8:5a:6a:a4:de:6b:a0:f3:aa:67:bc:8b: 9e:80:10:5c:d6:30:ea:73:26:27:c5:3b:c8:d5:9e: ce:35:85:c7:9a:b4:ff:39:cd:a3:c7:68:d4:a0:65: b2:83:4b:72:f4:4e:64:6f:63:d2:43:72:bd:ea:6e: 6b:d4:43:01:8a:6c:53:db:79:ae:09:7b:e7:f6:c1: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:43:1B:3F:D4:8C:80:06:A6:44:48:7E:13:17:83:2C:90:00:36:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5ab17e3-12c6-34ca-a7b3-ebc08cf14cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:66:db:12:14:e1:8e:2b:ef:5f:9a:fe:78:67:96:f2:6a:b0: 90:d9:dd:8d:25:05:f4:3f:eb:1f:e8:85:55:70:8c:72:6e:99: 03:4e:65:00:fe:5c:68:14:d0:1e:fe:d6:55:a0:14:dc:0e:37: cf:c7:1e:19:4c:53:de:57:c2:9c:b6:24:b0:4c:6d:1e:99:55: a1:58:16:3b:07:ed:f9:79:ef:f8:6d:f3:48:28:32:8a:0f:1b: 39:63:f0:76:26:ea:2c:85:36:fb:59:53:86:00:78:99:72:a4: 27:69:5c:85:9e:44:56:73:ca:46:aa:71:6c:23:83:00:94:8b: 48:da:8c:c6:12:da:d6:94:01:aa:28:78:f2:56:65:ba:82:ea: 53:e7:3a:03:76:d7:a5:5f:30:7d:2a:66:42:d9:ec:79:68:38: be:81:7e:29:d4:6a:2f:4f:a5:75:a3:d0:bf:00:cb:7d:5c:f8: 01:59:97:87:cd:3b:2b:d7:81:21:21:82:3f:a9:fc:49:e8:b5: 3f:3c:63:80:b1:1a:fd:e6:18:8c:76:fa:81:f9:d5:db:85:40: 29:b3:ea:da:1f:77:b9:12:9a:af:27:ba:77:d3:1a:65:15:aa: 99:b3:4d:c8:0b:d6:86:1d:96:9c:20:ea:48:82:d2:78:18:bc: f8:7e:0f:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+HDIuupk+IwWa1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIyNDIwMzkwMVoXDTI1MDUyNTE5MzkwMVowLzEtMCsGA1UEAxMk NmM4NDk0MDUtYmQzOC00OTk5LWI3ZDAtZDBkYjgxOGRiZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluOckCMvbT3KVg346D1eaX65ssmJLQzQlNrJ rP5X+jstwKkfD03zOCXOJ986CjoYqKzxSPzvSSatKvu+d2HJSLlkPfmEo0pHQ8ks JiNzgZyFqxo8agVUIo3Ko6q8UGEdk8WT6pBD0MH1Ksqr5VFBONT9UmshpcohCDVV FokY6HdHl0NswYkK19+VlUdXLWRTUZ3XS1DjTJGVjNUzejxoOPU2pkdB0PRsdTTv n7/DK7x5gaBfTlyoWmqk3mug86pnvIuegBBc1jDqcyYnxTvI1Z7ONYXHmrT/Oc2j x2jUoGWyg0ty9E5kb2PSQ3K96m5r1EMBimxT23muCXvn9sEIcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVDGz/UjIAGpkRIfhMXgyyQADbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzVhYjE3ZTMtMTJjNi0z NGNhLWE3YjMtZWJjMDhjZjE0Y2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVm2xIU4Y4r71+a/nhnlvJqsJDZ3Y0lBfQ/6x/ohVVwjHJumQNOZQD+ XGgU0B7+1lWgFNwON8/HHhlMU95Xwpy2JLBMbR6ZVaFYFjsH7fl57/ht80goMooP Gzlj8HYm6iyFNvtZU4YAeJlypCdpXIWeRFZzykaqcWwjgwCUi0jajMYS2taUAaoo ePJWZbqC6lPnOgN216VfMH0qZkLZ7HloOL6BfinUai9PpXWj0L8Ay31c+AFZl4fN OyvXgSEhgj+p/EnotT88Y4CxGv3mGIx2+oH51duFQCmz6tofd7kSmq8nunfTGmUV qpmzTcgL1oYdlpwg6kiC0ngYvPh+DxI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:22 2025 by rpki-client