$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa File: cf7a6722-c795-3b59-a299-e24c3c2e9875.roa (raw, json) Hash identifier: 4UTGnfY3xTz1ZCIUvK+EvuyoBLvvHNROKujqK9tuNzg= Subject key identifier: C5:03:1E:69:7B:85:22:BA:BD:A6:A1:06:24:B6:A3:A8:0C:DF:0A:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58226734D89BDD125E31400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 34.0.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:26:73:4d:89:bd:d1:25:e3:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6362e5fd-9973-4f9d-9dae-b63640376222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:62:87:06:62:36:b9:d8:d4:bd:45:f3:8e: 16:1e:4d:09:3b:81:54:9d:a2:9b:eb:d4:42:e0:5d: 8b:e6:5a:bc:d2:b4:4d:a0:2f:50:75:15:81:d8:eb: 46:d2:14:a3:03:19:c2:b1:f2:ab:ff:b1:c2:57:61: 6b:33:1a:d4:27:62:e3:3f:a2:ca:43:63:2a:e2:3c: 65:a0:6a:8b:e3:1a:70:f2:18:53:d6:bf:ec:a1:a9: cb:58:e8:6b:fa:27:07:2b:56:18:05:93:23:1b:03: da:8a:21:47:fd:56:8b:07:cd:bb:21:6a:a4:70:13: 4b:75:41:ee:e3:e1:e7:42:63:c6:46:f7:e8:3d:8b: 1f:17:c0:06:f5:ca:17:b1:48:e7:09:69:7d:a4:dc: 14:1c:28:10:cb:79:5b:4c:34:d7:64:7c:0a:87:8a: 91:d1:05:b7:7d:6d:83:97:0c:0e:d3:9d:93:72:c0: 0e:0f:91:85:ce:8b:93:b5:1a:6f:67:77:3c:dd:6e: 2a:63:28:c0:6e:c9:24:6a:e1:61:5f:df:f8:6f:ed: f7:fc:35:de:22:7a:7e:26:03:6c:d0:37:df:ba:90: 38:64:0f:b2:4a:05:70:5a:1b:4a:bf:76:1b:ac:0f: 8d:50:93:9a:db:b9:77:c4:1f:a3:b3:0a:47:6b:3e: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:03:1E:69:7B:85:22:BA:BD:A6:A1:06:24:B6:A3:A8:0C:DF:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf7a6722-c795-3b59-a299-e24c3c2e9875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:44:e1:3a:5c:49:30:41:25:ac:cc:a7:02:05:43:57:67:61: 40:95:af:23:5e:0d:fd:28:df:ea:c0:47:35:44:8d:0e:67:cf: 89:02:ff:a0:95:b2:da:f8:88:54:1a:bf:00:04:6d:b4:9e:dc: 8e:e7:a0:06:7c:fb:09:1d:5c:ac:10:42:7a:a2:11:4e:74:a3: 31:b1:2b:fc:12:64:f8:1b:55:81:1b:9c:ec:85:36:af:ad:bb: 73:8a:5a:93:dd:51:8d:ec:04:f2:3e:5a:fe:7d:c4:eb:de:1c: 11:a0:b3:45:d3:d0:49:53:08:89:6b:11:0c:c4:4c:01:d5:01: 5e:33:4f:f6:36:0c:da:04:46:52:af:dc:75:d1:b5:81:0b:f7: 0b:e4:f1:2c:06:c7:5b:4e:89:1d:7c:ee:4b:d6:ab:a0:36:1c: 50:7c:e5:b7:d2:1d:e3:53:19:95:77:c5:fb:39:85:06:1a:a7: 31:7d:8b:7b:98:5a:c2:6d:8f:41:54:3b:52:49:27:0a:47:66: ed:ff:60:97:72:74:b3:aa:f9:ac:f5:3e:68:47:23:ba:04:b1: 2c:bd:3b:5a:64:58:78:b8:2f:2e:9e:d5:ba:95:75:87:7e:7a: ed:39:b0:c6:c7:7b:38:df:a2:b8:58:c9:59:31:6f:46:9c:a8: b9:61:dd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiZzTYm90SXjFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjM2MmU1ZmQtOTk3My00ZjlkLTlkYWUtYjYzNjQwMzc2MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9ZihwZiNrnY1L1F844WHk0JO4FUnaKb69RC 4F2L5lq80rRNoC9QdRWB2OtG0hSjAxnCsfKr/7HCV2FrMxrUJ2LjP6LKQ2Mq4jxl oGqL4xpw8hhT1r/soanLWOhr+icHK1YYBZMjGwPaiiFH/VaLB827IWqkcBNLdUHu 4+HnQmPGRvfoPYsfF8AG9coXsUjnCWl9pNwUHCgQy3lbTDTXZHwKh4qR0QW3fW2D lwwO052TcsAOD5GFzouTtRpvZ3c83W4qYyjAbskkauFhX9/4b+33/DXeInp+JgNs 0DffupA4ZA+ySgVwWhtKv3YbrA+NUJOa27l3xB+jswpHaz4F5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUDHml7hSK6vaahBiS2o6gM3wrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2Y3YTY3MjItYzc5NS0z YjU5LWEyOTktZTI0YzNjMmU5ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVE4TpcSTBBJazMpwIFQ1dnYUCVryNeDf0o3+rARzVEjQ5nz4kC/6CV str4iFQavwAEbbSe3I7noAZ8+wkdXKwQQnqiEU50ozGxK/wSZPgbVYEbnOyFNq+t u3OKWpPdUY3sBPI+Wv59xOveHBGgs0XT0ElTCIlrEQzETAHVAV4zT/Y2DNoERlKv 3HXRtYEL9wvk8SwGx1tOiR187kvWq6A2HFB85bfSHeNTGZV3xfs5hQYapzF9i3uY WsJtj0FUO1JJJwpHZu3/YJdydLOq+az1PmhHI7oEsSy9O1pkWHi4Ly6e1bqVdYd+ eu05sMbHezjforhYyVkxb0acqLlh3bw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:04:06 2025 by rpki-client