$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df625e65-38b3-3ff1-b209-ce6eedff2ff7.roa File: df625e65-38b3-3ff1-b209-ce6eedff2ff7.roa (raw, json) Hash identifier: ECSXrXBhx86PlJEodGpDV7JRUwe8NzceY9NAp9kJgW0= Subject key identifier: 8E:82:6A:3A:36:FB:BE:18:2C:4A:F5:58:88:9C:48:14:DD:41:F1:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584894058FB5F7C181B1143E6860 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df625e65-38b3-3ff1-b209-ce6eedff2ff7.roa Signing time: Fri 17 Jan 2025 20:37:44 +0000 ROA not before: Fri 17 Jan 2025 20:37:44 +0000 ROA not after: Thu 17 Apr 2025 19:37:44 +0000 asID: 15169 IP address blocks: 34.2.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:05:8f:b5:f7:c1:81:b1:14:3e:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 17 20:37:44 2025 GMT Not After : Apr 17 19:37:44 2025 GMT Subject: CN=e721f286-b4ab-470a-ad5f-dd62e00c2964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:57:f2:2c:cb:57:b4:1c:7b:52:7d:84:3b: 7a:4a:89:06:3d:1c:7b:a8:c9:50:77:0d:c2:15:98: ba:4a:7d:67:e5:d6:bc:64:0f:ad:f9:68:04:71:93: 71:de:3b:4f:8c:62:ef:e6:17:ba:b1:f3:93:e8:b1: d0:ad:ca:a4:94:8c:d1:3e:4e:68:59:9c:34:f7:85: 43:45:f2:31:88:c5:d1:0b:4c:96:38:85:71:f2:97: 0a:3f:9f:80:65:69:af:40:d3:a0:30:e6:c4:a4:bd: 9a:58:c3:a6:a2:09:3b:5e:22:c4:c1:61:3f:05:bf: 1c:aa:0a:20:d5:ca:0b:20:53:c4:c6:80:10:a5:b4: b4:78:21:03:d0:ad:db:1c:6c:ea:4b:59:68:45:0d: 38:fc:11:68:12:84:c9:3e:eb:31:93:c7:1b:ed:02: ea:77:fa:a1:fe:19:d9:32:9c:1c:08:1f:ba:e1:a1: eb:3a:fb:9e:11:e6:8b:43:3e:02:ef:3a:46:5c:6f: 03:c5:97:d8:36:58:44:9e:33:75:c6:fc:b5:b8:1f: f3:38:3b:51:f9:06:eb:f8:c1:bf:c9:35:28:aa:ee: 03:db:22:5c:55:15:2d:d8:8c:fe:75:29:b0:cd:71: a4:43:66:f1:1a:b6:a3:c3:05:ec:f5:5b:90:42:e1: 98:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:82:6A:3A:36:FB:BE:18:2C:4A:F5:58:88:9C:48:14:DD:41:F1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df625e65-38b3-3ff1-b209-ce6eedff2ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:40:50:48:8e:41:65:68:4e:90:11:a1:f9:d8:00:3e:d7:09: 47:a8:fe:fb:d2:6f:1e:8d:6e:75:2b:2e:f1:60:d1:07:ef:67: ba:53:08:0f:94:48:07:48:a5:1b:7b:5d:91:b8:53:b4:4a:47: c0:bd:4c:ca:e2:8b:09:c7:78:0d:85:89:e3:e9:31:d2:0e:11: 4f:2a:69:33:5e:18:38:a5:6c:cb:d5:7a:f6:8a:3b:5f:9e:ee: fd:d0:01:bc:0b:58:da:01:0d:e6:aa:37:ec:32:27:a8:dc:53: f8:5f:0a:2f:1c:31:a1:a1:78:05:cd:96:57:7f:87:31:63:13: 45:69:bb:b9:85:a2:45:23:05:69:3d:49:49:ae:a4:08:53:0e: 6d:0f:0a:e1:97:c0:98:7f:90:1c:53:91:80:be:b5:b7:ce:1b: 87:e2:4e:24:f2:5b:93:b8:63:0c:61:7f:67:e1:68:18:3f:62: 4f:45:67:79:de:20:09:8b:2b:8b:20:82:82:65:74:67:0f:e1: 0a:a0:31:2b:28:f0:56:1a:bc:ce:7c:0f:22:3f:c6:ff:5c:a6: 60:3b:4b:d4:db:9c:ea:a9:36:f9:fa:9f:7b:46:4d:2a:b8:68: b7:32:fb:cc:5a:13:99:f7:6c:6a:45:87:52:aa:bf:69:ce:d8: e3:2b:3c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUBY+198GBsRQ+aGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDExNzIwMzc0NFoXDTI1MDQxNzE5Mzc0NFowLzEtMCsGA1UEAxMk ZTcyMWYyODYtYjRhYi00NzBhLWFkNWYtZGQ2MmUwMGMyOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAittX8izLV7Qce1J9hDt6SokGPRx7qMlQdw3C FZi6Sn1n5da8ZA+t+WgEcZNx3jtPjGLv5he6sfOT6LHQrcqklIzRPk5oWZw094VD RfIxiMXRC0yWOIVx8pcKP5+AZWmvQNOgMObEpL2aWMOmogk7XiLEwWE/Bb8cqgog 1coLIFPExoAQpbS0eCED0K3bHGzqS1loRQ04/BFoEoTJPusxk8cb7QLqd/qh/hnZ MpwcCB+64aHrOvueEeaLQz4C7zpGXG8DxZfYNlhEnjN1xvy1uB/zODtR+Qbr+MG/ yTUoqu4D2yJcVRUt2Iz+dSmwzXGkQ2bxGrajwwXs9VuQQuGYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6Cajo2+74YLEr1WIicSBTdQfEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGY2MjVlNjUtMzhiMy0z ZmYxLWIyMDktY2U2ZWVkZmYyZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpAUEiOQWVoTpARofnYAD7XCUeo/vvSbx6NbnUrLvFg0QfvZ7pTCA+U SAdIpRt7XZG4U7RKR8C9TMriiwnHeA2FiePpMdIOEU8qaTNeGDilbMvVevaKO1+e 7v3QAbwLWNoBDeaqN+wyJ6jcU/hfCi8cMaGheAXNlld/hzFjE0Vpu7mFokUjBWk9 SUmupAhTDm0PCuGXwJh/kBxTkYC+tbfOG4fiTiTyW5O4Ywxhf2fhaBg/Yk9FZ3ne IAmLK4sggoJldGcP4QqgMSso8FYavM58DyI/xv9cpmA7S9TbnOqpNvn6n3tGTSq4 aLcy+8xaE5n3bGpFh1Kqv2nO2OMrPM8= -----END CERTIFICATE-----Generated at Fri Apr 4 09:01:47 2025 by rpki-client