$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fe9ecd4e-7ba9-34bf-9069-51f4dd2a79b4.roa File: fe9ecd4e-7ba9-34bf-9069-51f4dd2a79b4.roa (raw, json) Hash identifier: fDdnoeLycaj0cdgL5cR/kEb9uPFs21/rZmPusf8uzGQ= Subject key identifier: 0C:7A:D4:57:6B:46:9D:76:D4:4F:5F:F3:55:85:F6:FB:39:55:3E:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5817A2DC38D43F1868FC900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fe9ecd4e-7ba9-34bf-9069-51f4dd2a79b4.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 19527 IP address blocks: 34.0.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7a:2d:c3:8d:43:f1:86:8f:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=84b4cf9b-fdc3-4fec-a9dd-c548fafc5457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:4d:16:a7:e0:75:65:46:1a:7e:44:e5:6a: 24:75:2f:d8:c4:6d:ad:81:93:96:c5:66:af:c3:43: 76:50:9d:08:a4:58:c9:f1:11:29:2e:85:42:ee:94: e2:a0:1a:87:70:3c:76:83:db:f1:ce:d7:6a:6b:8f: c5:ad:2d:7f:1a:22:43:19:58:2e:98:5f:dd:7e:6c: 74:fb:39:f2:02:fe:8d:97:08:3e:40:00:99:be:81: f2:47:37:04:da:83:6d:73:7d:82:7c:4d:0c:ed:33: 3b:ce:1f:9f:e0:04:74:22:03:9f:0e:26:5a:c4:7d: b0:44:67:f7:03:7b:15:43:c8:89:a6:ab:76:91:e0: b7:1a:45:5f:46:b9:43:cd:d1:e1:f8:84:24:61:99: 53:8d:41:04:82:65:a8:26:96:91:35:0d:fb:2e:51: ac:cd:c1:ee:45:41:6c:1a:e9:df:92:f3:31:5a:b9: 12:c2:26:ab:dc:86:25:94:18:6b:df:5a:f6:3e:05: 22:72:11:d6:ab:02:3a:6c:66:bc:b7:07:3f:ea:b6: 53:ba:98:0b:0b:3b:6e:af:66:00:c6:b9:8e:59:a3: bf:45:42:d6:d1:b8:7b:1e:8e:1a:47:0e:06:90:9c: 73:93:1a:42:4d:32:1a:d4:ee:0f:43:85:e7:5e:18: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7A:D4:57:6B:46:9D:76:D4:4F:5F:F3:55:85:F6:FB:39:55:3E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fe9ecd4e-7ba9-34bf-9069-51f4dd2a79b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.0.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:21:37:e0:4c:d5:6d:d9:6d:63:74:7a:66:e6:61:c7:6a:04: 1a:7e:92:69:1f:5c:5a:d0:86:d0:48:ac:3e:db:49:4c:d2:b6: 5a:01:e0:93:eb:3e:51:60:4f:b1:55:c1:be:6e:5e:46:47:32: 28:7a:21:5f:a4:f9:bc:78:c7:43:28:6c:6e:35:36:f8:ef:1b: e2:e6:24:27:ba:94:bd:2b:26:ac:c0:fc:cb:bc:ab:8f:8f:75: fb:fc:f0:fe:1f:46:48:cf:36:8e:08:fc:d9:79:f5:d0:01:09: 74:84:58:77:97:56:8a:a4:16:20:2c:b1:ad:00:71:ca:74:e3: ee:49:0f:ec:ea:ed:c8:3d:31:f5:eb:c0:97:25:df:d9:e7:18: 2e:b6:2f:d8:89:29:80:bb:8e:79:90:db:1a:1c:b9:50:39:53: c7:28:83:a0:da:58:32:63:ad:e1:40:b5:df:b5:1b:4c:db:6f: b4:22:61:96:07:57:03:21:13:d5:bd:d2:6f:e8:76:90:4e:b4: a2:cf:b1:41:81:e9:29:d0:cb:93:4f:51:a9:63:2e:ee:d2:9e: 47:d3:81:1c:50:4b:30:c9:41:ac:ba:72:61:7f:7a:02:7a:1f: f9:25:b0:d5:96:aa:65:8b:ea:43:c4:87:de:58:6c:10:80:01: 88:96:51:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXotw41D8YaPyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODRiNGNmOWItZmRjMy00ZmVjLWE5ZGQtYzU0OGZhZmM1NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkhNFqfgdWVGGn5E5WokdS/YxG2tgZOWxWav w0N2UJ0IpFjJ8REpLoVC7pTioBqHcDx2g9vxztdqa4/FrS1/GiJDGVgumF/dfmx0 +znyAv6Nlwg+QACZvoHyRzcE2oNtc32CfE0M7TM7zh+f4AR0IgOfDiZaxH2wRGf3 A3sVQ8iJpqt2keC3GkVfRrlDzdHh+IQkYZlTjUEEgmWoJpaRNQ37LlGszcHuRUFs GunfkvMxWrkSwiar3IYllBhr31r2PgUichHWqwI6bGa8twc/6rZTupgLCztur2YA xrmOWaO/RULW0bh7Ho4aRw4GkJxzkxpCTTIa1O4PQ4XnXhhqFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx61FdrRp121E9f81WF9vs5VT52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmU5ZWNkNGUtN2JhOS0z NGJmLTkwNjktNTFmNGRkMmE3OWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIgCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMhN+BM1W3ZbWN0embmYcdqBBp+kmkfXFrQhtBIrD7bSUzStloB4JPr PlFgT7FVwb5uXkZHMih6IV+k+bx4x0MobG41NvjvG+LmJCe6lL0rJqzA/Mu8q4+P dfv88P4fRkjPNo4I/Nl59dABCXSEWHeXVoqkFiAssa0Accp04+5JD+zq7cg9MfXr wJcl39nnGC62L9iJKYC7jnmQ2xocuVA5U8cog6DaWDJjreFAtd+1G0zbb7QiYZYH VwMhE9W90m/odpBOtKLPsUGB6SnQy5NPUaljLu7SnkfTgRxQSzDJQay6cmF/egJ6 H/klsNWWqmWL6kPEh95YbBCAAYiWUUY= -----END CERTIFICATE-----Generated at Fri Apr 4 08:50:03 2025 by rpki-client