$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ee02c5-f30a-362c-a386-77eec6c36215.roa File: 01ee02c5-f30a-362c-a386-77eec6c36215.roa (raw, json) Hash identifier: zQX9X3D0iFpmDR1y/2YpjDczk+BO5QO18ylhinnzfjE= Subject key identifier: 56:97:E6:89:77:67:C0:EA:AB:02:C2:9C:2E:BE:99:EF:BE:D5:3F:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDFA3277E3C77A33DE140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ee02c5-f30a-362c-a386-77eec6c36215.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.131.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:df:a3:27:7e:3c:77:a3:3d:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=cdd9cb2c-4b4a-486f-ba9d-d7521a4354ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:80:c4:19:68:56:ce:91:ff:72:dd:b9:8e: 97:78:78:f7:b4:ac:ae:b8:69:d2:cc:05:03:14:b9: 7c:27:ad:ed:e7:b4:5f:25:62:7e:50:ff:9c:b7:18: 09:8f:80:65:b1:43:0e:5b:61:a5:75:0e:88:b9:f0: e6:24:f7:e7:05:3f:0d:5b:af:24:2e:4c:02:fc:5c: 4c:bd:6b:2c:a4:3c:ae:d5:63:7d:76:61:50:ba:d5: 5f:2c:c8:2e:37:f9:70:cc:e8:75:a4:1a:e2:77:57: 64:4b:0c:f3:38:be:cd:39:d4:04:37:45:da:b2:3f: 2f:07:9b:2c:4e:bc:c5:2c:66:2d:53:f9:50:54:28: 28:85:cc:12:cc:32:2d:bb:16:a5:ef:65:83:7d:f1: c1:b4:2d:79:e3:2a:4e:28:9d:5f:44:85:ba:96:a2: f7:c4:21:bf:1c:bc:6a:dc:b8:9a:57:fb:47:4f:57: d9:62:99:3e:db:01:e1:7c:cb:48:65:8f:37:9c:1c: 88:74:08:16:15:d4:73:eb:66:a3:44:fc:a3:3d:f9: 66:3c:09:68:3d:14:68:6a:91:81:c6:85:e3:8f:00: 12:93:5c:e3:2d:37:26:62:3c:d2:e1:a5:76:a7:15: e8:56:4d:66:91:ba:43:4b:f5:51:a9:0c:df:87:59: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:97:E6:89:77:67:C0:EA:AB:02:C2:9C:2E:BE:99:EF:BE:D5:3F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/01ee02c5-f30a-362c-a386-77eec6c36215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9e:d0:3a:53:b7:8a:1e:bf:5d:73:49:37:11:18:7d:40:d3: d0:54:e6:fe:aa:ea:b6:cc:fc:80:3d:92:90:c9:1a:7f:48:ad: 88:66:2f:54:95:37:d2:9e:69:27:60:f5:23:4a:50:dd:25:04: 0d:a9:03:06:6d:0a:ac:52:24:12:f3:d6:49:10:5c:67:ed:b2: 1e:9e:d5:67:f4:4f:7c:76:63:36:74:65:03:48:4a:38:82:2f: 0e:5f:c0:8e:02:14:cf:9f:43:cf:52:5f:69:74:2d:31:5a:e4: b3:c3:41:20:3f:a5:66:d4:d9:13:02:89:fc:f5:28:48:f2:0b: bf:de:8f:a2:80:b5:16:0e:73:7a:11:f6:fd:90:cb:fb:e7:57: 2c:16:b5:54:a9:fc:95:60:22:4a:a3:e6:88:0c:6d:28:d6:07: 43:28:ab:5d:c1:e2:84:60:c6:4e:82:74:39:2d:bc:27:4d:75: 69:99:23:2e:bc:96:9f:c1:5a:5d:6c:05:d2:3c:48:a2:ab:0c: b3:ab:46:b4:be:ee:a4:dc:2f:00:1a:14:54:da:c0:03:be:c5: 65:e1:5b:52:a9:53:8d:56:b9:21:46:2f:b6:23:b5:0b:cc:bb: 91:be:c9:69:3e:14:13:5c:50:e3:ff:d7:b4:95:d0:79:4b:fa: fa:21:c7:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9+jJ348d6M94UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2RkOWNiMmMtNGI0YS00ODZmLWJhOWQtZDc1MjFhNDM1NGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3uAxBloVs6R/3LduY6XeHj3tKyuuGnSzAUD FLl8J63t57RfJWJ+UP+ctxgJj4BlsUMOW2GldQ6IufDmJPfnBT8NW68kLkwC/FxM vWsspDyu1WN9dmFQutVfLMguN/lwzOh1pBrid1dkSwzzOL7NOdQEN0Xasj8vB5ss TrzFLGYtU/lQVCgohcwSzDItuxal72WDffHBtC154ypOKJ1fRIW6lqL3xCG/HLxq 3LiaV/tHT1fZYpk+2wHhfMtIZY83nByIdAgWFdRz62ajRPyjPflmPAloPRRoapGB xoXjjwASk1zjLTcmYjzS4aV2pxXoVk1mkbpDS/VRqQzfh1mrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaX5ol3Z8DqqwLCnC6+me++1T/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDFlZTAyYzUtZjMwYS0z NjJjLWEzODYtNzdlZWM2YzM2MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACee0DpTt4oev11zSTcRGH1A09BU5v6q6rbM/IA9kpDJGn9IrYhmL1SV N9KeaSdg9SNKUN0lBA2pAwZtCqxSJBLz1kkQXGftsh6e1Wf0T3x2YzZ0ZQNISjiC Lw5fwI4CFM+fQ89SX2l0LTFa5LPDQSA/pWbU2RMCifz1KEjyC7/ej6KAtRYOc3oR 9v2Qy/vnVywWtVSp/JVgIkqj5ogMbSjWB0Moq13B4oRgxk6CdDktvCdNdWmZIy68 lp/BWl1sBdI8SKKrDLOrRrS+7qTcLwAaFFTawAO+xWXhW1KpU41WuSFGL7YjtQvM u5G+yWk+FBNcUOP/17SV0HlL+vohxyk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:21 2025 by rpki-client