$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa File: 07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa (raw, json) Hash identifier: UhjpeiqDGokoK+kTtAyNRRB53EcpPYaCs9dnf3wvB0s= Subject key identifier: 83:23:54:BC:CC:C3:D9:0B:2A:B2:04:7C:43:E8:F5:67:20:6D:F3:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA6049085295389494380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.122.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a6:04:90:85:29:53:89:49:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a761f890-2b13-484a-904a-4d927cbe275b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:db:58:24:1c:e7:09:0b:15:06:62:1a:9e: cf:98:19:12:15:76:62:bd:c4:9f:0d:ce:68:62:cf: 48:d4:0b:8a:07:c3:18:6e:41:2c:33:c3:76:ea:aa: 3e:97:39:30:48:3c:49:79:6d:78:7e:4b:13:a5:42: 78:b2:2f:36:2c:11:22:98:b4:5f:2d:6c:35:a3:9f: b5:65:00:f7:21:53:bb:c9:cd:11:4f:37:aa:ee:73: ed:11:f3:fd:e6:90:db:65:22:a6:1f:5d:64:36:02: 1b:f0:33:f2:65:52:4d:83:31:c3:7d:25:68:50:57: b8:33:95:0f:46:8e:11:ee:94:64:2e:5f:fa:ef:b4: fe:a2:8d:c8:a2:ec:77:56:6a:42:5e:f9:69:55:96: 21:9e:5d:06:8c:f4:77:1d:3a:61:33:15:16:53:3e: 05:22:b2:be:87:33:fb:d1:ba:79:04:a8:6b:f4:f8: 19:a0:33:a7:66:bb:19:b7:d9:43:1f:a0:78:5f:28: 19:d4:d8:b0:d0:bc:ec:88:bb:cf:e9:c0:71:c0:65: 53:a1:08:b7:28:db:57:43:1a:7d:e0:c1:16:5b:c7: a0:a7:14:e5:b4:38:81:84:70:9e:ff:f4:8a:e8:8d: 9e:30:7f:1d:a5:83:6e:bc:7c:e2:e5:a9:c1:45:65: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:54:BC:CC:C3:D9:0B:2A:B2:04:7C:43:E8:F5:67:20:6D:F3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07ecf5bc-2ae7-3da1-bed4-7fedf5f4208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d7:fe:b1:4e:23:6c:52:68:aa:62:0e:c7:ba:73:96:4c:5b: 21:8c:d2:f2:a6:52:bd:35:f6:a5:2f:f4:0e:0d:f2:da:2f:d5: ca:23:a7:0d:b0:1c:b2:61:0a:61:58:8f:e1:99:bf:41:b3:75: 58:29:36:b0:17:b0:69:3f:8e:35:e3:47:cc:6e:25:ca:0f:42: d5:06:09:aa:98:f4:a1:e9:9b:67:26:1a:ca:69:7f:ff:24:85: fa:80:89:4b:0c:f3:fe:cb:33:15:01:43:82:33:df:cd:ab:a2: c3:00:be:65:ef:ce:37:0e:ce:be:55:0d:d0:44:f7:1e:19:c1: 75:52:75:e7:90:4b:5b:db:8b:aa:83:66:e1:49:1f:c2:f2:b6: f8:2c:f7:d8:2a:9f:4b:0d:03:7e:e6:ad:f6:c8:a2:98:79:37: 9b:c5:68:79:88:b7:e1:92:5d:4b:52:d8:31:ef:cc:de:d3:91: 0f:46:07:4f:0c:74:be:34:64:15:80:4b:af:4f:ee:2c:e9:b1: 52:3e:47:78:22:55:5c:5f:c1:ea:fd:b7:44:29:d0:83:2d:42: 38:3f:75:1f:b4:3b:97:ba:39:be:72:a6:33:d0:2d:dd:65:27: a7:ab:d6:b2:4c:c5:5a:6a:95:ec:f9:1c:70:e8:b2:f9:96:1d: 29:7e:27:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6YEkIUpU4lJQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTc2MWY4OTAtMmIxMy00ODRhLTkwNGEtNGQ5MjdjYmUyNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrfbWCQc5wkLFQZiGp7PmBkSFXZivcSfDc5o Ys9I1AuKB8MYbkEsM8N26qo+lzkwSDxJeW14fksTpUJ4si82LBEimLRfLWw1o5+1 ZQD3IVO7yc0RTzeq7nPtEfP95pDbZSKmH11kNgIb8DPyZVJNgzHDfSVoUFe4M5UP Ro4R7pRkLl/677T+oo3Ioux3VmpCXvlpVZYhnl0GjPR3HTphMxUWUz4FIrK+hzP7 0bp5BKhr9PgZoDOnZrsZt9lDH6B4XygZ1Niw0LzsiLvP6cBxwGVToQi3KNtXQxp9 4MEWW8egpxTltDiBhHCe//SK6I2eMH8dpYNuvHzi5anBRWUB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMjVLzMw9kLKrIEfEPo9WcgbfP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDdlY2Y1YmMtMmFlNy0z ZGExLWJlZDQtN2ZlZGY1ZjQyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjX/rFOI2xSaKpiDse6c5ZMWyGM0vKmUr019qUv9A4N8tov1cojpw2w HLJhCmFYj+GZv0GzdVgpNrAXsGk/jjXjR8xuJcoPQtUGCaqY9KHpm2cmGsppf/8k hfqAiUsM8/7LMxUBQ4Iz382rosMAvmXvzjcOzr5VDdBE9x4ZwXVSdeeQS1vbi6qD ZuFJH8Lytvgs99gqn0sNA37mrfbIoph5N5vFaHmIt+GSXUtS2DHvzN7TkQ9GB08M dL40ZBWAS69P7izpsVI+R3giVVxfwer9t0Qp0IMtQjg/dR+0O5e6Ob5ypjPQLd1l J6er1rJMxVpqlez5HHDosvmWHSl+J6E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:30 2025 by rpki-client