$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa File: 0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa (raw, json) Hash identifier: YD3yPt6Jyh9jDYF5xn/Gn9hN/HNahtukBeiCc8Db2F4= Subject key identifier: FE:16:9C:B6:02:B6:8D:FF:45:67:F9:E8:02:0F:4B:8E:AF:13:26:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C03B1814567C1E6CE33C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:03:b1:81:45:67:c1:e6:ce:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=71c62b26-7206-42bc-ab28-4da7996bb152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:88:5d:3a:a6:f2:b8:fe:cc:10:53:e6:aa: d3:cf:7c:10:7e:dc:f5:33:e0:94:e1:f7:2e:13:88: 88:3e:00:c2:fe:55:03:f4:5b:b1:e7:d0:3c:69:c5: e6:31:6d:08:46:65:d3:f6:c9:32:90:c6:a5:b7:f9: 33:9f:8f:66:b5:71:b8:0c:f0:78:f8:98:59:d3:1e: b3:3d:45:86:70:71:46:70:f7:69:3c:e4:8c:77:21: 1e:5a:7e:40:3a:9a:99:90:cd:d4:ae:46:99:51:74: 9a:4a:ab:3e:1d:60:f3:d6:0a:4a:1e:81:47:89:47: 64:8e:46:1b:82:9c:6a:94:a6:f3:c8:dd:23:e0:ad: d8:0e:81:38:08:41:d4:14:ac:a3:d3:54:ef:06:aa: 5a:3a:e6:c8:4a:50:46:23:a9:64:73:3b:7d:56:e0: b5:08:a2:b4:d2:23:74:f4:f0:e9:93:21:59:fd:6f: 3c:59:5f:9a:4f:95:fd:23:d7:ec:86:2e:fd:bc:a1: 56:c4:6f:fd:78:f6:8c:3b:a7:0b:bf:39:b4:b8:69: 24:22:f9:a3:db:fd:cf:cd:ef:37:26:f6:bd:8b:43: 75:4b:4e:42:ee:43:d0:40:92:a6:a9:24:a3:00:dc: b9:d4:63:b5:cf:c9:11:1c:93:27:f2:9c:82:6c:b7: 49:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:16:9C:B6:02:B6:8D:FF:45:67:F9:E8:02:0F:4B:8E:AF:13:26:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a3bf4aa-d2d6-3e8d-9a6f-ddc205e5d02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d2:9b:47:e6:84:25:81:e9:82:3d:a3:34:52:47:98:51:87: a0:30:ec:3a:18:64:b2:c3:ea:e0:df:bc:03:b5:c3:3f:9e:03: 4b:0f:10:3e:6d:2f:f3:13:d9:fc:73:8e:32:68:2b:52:05:3d: d9:3b:c3:f0:25:45:2e:b6:89:41:b9:a8:c5:87:f3:21:87:60: 97:28:2a:63:4f:7a:f4:5d:40:46:04:73:7c:b5:3f:46:8c:4c: fb:16:25:3e:82:9c:34:fe:0b:b9:62:1e:26:a9:93:4c:95:26: 05:28:3b:f3:0e:c7:fe:56:63:7a:09:ba:eb:6f:42:4d:6a:e1: bc:39:45:02:ab:47:e8:16:f5:6f:d5:00:eb:10:31:83:98:ab: a3:3e:db:e7:1e:09:2f:80:e5:29:9a:e8:22:51:cf:a4:26:16: 37:7d:5b:f9:2a:ba:4e:9b:d5:11:2b:2b:22:8c:75:62:56:7a: ae:54:d5:af:cd:b8:80:2f:cb:c1:ea:6f:6b:ca:f9:17:c8:72: 3b:95:ad:5e:86:8b:9a:0e:4e:f7:15:57:46:7b:dc:9f:61:f6: d8:dc:7f:55:b9:f1:9b:eb:d9:23:35:d5:4c:5c:20:8b:fe:17: 89:8a:28:71:36:b3:d8:6c:22:d5:d1:72:1c:b4:15:93:d5:c1: bf:80:16:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAOxgUVnwebOM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzFjNjJiMjYtNzIwNi00MmJjLWFiMjgtNGRhNzk5NmJiMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL2IXTqm8rj+zBBT5qrTz3wQftz1M+CU4fcu E4iIPgDC/lUD9Fux59A8acXmMW0IRmXT9skykMalt/kzn49mtXG4DPB4+JhZ0x6z PUWGcHFGcPdpPOSMdyEeWn5AOpqZkM3UrkaZUXSaSqs+HWDz1gpKHoFHiUdkjkYb gpxqlKbzyN0j4K3YDoE4CEHUFKyj01TvBqpaOubISlBGI6lkczt9VuC1CKK00iN0 9PDpkyFZ/W88WV+aT5X9I9fshi79vKFWxG/9ePaMO6cLvzm0uGkkIvmj2/3Pze83 Jva9i0N1S05C7kPQQJKmqSSjANy51GO1z8kRHJMn8pyCbLdJiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4WnLYCto3/RWf56AIPS46vEyZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGEzYmY0YWEtZDJkNi0z ZThkLTlhNmYtZGRjMjA1ZTVkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIorAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrSm0fmhCWB6YI9ozRSR5hRh6Aw7DoYZLLD6uDfvAO1wz+eA0sPED5t L/MT2fxzjjJoK1IFPdk7w/AlRS62iUG5qMWH8yGHYJcoKmNPevRdQEYEc3y1P0aM TPsWJT6CnDT+C7liHiapk0yVJgUoO/MOx/5WY3oJuutvQk1q4bw5RQKrR+gW9W/V AOsQMYOYq6M+2+ceCS+A5Sma6CJRz6QmFjd9W/kquk6b1RErKyKMdWJWeq5U1a/N uIAvy8Hqb2vK+RfIcjuVrV6Gi5oOTvcVV0Z73J9h9tjcf1W58Zvr2SM11UxcIIv+ F4mKKHE2s9hsItXRchy0FZPVwb+AFv8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:00:00 2025 by rpki-client