$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa File: 0f78b3fd-1445-384b-b208-6396a085dcb3.roa (raw, json) Hash identifier: TvFm+S4cMGx6jL9ZvaMZxs1Za7txKsNJLFkCkLFjpaw= Subject key identifier: 7C:C8:88:A4:3B:50:5B:DB:06:6A:E1:D9:62:92:A0:74:2B:97:89:0C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581806E0878E61E69D8C500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:80:6e:08:78:e6:1e:69:d8:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=850a0be4-6312-41b4-8969-c36dda07b871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:2a:41:21:1d:3a:ee:c4:ea:78:58:10:3c: 60:e4:97:e7:82:21:e2:8a:67:2c:fc:c1:8f:f6:44: fa:7e:61:11:cd:5c:9f:ad:ff:a9:8c:c5:14:24:95: 21:71:30:0b:7e:4a:6d:0a:50:2a:39:dc:1b:c3:55: cc:b7:03:a3:da:9a:66:da:88:dd:a2:df:cc:f6:4c: 15:41:dc:02:fd:ea:bc:56:52:ff:f6:60:e0:0b:6f: 12:3b:c7:e5:35:32:4b:df:3e:0f:24:55:ff:c3:8d: c1:2a:6c:cb:12:af:a4:80:9e:50:9f:c3:e9:f5:73: 58:ad:39:28:12:50:7e:9f:a1:06:9b:9e:d4:b7:40: 42:31:f6:5e:e0:0b:bd:b9:8a:09:2c:0e:f7:69:5d: 92:d2:19:b1:4a:f9:60:1d:c8:53:da:eb:2a:b8:a1: f4:61:eb:e0:3f:c7:86:07:25:3c:99:65:bd:1b:e9: 60:10:76:d0:48:c1:16:f2:c9:0e:a2:ab:c9:8e:fe: c1:56:8e:b5:27:59:4c:3d:28:59:34:c0:5e:6b:91: 97:b1:1b:fe:3f:c0:88:26:ca:9b:6b:aa:1e:ef:6f: e6:9b:65:d6:48:a9:d4:7e:53:de:4b:7a:17:12:1c: 72:03:b6:9f:9b:c7:db:92:90:22:92:ac:99:27:bd: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C8:88:A4:3B:50:5B:DB:06:6A:E1:D9:62:92:A0:74:2B:97:89:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f78b3fd-1445-384b-b208-6396a085dcb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:96:76:8e:2f:07:fa:68:0a:57:29:99:b2:b2:02:89:3b:97: 78:ad:8a:74:09:d8:0f:15:a0:6d:10:72:98:54:c4:59:43:d7: 3e:c1:df:76:5a:05:46:aa:12:e3:2d:0e:8c:c8:1b:79:ed:ce: f1:88:e8:64:43:9c:c7:1b:db:31:54:01:87:3d:60:22:3d:d3: 23:2b:48:f7:e6:67:94:db:8c:39:b9:91:d3:3a:64:9e:b4:23: 9a:10:2e:b5:b0:71:fa:6d:c8:9d:bb:02:33:63:b9:6c:2e:87: 37:55:4f:f3:85:95:e8:3d:c7:6f:fc:8f:e6:5a:fa:61:ff:db: b1:9b:d1:be:62:47:09:9c:ab:67:b6:fb:0b:22:da:3b:de:f3: f5:0c:6f:f4:c5:21:87:17:e4:b4:7a:10:08:c8:ab:df:1f:68: a6:21:9a:e1:3d:6d:b5:14:bf:16:7d:76:30:2e:4c:25:d8:b3: 5f:01:88:a3:75:0c:ea:a5:0e:91:71:fc:7b:5d:d2:3a:a8:24: 20:12:d5:a9:4f:16:92:28:74:ea:df:ea:33:99:d0:0f:55:cc: 34:f1:44:97:83:cd:a0:cd:a4:4b:48:f1:a3:be:e7:ee:f5:e2: 5c:a3:bc:e6:b7:a3:c9:9d:c2:ad:8e:e6:cf:92:4f:fd:5b:aa: e4:a4:86:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYBuCHjmHmnYxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODUwYTBiZTQtNjMxMi00MWI0LTg5NjktYzM2ZGRhMDdiODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVYqQSEdOu7E6nhYEDxg5JfngiHiimcs/MGP 9kT6fmERzVyfrf+pjMUUJJUhcTALfkptClAqOdwbw1XMtwOj2ppm2ojdot/M9kwV QdwC/eq8VlL/9mDgC28SO8flNTJL3z4PJFX/w43BKmzLEq+kgJ5Qn8Pp9XNYrTko ElB+n6EGm57Ut0BCMfZe4Au9uYoJLA73aV2S0hmxSvlgHchT2usquKH0YevgP8eG ByU8mWW9G+lgEHbQSMEW8skOoqvJjv7BVo61J1lMPShZNMBea5GXsRv+P8CIJsqb a6oe72/mm2XWSKnUflPeS3oXEhxyA7afm8fbkpAikqyZJ73gbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzIiKQ7UFvbBmrh2WKSoHQrl4kMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY3OGIzZmQtMTQ0NS0z ODRiLWIyMDgtNjM5NmEwODVkY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOWdo4vB/poClcpmbKyAok7l3itinQJ2A8VoG0QcphUxFlD1z7B33Za BUaqEuMtDozIG3ntzvGI6GRDnMcb2zFUAYc9YCI90yMrSPfmZ5TbjDm5kdM6ZJ60 I5oQLrWwcfptyJ27AjNjuWwuhzdVT/OFleg9x2/8j+Za+mH/27Gb0b5iRwmcq2e2 +wsi2jve8/UMb/TFIYcX5LR6EAjIq98faKYhmuE9bbUUvxZ9djAuTCXYs18BiKN1 DOqlDpFx/Htd0jqoJCAS1alPFpIodOrf6jOZ0A9VzDTxRJeDzaDNpEtI8aO+5+71 4lyjvOa3o8mdwq2O5s+ST/1bquSkhsE= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:51 2025 by rpki-client