$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa File: 0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa (raw, json) Hash identifier: uPeXvnMhSRUXhZ8ZLJeoDkiIHodkhZmua9/lp3Q6qY4= Subject key identifier: 50:11:9F:95:4D:4F:5A:6B:9F:5E:77:CF:C7:8C:DD:DF:64:F0:40:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE92B27AA0CCC56B20A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.82.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e9:2b:27:aa:0c:cc:56:b2:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9fabe63b-d438-4b37-810f-bd60ff47d564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:7e:07:4a:ec:f0:fa:e8:fd:1d:38:90:0d: 51:bf:2e:60:f0:98:68:a3:2c:e7:e0:a8:3b:50:90: 74:81:b6:64:af:5a:d8:73:a2:6e:fb:51:d6:79:97: 70:eb:ad:29:97:f7:fb:5a:b1:92:8f:c8:ad:5c:bf: 19:32:3d:fa:2e:71:5e:47:92:ab:7d:6e:ef:5e:fd: df:d9:a4:6c:93:3f:72:02:81:cc:d0:4e:36:5f:bd: c7:c4:0c:88:ff:5e:ee:61:9a:f1:e6:e0:33:42:9b: a4:90:81:7f:4b:b6:80:61:c5:c8:85:b9:3e:52:2c: b0:b5:e1:e2:8e:ae:32:6a:48:ca:cc:3b:37:d2:0a: c1:e0:31:0c:3b:7a:54:75:68:bc:af:c0:fa:52:a2: 12:73:82:ec:0b:c2:9c:2e:d4:91:12:63:f2:41:5b: 6c:18:2c:5d:05:60:88:f7:bb:02:f1:ae:fd:fa:b9: 96:30:56:67:3f:8d:3e:49:d4:eb:d5:b5:e8:9f:71: 50:c5:95:ec:7f:8f:60:7c:99:7f:ad:e7:5e:9b:2d: 28:50:00:ab:d6:bf:fd:e3:93:63:a4:23:87:b7:43: 32:5e:18:3f:a9:98:3e:22:b2:38:ae:2f:6d:a3:2e: 2b:eb:7f:10:f8:b9:86:f3:36:14:e6:34:32:59:b2: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:9F:95:4D:4F:5A:6B:9F:5E:77:CF:C7:8C:DD:DF:64:F0:40:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0f9a8afe-e78f-36fc-925d-d7c51f6545c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.82.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:68:2c:0b:a7:2a:cd:e6:8a:6c:45:1a:f4:20:1a:f3:ad:81: 4f:d9:7c:06:b7:03:c0:fc:cc:97:4d:a9:c0:d1:65:02:b4:57: ed:36:d6:b5:d5:be:55:78:42:38:c7:1f:25:62:c0:ef:92:ae: 4a:b9:a4:c0:89:e8:29:a9:97:b9:9f:11:a8:44:06:b5:ab:60: 7b:1b:27:e4:25:71:c6:54:31:ac:58:05:24:38:82:b7:95:f0: d5:5f:25:84:66:4c:69:2c:34:50:85:ec:03:fb:cf:56:c5:43: f9:61:53:9d:9c:47:6b:15:b9:5d:78:0c:65:a8:00:15:81:b1: 14:6d:22:2e:c1:61:6f:27:4a:56:d7:f3:ef:93:a8:14:d8:dc: 24:2c:25:2e:1a:f9:9d:3d:b1:9f:9d:49:bf:57:1f:b5:7f:50: 09:7e:b6:ff:84:ea:e2:fc:fd:99:2c:f2:10:72:da:96:68:de: d9:37:bb:71:21:8a:0e:e4:21:67:a0:44:a5:97:c1:03:28:a1: d7:ea:67:d1:68:21:52:42:73:c4:1f:f9:c0:43:fd:b7:80:f0: de:d5:72:48:49:b9:c3:0c:37:bd:10:c9:97:40:f5:60:ca:4d: a2:1a:8f:b6:fa:ed:8a:e2:1d:ea:e9:13:41:d3:20:96:13:05: a1:69:b1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+krJ6oMzFayCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWZhYmU2M2ItZDQzOC00YjM3LTgxMGYtYmQ2MGZmNDdkNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdR+B0rs8Pro/R04kA1Rvy5g8Jhooyzn4Kg7 UJB0gbZkr1rYc6Ju+1HWeZdw660pl/f7WrGSj8itXL8ZMj36LnFeR5KrfW7vXv3f 2aRskz9yAoHM0E42X73HxAyI/17uYZrx5uAzQpukkIF/S7aAYcXIhbk+UiywteHi jq4yakjKzDs30grB4DEMO3pUdWi8r8D6UqISc4LsC8KcLtSREmPyQVtsGCxdBWCI 97sC8a79+rmWMFZnP40+SdTr1bXon3FQxZXsf49gfJl/redemy0oUACr1r/945Nj pCOHt0MyXhg/qZg+IrI4ri9toy4r638Q+LmG8zYU5jQyWbKCYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFARn5VNT1prn153z8eM3d9k8EDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGY5YThhZmUtZTc4Zi0z NmZjLTkyNWQtZDdjNTFmNjU0NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFoLAunKs3mimxFGvQgGvOtgU/ZfAa3A8D8zJdNqcDRZQK0V+021rXV vlV4QjjHHyViwO+Srkq5pMCJ6Cmpl7mfEahEBrWrYHsbJ+QlccZUMaxYBSQ4greV 8NVfJYRmTGksNFCF7AP7z1bFQ/lhU52cR2sVuV14DGWoABWBsRRtIi7BYW8nSlbX 8++TqBTY3CQsJS4a+Z09sZ+dSb9XH7V/UAl+tv+E6uL8/Zks8hBy2pZo3tk3u3Eh ig7kIWegRKWXwQMoodfqZ9FoIVJCc8Qf+cBD/beA8N7VckhJucMMN70QyZdA9WDK TaIaj7b67YriHerpE0HTIJYTBaFpse4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:30 2025 by rpki-client