$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11a9cc7d-25c9-3886-9a6d-b47f7cf23395.roa File: 11a9cc7d-25c9-3886-9a6d-b47f7cf23395.roa (raw, json) Hash identifier: v7yMhlR17Za+vV20YknXaUDHu8Udx33kqoqRZy9yQ14= Subject key identifier: E1:60:B9:66:7C:A5:55:FF:CB:21:1E:3E:02:6F:06:20:41:6E:D7:FD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB08E0D48FEC852D57F10 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11a9cc7d-25c9-3886-9a6d-b47f7cf23395.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.90.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b0:8e:0d:48:fe:c8:52:d5:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2271e3ea-b932-463a-ab61-0b3aa464c995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f7:89:29:70:00:b5:f2:29:01:a1:6f:0d:22: c4:92:de:99:71:c5:e1:4b:80:55:bb:e5:cc:6a:3d: 34:fc:1b:68:20:b0:8b:22:5a:45:32:16:5a:fe:c8: 09:f0:9a:70:ff:34:0a:23:13:2b:72:b2:5d:38:1e: 18:dc:33:d2:bc:6a:39:a9:09:a5:5d:55:86:aa:1a: 6b:3c:b2:8b:07:e2:c1:73:81:26:4a:b2:12:e7:97: a3:ec:33:56:3c:f2:03:44:85:5a:3c:32:db:17:2e: 35:63:fc:76:c4:e2:4b:96:f2:0d:a4:b6:b5:a8:e9: d5:08:4a:bf:cb:c7:32:4e:0e:88:40:68:ee:bf:a1: d6:6f:82:53:c9:1a:59:32:d4:6f:e4:83:44:31:a7: f0:05:da:db:41:3d:d1:0e:82:d3:f3:e4:36:46:e6: 9a:76:ee:ca:05:ae:48:0d:33:6c:1d:bf:10:05:0e: 24:45:36:07:5d:09:22:8d:9d:49:c4:c4:df:65:eb: 7b:48:82:1f:49:c8:03:4c:4b:36:63:37:da:a6:02: e8:d2:0d:10:07:9c:fa:47:7b:81:1a:c0:c0:99:8b: 97:32:02:04:48:a3:df:43:4c:88:1d:02:ae:f1:e7: 8f:d5:61:74:81:4e:d3:10:bc:5d:27:f1:f7:ee:5e: c4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:60:B9:66:7C:A5:55:FF:CB:21:1E:3E:02:6F:06:20:41:6E:D7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/11a9cc7d-25c9-3886-9a6d-b47f7cf23395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.90.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cf:72:b0:cb:b9:2d:45:6a:3b:a5:c2:85:10:13:1d:f4:7a: c4:dc:9c:1e:16:89:87:16:cf:2d:ea:c7:9f:13:d3:c0:37:55: 85:6b:79:7e:9a:63:65:c8:a4:5d:b4:7e:31:78:c5:09:31:bb: 39:61:a6:3b:e3:5f:7e:00:e9:58:4d:4a:9b:f3:51:e4:66:93: 59:05:06:f4:d7:42:be:76:de:3b:6c:3c:83:d8:e8:23:00:de: 7f:84:58:45:3e:f2:b6:d7:37:ca:4a:a0:e8:92:06:b0:c1:2d: 6c:2b:25:de:41:f9:82:34:7a:da:65:a1:ad:e7:dd:66:2d:e8: 49:68:61:3a:0c:a2:3f:3d:eb:42:d3:94:57:18:32:77:50:46: ed:ea:89:ec:03:43:47:0b:55:52:9f:52:f6:b3:eb:3c:d2:b7: cb:43:9c:5e:d2:6a:be:d6:04:a7:17:71:85:5d:7f:d3:7e:35: e6:d7:8d:7f:12:a8:31:76:06:2b:df:00:3f:a5:97:d6:d3:86: e8:47:c0:3a:1f:0b:aa:99:8b:50:18:ce:cf:1f:61:4b:d9:e5: b4:cb:50:29:9d:c9:e0:fb:33:c8:88:d6:0e:f9:be:46:3c:a8: 69:cb:fb:4c:07:e3:5c:1a:5e:ff:fb:4b:09:d5:72:b8:2f:56: d6:d5:68:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7CODUj+yFLVfxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjI3MWUzZWEtYjkzMi00NjNhLWFiNjEtMGIzYWE0NjRjOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/eJKXAAtfIpAaFvDSLEkt6ZccXhS4BVu+XM aj00/BtoILCLIlpFMhZa/sgJ8Jpw/zQKIxMrcrJdOB4Y3DPSvGo5qQmlXVWGqhpr PLKLB+LBc4EmSrIS55ej7DNWPPIDRIVaPDLbFy41Y/x2xOJLlvINpLa1qOnVCEq/ y8cyTg6IQGjuv6HWb4JTyRpZMtRv5INEMafwBdrbQT3RDoLT8+Q2Ruaadu7KBa5I DTNsHb8QBQ4kRTYHXQkijZ1JxMTfZet7SIIfScgDTEs2YzfapgLo0g0QB5z6R3uB GsDAmYuXMgIESKPfQ0yIHQKu8eeP1WF0gU7TELxdJ/H37l7EAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFguWZ8pVX/yyEePgJvBiBBbtf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTFhOWNjN2QtMjVjOS0z ODg2LTlhNmQtYjQ3ZjdjZjIzMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIloAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTPcrDLuS1FajulwoUQEx30esTcnB4WiYcWzy3qx58T08A3VYVreX6a Y2XIpF20fjF4xQkxuzlhpjvjX34A6VhNSpvzUeRmk1kFBvTXQr523jtsPIPY6CMA 3n+EWEU+8rbXN8pKoOiSBrDBLWwrJd5B+YI0etploa3n3WYt6EloYToMoj8960LT lFcYMndQRu3qiewDQ0cLVVKfUvaz6zzSt8tDnF7Sar7WBKcXcYVdf9N+NebXjX8S qDF2BivfAD+ll9bThuhHwDofC6qZi1AYzs8fYUvZ5bTLUCmdyeD7M8iI1g75vkY8 qGnL+0wH41waXv/7SwnVcrgvVtbVaDw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:17 2025 by rpki-client