$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a40fc3c-e5b5-397a-9200-e79289e77b98.roa File: 1a40fc3c-e5b5-397a-9200-e79289e77b98.roa (raw, json) Hash identifier: xN2GI44fA/k5jwqzgHEnp0G++x9CpiLmTekAi8t1/aw= Subject key identifier: E0:B1:4F:2D:F4:60:97:EA:A2:8D:ED:02:9D:9B:22:DD:64:36:B9:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCE759DDB2B1FC793B700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a40fc3c-e5b5-397a-9200-e79289e77b98.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.88.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ce:75:9d:db:2b:1f:c7:93:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a55e89c5-fb6e-4762-84c2-9af76aec1520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:60:94:45:6e:c6:ae:80:c2:77:71:2d:cf: 7e:b8:d6:84:4c:8b:04:66:ea:f6:37:85:9b:d4:b6: 5f:b7:93:db:f0:53:64:a5:23:9a:ea:79:38:47:17: fe:29:8c:40:9e:2b:00:dc:de:31:d6:e8:1c:14:63: ae:89:a3:6a:ee:83:34:b9:42:a3:1a:09:57:55:4b: 82:95:fa:5d:2f:d3:70:a2:43:e6:2d:ea:20:ea:0e: 43:5b:42:09:2d:7c:07:22:ce:27:7a:48:14:64:c5: 0f:f7:77:da:d4:bb:97:b2:f7:67:80:84:75:69:2e: cc:cb:22:e5:22:32:44:67:d1:36:17:bc:16:a4:22: 4d:a4:64:4e:1c:96:6c:da:47:ca:d0:28:c9:ee:89: ec:5b:a3:a3:d8:b9:34:4e:07:32:29:c6:63:a8:6b: e5:36:fe:29:6a:79:52:b6:d4:d2:7a:a4:0b:98:fc: cb:01:cc:56:25:93:ab:15:11:8d:56:d3:49:91:18: 33:fe:d8:55:1f:c0:e0:55:94:13:4e:29:45:71:0c: 32:60:e7:29:e6:e4:a9:be:5e:d7:16:d9:b7:86:54: aa:0d:4b:a2:0e:3e:f2:0a:c4:63:aa:71:86:58:49: d0:a4:12:39:cb:eb:d3:dd:db:2e:f0:86:14:bf:2d: 36:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:4F:2D:F4:60:97:EA:A2:8D:ED:02:9D:9B:22:DD:64:36:B9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a40fc3c-e5b5-397a-9200-e79289e77b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2d:c5:ba:4e:0f:2b:a8:7c:b7:79:69:bd:5c:74:44:1f:4c: 8b:b1:d2:a5:92:f4:f4:4c:1c:ea:5f:18:4c:62:63:a5:1d:f2: b7:a7:d8:be:40:1e:20:a6:ec:04:40:ba:6f:2d:63:2c:8c:d8: b8:91:69:5f:05:b5:d0:41:1d:47:de:ca:88:e7:22:44:d7:96: a2:57:4c:c9:9e:79:7d:a1:14:68:13:a9:3d:ad:e4:6a:3d:98: 4e:b3:bd:56:0b:e3:73:48:ac:92:4d:5b:97:25:3a:42:3d:c5: 77:3b:2a:18:a6:14:88:d4:cf:e3:e7:57:58:4a:e3:c3:7f:f7: d9:6e:c4:99:ac:9f:9a:c8:4c:19:3c:63:ac:71:83:74:2e:37: 4f:f1:95:f4:e3:93:84:0e:94:cb:d5:eb:43:17:92:ac:da:c9: 15:9c:c9:e8:ed:a6:84:e9:39:98:c9:ac:d0:f2:2a:72:d9:2f: 32:7b:1d:bf:01:ef:2d:92:1d:83:84:f4:bc:bd:14:cc:65:c8: 9a:94:2c:dc:f7:be:69:cd:b8:f5:3d:91:81:31:3a:6f:b0:57: 50:65:14:ff:ea:ef:06:a3:b4:4c:07:2f:08:0d:b0:92:68:26: e2:9c:85:08:33:bd:16:23:f7:b8:f1:9c:db:21:4d:8e:52:13: 3b:9b:e5:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS851ndsrH8eTtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTU1ZTg5YzUtZmI2ZS00NzYyLTg0YzItOWFmNzZhZWMxNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NpglEVuxq6AwndxLc9+uNaETIsEZur2N4Wb 1LZft5Pb8FNkpSOa6nk4Rxf+KYxAnisA3N4x1ugcFGOuiaNq7oM0uUKjGglXVUuC lfpdL9NwokPmLeog6g5DW0IJLXwHIs4nekgUZMUP93fa1LuXsvdngIR1aS7MyyLl IjJEZ9E2F7wWpCJNpGROHJZs2kfK0CjJ7onsW6Oj2Lk0TgcyKcZjqGvlNv4panlS ttTSeqQLmPzLAcxWJZOrFRGNVtNJkRgz/thVH8DgVZQTTilFcQwyYOcp5uSpvl7X Ftm3hlSqDUuiDj7yCsRjqnGGWEnQpBI5y+vT3dsu8IYUvy02fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCxTy30YJfqoo3tAp2bIt1kNrleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWE0MGZjM2MtZTViNS0z OTdhLTkyMDAtZTc5Mjg5ZTc3Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8txbpODyuofLd5ab1cdEQfTIux0qWS9PRMHOpfGExiY6Ud8ren2L5A HiCm7ARAum8tYyyM2LiRaV8FtdBBHUfeyojnIkTXlqJXTMmeeX2hFGgTqT2t5Go9 mE6zvVYL43NIrJJNW5clOkI9xXc7KhimFIjUz+PnV1hK48N/99luxJmsn5rITBk8 Y6xxg3QuN0/xlfTjk4QOlMvV60MXkqzayRWcyejtpoTpOZjJrNDyKnLZLzJ7Hb8B 7y2SHYOE9Ly9FMxlyJqULNz3vmnNuPU9kYExOm+wV1BlFP/q7wajtEwHLwgNsJJo JuKchQgzvRYj97jxnNshTY5SEzub5bM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:45 2025 by rpki-client