$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d51b005-9e35-32cc-a541-7d3f5974a430.roa File: 1d51b005-9e35-32cc-a541-7d3f5974a430.roa (raw, json) Hash identifier: QjQa63+8rOp/Bx+hlCJw+kq0Rh2qVDeb55WUEjVlz9c= Subject key identifier: 27:A5:76:27:0D:8D:BA:8E:7D:26:D3:EB:C9:BD:47:B7:AB:14:3F:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C03EB7CCDDF46A7C2BE48 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d51b005-9e35-32cc-a541-7d3f5974a430.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.72.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:03:eb:7c:cd:df:46:a7:c2:be:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9dd18717-5304-4205-a00d-05d94b2a4403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:d6:b8:73:34:f9:3c:f6:7e:8f:2f:32:8e: 69:14:5e:89:43:94:42:d7:cc:2b:cd:20:4e:13:ab: 70:a7:d2:52:1d:0c:fb:4a:eb:49:74:f5:b2:2e:b5: eb:3d:89:da:13:7c:b6:ad:26:59:19:d2:51:3e:df: e5:4e:2b:54:91:b4:3d:2e:fa:21:22:4e:8a:9a:6e: 55:7f:28:67:19:58:e5:bc:6d:2f:09:42:be:40:2b: 20:76:5b:b0:e5:e6:ac:62:2d:80:52:25:33:a6:c7: 20:d6:58:8f:be:2a:3b:b3:1e:01:32:5c:2c:0f:9a: 6f:25:37:81:e4:76:fc:57:14:cd:1d:37:83:5d:33: f4:8d:f7:48:c7:a4:4e:4d:dc:dd:07:4d:09:2e:b7: f7:31:61:b7:2d:f3:db:08:98:93:3e:ce:69:e8:63: 11:fe:09:3e:22:e8:04:fa:fe:55:38:b6:92:87:bd: 8d:ac:1e:61:69:01:15:bd:ff:34:1a:00:e8:83:36: 79:da:f6:3e:17:6e:20:67:0b:03:90:33:bd:6c:ed: 08:6e:7d:f3:02:6e:fe:59:15:a2:e0:79:fc:bd:47: 1d:33:b0:b1:cc:56:0c:03:8b:dc:ed:4a:73:10:cf: 6c:2e:0b:02:76:f0:55:03:11:c4:25:ac:2d:3e:6d: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A5:76:27:0D:8D:BA:8E:7D:26:D3:EB:C9:BD:47:B7:AB:14:3F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d51b005-9e35-32cc-a541-7d3f5974a430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:17:5e:70:ce:9a:75:c2:30:51:5e:fa:78:48:72:d8:90:d6: 0d:61:a2:5d:6d:f1:0b:3f:13:83:26:82:4b:85:cc:b8:16:2f: f6:6a:78:ce:c4:ae:30:c5:87:3d:ed:76:f8:7d:22:26:ee:2c: f3:99:e1:57:7f:e7:cc:55:8b:11:8c:10:f1:b0:d2:66:a7:b1: 5e:48:62:e5:d8:ba:e3:2a:ee:86:6c:96:27:f3:c4:f7:8d:fb: 5a:be:fd:b0:fa:5c:ef:f2:49:60:fe:7b:cb:3d:e2:2c:4d:d5: f2:7f:6e:5d:23:ae:a4:d4:45:fc:03:04:a0:d0:a6:fa:9d:20: 89:7b:f8:39:fb:77:ec:b8:39:ef:b4:e8:cc:77:ed:97:0d:cd: 49:66:c3:80:c1:28:5a:bc:85:02:db:d0:d2:c6:2d:0e:53:19: 7a:48:ba:15:c5:cd:4f:7d:4b:e4:35:be:a8:51:c9:dc:88:c7: 74:41:8e:60:b4:0c:e7:13:94:c4:22:a2:41:69:c7:fb:9f:57: 6d:40:87:02:40:d9:b5:0e:da:c6:75:e8:60:60:75:d8:27:c8: 80:31:ba:5f:20:23:aa:43:d6:ce:f0:6e:42:66:53:9b:9c:36: 4c:7e:53:29:b3:b4:b4:db:ba:ee:f0:a3:e9:1a:b4:46:24:6e: 5c:2b:46:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAPrfM3fRqfCvkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWRkMTg3MTctNTMwNC00MjA1LWEwMGQtMDVkOTRiMmE0NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y7WuHM0+Tz2fo8vMo5pFF6JQ5RC18wrzSBO E6twp9JSHQz7SutJdPWyLrXrPYnaE3y2rSZZGdJRPt/lTitUkbQ9LvohIk6Kmm5V fyhnGVjlvG0vCUK+QCsgdluw5easYi2AUiUzpscg1liPvio7sx4BMlwsD5pvJTeB 5Hb8VxTNHTeDXTP0jfdIx6ROTdzdB00JLrf3MWG3LfPbCJiTPs5p6GMR/gk+IugE +v5VOLaSh72NrB5haQEVvf80GgDogzZ52vY+F24gZwsDkDO9bO0Ibn3zAm7+WRWi 4Hn8vUcdM7CxzFYMA4vc7UpzEM9sLgsCdvBVAxHEJawtPm1HlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeldicNjbqOfSbT68m9R7erFD9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ1MWIwMDUtOWUzNS0z MmNjLWE1NDEtN2QzZjU5NzRhNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMXXnDOmnXCMFFe+nhIctiQ1g1hol1t8Qs/E4MmgkuFzLgWL/ZqeM7E rjDFhz3tdvh9IibuLPOZ4Vd/58xVixGMEPGw0mansV5IYuXYuuMq7oZslifzxPeN +1q+/bD6XO/ySWD+e8s94ixN1fJ/bl0jrqTURfwDBKDQpvqdIIl7+Dn7d+y4Oe+0 6Mx37ZcNzUlmw4DBKFq8hQLb0NLGLQ5TGXpIuhXFzU99S+Q1vqhRydyIx3RBjmC0 DOcTlMQiokFpx/ufV21AhwJA2bUO2sZ16GBgddgnyIAxul8gI6pD1s7wbkJmU5uc Nkx+UymztLTbuu7wo+katEYkblwrRvg= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:36 2025 by rpki-client