$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa File: 1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa (raw, json) Hash identifier: U7XbZOygdj4dU0UcEIAm4Bxnxhnjve4wNxq61lyoJIs= Subject key identifier: 02:87:F0:D5:99:6B:36:3E:88:D0:2A:63:56:CD:C8:45:D0:C3:8C:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58174336379A04303D05740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.101.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:74:33:63:79:a0:43:03:d0:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1d503ff2-9d0b-46d3-94ad-b2b200f23c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:af:3e:10:5b:21:5a:88:44:f3:c2:32:60: 37:3e:57:b4:83:07:d7:57:a3:31:ce:c5:b6:00:5c: 8e:e8:9f:6c:47:76:40:20:22:52:7e:31:f4:b5:b0: 2a:77:24:2c:92:92:d6:5d:42:c2:6a:dd:11:2b:6a: 4c:eb:20:2f:88:a5:be:e8:a0:d0:ea:e5:0e:6b:d0: cb:55:75:9d:48:ef:be:14:2c:78:25:81:0e:92:e2: 94:77:00:33:2b:4c:e8:95:38:57:78:e2:36:62:fe: 92:a7:04:ed:65:65:08:b0:4c:06:0a:f1:86:15:f7: 4a:c4:70:e9:05:12:ad:85:d4:d8:35:f8:da:ea:76: a7:af:8c:c2:f3:3c:85:f9:44:70:a9:6a:fe:55:f8: be:54:97:f4:98:cb:ee:a1:2d:dd:5d:fe:5b:f7:f5: 50:db:90:81:73:63:24:52:cb:a6:23:64:65:73:5e: b7:41:84:0a:57:1c:7f:cc:33:79:0e:a8:e5:76:02: d4:31:6c:39:6e:33:29:1f:12:8e:f0:00:2e:91:8c: d5:92:21:16:67:07:cf:fe:17:d2:a4:76:d5:bf:39: 5d:6b:ed:dd:55:e4:08:bd:b2:ce:40:1a:9c:43:a3: ca:80:08:30:4f:45:35:e3:ac:9e:b7:4c:9f:33:fc: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:87:F0:D5:99:6B:36:3E:88:D0:2A:63:56:CD:C8:45:D0:C3:8C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1e1f47a6-975f-31f0-8579-e90cfc38cca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ed:e1:ab:1a:92:ca:3f:c7:c4:fe:15:d8:a4:21:3f:61:74: 5c:4c:35:ea:30:df:7c:3d:c5:41:40:28:19:b4:88:5b:6c:c7: ba:b2:f0:fe:e6:13:af:8c:99:8c:34:3b:9b:1a:cc:3b:8a:f9: e8:26:a1:a5:cd:2c:64:4f:bf:23:ab:a0:da:03:6d:c3:39:65: 50:ab:d2:cc:0f:85:d4:86:eb:52:e0:6d:2b:97:89:ef:01:70: e3:18:6f:8b:bc:4e:35:b1:b1:43:af:17:b5:3a:0e:3d:58:f0: ce:c9:1e:ae:91:ea:7c:05:4a:10:e4:7d:43:bf:ec:28:8c:e2: 05:7d:f7:e9:2a:d2:9b:0a:34:a7:b0:53:bf:ec:48:32:10:6b: 08:b8:e9:4a:77:2f:5b:ac:02:3e:ce:f2:6a:b6:bf:1b:9f:0e: 77:f0:40:86:d2:05:b9:42:92:48:fe:89:de:91:cd:63:8d:cd: d7:f9:8c:72:6f:ea:dc:91:a6:22:c9:b4:56:a6:a0:f8:cb:be: 85:0b:92:56:be:25:f3:c5:6a:ed:b5:44:2e:0e:96:34:a2:39: 9e:5c:da:ff:c5:0b:a0:68:05:68:e1:40:f8:d0:b8:80:eb:1d: 31:69:ad:7f:66:81:96:1d:85:4f:26:3f:5e:9b:02:fa:47:25: a1:44:09:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXQzY3mgQwPQV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWQ1MDNmZjItOWQwYi00NmQzLTk0YWQtYjJiMjAwZjIzYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+yvPhBbIVqIRPPCMmA3Ple0gwfXV6MxzsW2 AFyO6J9sR3ZAICJSfjH0tbAqdyQskpLWXULCat0RK2pM6yAviKW+6KDQ6uUOa9DL VXWdSO++FCx4JYEOkuKUdwAzK0zolThXeOI2Yv6SpwTtZWUIsEwGCvGGFfdKxHDp BRKthdTYNfja6nanr4zC8zyF+URwqWr+Vfi+VJf0mMvuoS3dXf5b9/VQ25CBc2Mk UsumI2Rlc163QYQKVxx/zDN5DqjldgLUMWw5bjMpHxKO8AAukYzVkiEWZwfP/hfS pHbVvzlda+3dVeQIvbLOQBqcQ6PKgAgwT0U146yet0yfM/y/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKH8NWZazY+iNAqY1bNyEXQw4zbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWUxZjQ3YTYtOTc1Zi0z MWYwLTg1NzktZTkwY2ZjMzhjY2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETt4asakso/x8T+FdikIT9hdFxMNeow33w9xUFAKBm0iFtsx7qy8P7m E6+MmYw0O5sazDuK+egmoaXNLGRPvyOroNoDbcM5ZVCr0swPhdSG61LgbSuXie8B cOMYb4u8TjWxsUOvF7U6Dj1Y8M7JHq6R6nwFShDkfUO/7CiM4gV99+kq0psKNKew U7/sSDIQawi46Up3L1usAj7O8mq2vxufDnfwQIbSBblCkkj+id6RzWONzdf5jHJv 6tyRpiLJtFamoPjLvoULkla+JfPFau21RC4OljSiOZ5c2v/FC6BoBWjhQPjQuIDr HTFprX9mgZYdhU8mP16bAvpHJaFECQE= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:05 2025 by rpki-client