$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa File: 230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa (raw, json) Hash identifier: x4kzHleHhix9u39LBZANiPNclhmGrLZuaj4Ly3q143M= Subject key identifier: 7E:C4:37:39:E1:D1:92:3D:82:80:C3:A3:3B:8F:C0:19:25:4D:B4:87 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDDF4B8064B37500578C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.99.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:dd:f4:b8:06:4b:37:50:05:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c4f38c79-ab99-486e-ab34-6d55b65dd434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:6f:6f:3b:43:d7:27:c8:7d:93:50:b8:36: 80:1c:ff:26:14:5c:35:60:fc:19:c4:82:e4:72:25: 0c:dd:07:07:f3:cd:f6:95:f3:df:03:51:26:36:c0: aa:64:c6:72:57:f8:fd:f4:bb:20:90:04:e7:3d:98: c1:e6:3e:4b:14:25:b4:d3:71:8b:ae:ea:ed:ab:e5: cb:b1:5d:19:72:a5:5a:1a:01:99:b5:73:14:aa:b7: 9f:b6:ee:2a:6c:f4:71:fc:47:3a:28:16:96:95:79: 16:9f:3a:88:5e:7f:0f:e8:8a:75:8c:bd:ac:2c:3a: 46:02:8c:5e:95:87:61:27:da:a2:bb:cf:2e:b1:fb: 9a:9a:5c:32:6f:9e:38:09:30:33:42:58:06:5c:c2: 7c:74:8c:05:72:00:bc:ea:c7:aa:7e:bf:d0:e8:ed: cf:99:3d:34:28:b1:6b:8a:26:16:16:b2:4b:da:65: 36:33:ea:3f:c5:40:5a:da:ee:b5:f3:c5:cb:2f:a1: 03:95:9d:d8:a5:50:8f:76:34:d5:34:d4:c0:b6:9b: d8:68:93:2b:c4:e1:bb:6a:42:14:e1:10:10:7e:ff: 20:e3:f1:45:cc:92:25:c4:c1:a1:20:33:40:7e:23: 05:ee:37:da:4a:e1:66:41:cd:1f:75:ea:e3:a6:22: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C4:37:39:E1:D1:92:3D:82:80:C3:A3:3B:8F:C0:19:25:4D:B4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/230f6dbc-1f24-3b50-b93b-bc670d4a5c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9b:ff:09:b3:f8:61:8e:68:60:64:77:01:77:d1:a4:5b:69: bb:95:95:6d:39:6b:87:67:e1:70:87:a4:d6:c9:ac:1e:c3:5d: b6:56:a1:87:76:5c:37:f7:71:58:c7:ed:b6:86:e3:92:c0:a2: 60:1f:2e:c2:d9:28:93:f1:06:63:d4:50:21:91:d9:bd:cb:0e: f4:b6:44:97:ef:76:c6:6e:1c:9f:e3:fa:fd:fb:50:58:a2:d0: f1:05:d0:db:76:bd:c2:b5:5a:d1:9b:25:0e:0b:53:6e:10:cc: c5:9a:02:a4:04:41:54:a4:fe:05:b8:cb:63:10:7d:5e:5a:11: 26:cd:51:5a:f7:1f:c9:e1:f9:61:50:db:eb:2a:27:a7:c5:9d: 1d:0d:7f:99:92:d6:64:40:63:fe:89:54:6d:f6:64:d5:2c:a3: 2e:a4:e4:4e:9c:8d:0a:1c:82:97:6a:d1:b1:a8:9c:0b:73:8f: 48:84:8f:76:fb:96:c2:1b:52:e0:0d:ce:eb:1b:7d:64:af:d2: 87:20:e4:ba:de:c8:72:7d:db:a3:2d:98:b7:44:ba:cd:92:57: 65:6f:27:97:90:8b:f3:19:da:45:e6:47:16:d8:9e:da:b7:a4: 33:49:5d:22:51:28:1c:64:55:e0:fd:aa:0b:1c:d3:fa:8a:de: fa:8a:f0:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS930uAZLN1AFeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzRmMzhjNzktYWI5OS00ODZlLWFiMzQtNmQ1NWI2NWRkNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/tvbztD1yfIfZNQuDaAHP8mFFw1YPwZxILk ciUM3QcH8832lfPfA1EmNsCqZMZyV/j99LsgkATnPZjB5j5LFCW003GLrurtq+XL sV0ZcqVaGgGZtXMUqreftu4qbPRx/Ec6KBaWlXkWnzqIXn8P6Ip1jL2sLDpGAoxe lYdhJ9qiu88usfuamlwyb544CTAzQlgGXMJ8dIwFcgC86seqfr/Q6O3PmT00KLFr iiYWFrJL2mU2M+o/xUBa2u6188XLL6EDlZ3YpVCPdjTVNNTAtpvYaJMrxOG7akIU 4RAQfv8g4/FFzJIlxMGhIDNAfiMF7jfaSuFmQc0fderjpiLTlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7ENznh0ZI9goDDozuPwBklTbSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjMwZjZkYmMtMWYyNC0z YjUwLWI5M2ItYmM2NzBkNGE1YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKb/wmz+GGOaGBkdwF30aRbabuVlW05a4dn4XCHpNbJrB7DXbZWoYd2 XDf3cVjH7baG45LAomAfLsLZKJPxBmPUUCGR2b3LDvS2RJfvdsZuHJ/j+v37UFii 0PEF0Nt2vcK1WtGbJQ4LU24QzMWaAqQEQVSk/gW4y2MQfV5aESbNUVr3H8nh+WFQ 2+sqJ6fFnR0Nf5mS1mRAY/6JVG32ZNUsoy6k5E6cjQocgpdq0bGonAtzj0iEj3b7 lsIbUuANzusbfWSv0ocg5LreyHJ926MtmLdEus2SV2VvJ5eQi/MZ2kXmRxbYntq3 pDNJXSJRKBxkVeD9qgsc0/qK3vqK8OI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:27 2025 by rpki-client