$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa File: 240b7b1e-5ac1-3530-9208-59ae94dede8d.roa (raw, json) Hash identifier: fV31Lrbj0O6LVBZm+Gp4e9wHnnMKLW+2KNND61w2rLY= Subject key identifier: 84:24:F9:D8:E8:40:95:B5:EB:0F:06:34:4C:AB:C2:25:8F:05:88:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE3D0BA04297D77F48000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.76.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e3:d0:ba:04:29:7d:77:f4:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=cee98338-8935-4264-a326-bd288de2589b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:de:f6:64:c8:d4:27:fc:e8:4a:e0:a2:a2: 72:b8:c7:96:93:39:42:d7:ed:fe:8f:ac:4f:f4:28: e1:7e:0c:b0:fc:7f:bb:e1:56:cc:47:5c:44:0b:7a: ee:6c:94:48:3a:62:ac:db:ce:60:ea:0c:f7:b7:54: c3:43:dd:d4:19:99:b0:75:f2:4d:7a:23:f4:0a:a6: a6:49:90:42:dc:12:a6:e1:1c:60:20:61:31:df:e9: 38:79:55:c7:2f:4a:d3:1d:8f:6d:a8:bf:15:28:1a: af:23:d6:42:34:af:92:af:36:5c:5e:7f:a9:ac:bd: f3:30:f8:2c:4b:71:3c:b0:6e:d8:d0:42:3b:58:6a: e1:1d:a5:ec:55:c5:f7:68:c3:cc:62:7d:37:ad:af: 2f:2e:3f:d3:d9:07:0e:9a:20:bd:f8:6b:8b:66:95: 90:4c:e9:53:80:cd:1c:f3:d0:d6:5f:80:34:37:4e: bc:de:c9:3e:d9:01:18:69:1f:2d:22:d8:9a:0b:d8: a5:a6:8a:aa:ff:a2:6f:38:41:65:52:ed:8a:51:cc: 07:fc:ae:98:ae:71:7d:27:f0:11:e9:be:f0:50:79: 97:5e:ec:43:07:32:d5:65:e8:85:e9:8a:e7:c1:c1: 8c:6f:d0:e6:cb:07:49:8b:97:3b:74:41:a5:f0:a4: ec:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:24:F9:D8:E8:40:95:B5:EB:0F:06:34:4C:AB:C2:25:8F:05:88:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/240b7b1e-5ac1-3530-9208-59ae94dede8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b1:10:30:c9:f9:f4:d2:8c:91:b0:db:cc:65:d9:3c:65:fd: 97:ca:b1:1a:ff:aa:7d:42:1a:f4:aa:01:be:21:63:12:67:0a: 17:e6:78:42:6f:a3:84:42:73:95:2b:54:4e:71:4d:51:c2:66: 57:16:01:6c:85:71:1c:b8:e3:9d:a2:26:06:12:2a:3a:4c:a5: 0f:e3:e9:e0:fe:75:8a:d9:98:19:ab:13:31:5f:a8:b2:42:2c: 2e:6f:43:0b:28:c2:c1:6c:3d:07:dd:3c:51:32:2f:48:9e:69: 14:3f:ef:5e:d4:dc:b2:7b:b9:35:dc:c6:a3:f6:03:aa:fc:c3: a7:75:d3:7b:35:3a:7e:a5:15:bf:5d:2e:7a:50:1a:d7:b2:50: 10:b4:ef:85:41:fa:b5:7d:6e:79:a1:c5:cc:9e:b5:89:5c:c3: 33:18:89:d4:52:d8:19:5d:d2:92:72:a9:37:96:e9:3e:9f:bb: 38:1b:b4:e9:96:54:73:f3:f2:5c:8b:d4:c6:1d:06:c2:39:4c: 89:06:0a:8a:b3:73:92:48:af:67:fa:4e:41:7b:ac:43:99:c1: b4:16:ef:d9:63:6d:aa:8d:3c:04:19:5c:af:fd:06:22:c7:e7: a1:8b:f7:7f:df:bd:47:7f:39:aa:91:db:60:72:5a:38:d9:f1: 23:36:79:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+PQugQpfXf0gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2VlOTgzMzgtODkzNS00MjY0LWEzMjYtYmQyODhkZTI1ODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYXe9mTI1Cf86ErgoqJyuMeWkzlC1+3+j6xP 9Cjhfgyw/H+74VbMR1xEC3rubJRIOmKs285g6gz3t1TDQ93UGZmwdfJNeiP0Cqam SZBC3BKm4RxgIGEx3+k4eVXHL0rTHY9tqL8VKBqvI9ZCNK+SrzZcXn+prL3zMPgs S3E8sG7Y0EI7WGrhHaXsVcX3aMPMYn03ra8vLj/T2QcOmiC9+GuLZpWQTOlTgM0c 89DWX4A0N0683sk+2QEYaR8tItiaC9ilpoqq/6JvOEFlUu2KUcwH/K6YrnF9J/AR 6b7wUHmXXuxDBzLVZeiF6YrnwcGMb9DmywdJi5c7dEGl8KTsLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQk+djoQJW16w8GNEyrwiWPBYinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjQwYjdiMWUtNWFjMS0z NTMwLTkyMDgtNTlhZTk0ZGVkZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCxEDDJ+fTSjJGw28xl2Txl/ZfKsRr/qn1CGvSqAb4hYxJnChfmeEJv o4RCc5UrVE5xTVHCZlcWAWyFcRy4452iJgYSKjpMpQ/j6eD+dYrZmBmrEzFfqLJC LC5vQwsowsFsPQfdPFEyL0ieaRQ/717U3LJ7uTXcxqP2A6r8w6d103s1On6lFb9d LnpQGteyUBC074VB+rV9bnmhxcyetYlcwzMYidRS2Bld0pJyqTeW6T6fuzgbtOmW VHPz8lyL1MYdBsI5TIkGCoqzc5JIr2f6TkF7rEOZwbQW79ljbaqNPAQZXK/9BiLH 56GL93/fvUd/OaqR22ByWjjZ8SM2eSU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:07 2025 by rpki-client