$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa File: 25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa (raw, json) Hash identifier: PvLz63SfWDEe3rrnm+3esEih5TNc2iwJ56zlEOsouvA= Subject key identifier: 1C:EB:41:7A:3B:E2:F8:E0:7F:4E:DA:8B:9F:61:24:66:10:47:53:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58225F4F535C0BC396576B8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.122.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:f4:f5:35:c0:bc:39:65:76:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c5effdc7-6aba-4532-a0e3-686e9db8efe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1c:33:67:96:18:86:d6:a1:5d:7f:f7:55:5a: 89:75:77:09:b1:3f:f7:9e:56:79:10:97:a8:21:77: c3:1c:d8:b6:7e:0d:28:c1:0b:41:14:34:c0:25:ae: b4:f5:66:c8:d7:2c:a0:c9:e3:4a:88:ac:17:c3:bb: ac:a8:55:35:33:5b:aa:e4:c1:e6:15:90:2b:9f:44: 32:f5:4e:90:40:f3:0a:07:ac:68:1d:a6:c0:8b:03: f4:11:f6:83:29:a0:6e:1f:1b:bc:1c:76:9c:2e:ec: 77:87:f0:ac:21:6d:5f:27:25:13:8f:48:a5:61:c4: 2a:3c:db:60:61:87:7f:de:53:d1:7d:ab:ee:5c:c6: 1d:ab:ed:dc:c1:2f:92:e0:f0:a2:a9:5e:37:99:2f: 78:a4:78:43:54:89:23:3c:8c:cc:0d:e5:d5:86:5b: 68:57:75:cb:e8:3d:87:8a:b5:fa:73:e8:85:53:31: 30:f5:63:70:0b:b8:16:2a:42:6a:71:4a:d6:43:7e: 24:93:d5:c2:b5:0e:6a:3f:08:6d:fd:f8:b7:6f:cb: 7d:ca:85:21:bb:aa:2d:a2:81:62:63:3a:2d:68:ce: a5:49:6c:b3:7d:3f:c4:2f:e3:98:24:76:68:5d:55: 44:a5:3d:b8:ea:8d:8c:77:72:1d:aa:1b:a1:f3:ed: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EB:41:7A:3B:E2:F8:E0:7F:4E:DA:8B:9F:61:24:66:10:47:53:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25eaa7d1-e3fa-34ac-901d-d9549957e40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:14:25:f5:1b:fc:f1:f4:30:7b:bf:f1:65:4e:f9:0d:20:bb: 33:6d:d6:2b:88:85:1e:fd:8e:86:ad:d8:5d:51:45:11:f8:d4: b2:b4:eb:09:f3:89:17:1d:ac:01:1d:06:32:7d:32:24:c6:cc: 39:77:ab:73:83:f9:38:38:a3:d0:50:85:c2:99:e6:04:72:57: 86:6a:11:c8:b4:cd:39:28:c8:55:a7:d0:96:a7:bc:b7:d7:db: 8b:54:72:b9:83:51:78:e2:ee:71:4f:2f:96:55:ab:3e:da:7f: 8e:a2:33:78:e9:15:26:ab:3d:09:54:52:74:2a:d6:30:11:96: 9e:db:eb:fe:a9:11:6b:74:15:64:51:78:bf:e9:1d:59:b1:37: 13:c5:f0:17:af:37:db:2d:d2:33:b2:2c:cd:f8:33:13:3c:7a: 4d:fb:f6:65:57:de:06:e2:9f:79:64:d5:db:93:0d:1b:50:f5: 28:a0:53:86:22:99:81:ea:80:0c:37:37:fa:c2:33:a1:a4:15: 76:96:45:ee:8c:ee:45:8b:19:1b:b5:d8:08:6a:c4:b8:48:e8: 97:b4:6c:9b:fa:0f:d8:73:07:d3:29:7b:c5:01:7c:4a:6f:fe: 0f:dd:4e:1f:18:d1:6c:be:87:70:13:ab:65:1b:58:34:30:44: 76:64:ff:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiX09TXAvDlldrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzVlZmZkYzctNmFiYS00NTMyLWEwZTMtNjg2ZTlkYjhlZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBwzZ5YYhtahXX/3VVqJdXcJsT/3nlZ5EJeo IXfDHNi2fg0owQtBFDTAJa609WbI1yygyeNKiKwXw7usqFU1M1uq5MHmFZArn0Qy 9U6QQPMKB6xoHabAiwP0EfaDKaBuHxu8HHacLux3h/CsIW1fJyUTj0ilYcQqPNtg YYd/3lPRfavuXMYdq+3cwS+S4PCiqV43mS94pHhDVIkjPIzMDeXVhltoV3XL6D2H irX6c+iFUzEw9WNwC7gWKkJqcUrWQ34kk9XCtQ5qPwht/fi3b8t9yoUhu6otooFi YzotaM6lSWyzfT/EL+OYJHZoXVVEpT246o2Md3Idqhuh8+02ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzrQXo74vjgf07ai59hJGYQR1NfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVlYWE3ZDEtZTNmYS0z NGFjLTkwMWQtZDk1NDk5NTdlNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEUJfUb/PH0MHu/8WVO+Q0guzNt1iuIhR79joat2F1RRRH41LK06wnz iRcdrAEdBjJ9MiTGzDl3q3OD+Tg4o9BQhcKZ5gRyV4ZqEci0zTkoyFWn0JanvLfX 24tUcrmDUXji7nFPL5ZVqz7af46iM3jpFSarPQlUUnQq1jARlp7b6/6pEWt0FWRR eL/pHVmxNxPF8BevN9st0jOyLM34MxM8ek379mVX3gbin3lk1duTDRtQ9SigU4Yi mYHqgAw3N/rCM6GkFXaWRe6M7kWLGRu12AhqxLhI6Je0bJv6D9hzB9Mpe8UBfEpv /g/dTh8Y0Wy+h3ATq2UbWDQwRHZk/0M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:23 2025 by rpki-client