$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b563d41-a01b-36e7-87dc-e8d2acd79596.roa File: 2b563d41-a01b-36e7-87dc-e8d2acd79596.roa (raw, json) Hash identifier: 3pPfgqlEcgs3kENuMli6WL61TzOFfgMxlF41PHkeMJM= Subject key identifier: F7:99:21:1E:C0:90:EC:43:1E:41:63:DE:2D:5E:B2:1B:54:34:16:2F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582090F795EF4622E9CD900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b563d41-a01b-36e7-87dc-e8d2acd79596.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.122.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:09:0f:79:5e:f4:62:2e:9c:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4e6001d4-6d36-47d5-9895-560cb2863662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9c:90:23:e6:e5:1e:a2:e2:05:73:09:f1:57: 62:2c:86:a1:5e:24:d8:ab:c0:38:43:c8:ce:76:ac: 6e:40:20:9e:88:1c:70:ec:ad:8c:6d:95:d3:44:85: 71:a6:de:5d:2b:6e:de:ca:5e:3b:31:68:d7:5a:78: 87:34:17:de:c9:ab:4b:d0:90:b3:66:b9:db:59:15: 6f:b0:45:b4:0c:c5:b8:39:0a:35:1b:39:22:f3:d3: 04:18:3f:2c:92:e2:3e:17:fa:4b:78:c3:65:86:64: 86:1a:b9:47:63:e7:69:a0:cd:46:a6:99:79:67:fa: ff:fb:e7:22:3b:d9:e9:a7:45:78:07:20:03:91:ab: 2f:b7:c7:e3:93:89:07:04:46:1e:e2:1a:69:a7:2f: 6a:90:07:ac:a0:4b:a6:5b:61:0f:59:65:c9:11:2b: 43:fc:1c:81:fd:e6:38:79:9f:d4:24:d7:75:a6:9a: fa:e3:81:54:60:6c:ab:5c:d6:96:1c:0a:ed:67:74: b1:dd:69:8d:fa:a1:d1:60:af:0d:72:ec:57:c2:53: 08:5d:fe:d8:7a:97:8f:64:9e:9b:7f:c9:7e:15:04: 48:4e:c9:3d:52:c7:ae:4e:e3:6c:cc:24:2d:12:81: 8c:d5:c7:7f:8e:96:7d:9a:db:1c:f1:cb:cf:28:81: 32:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:99:21:1E:C0:90:EC:43:1E:41:63:DE:2D:5E:B2:1B:54:34:16:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b563d41-a01b-36e7-87dc-e8d2acd79596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e5:3e:2a:2b:cd:4d:9a:30:80:bf:2b:0e:b9:1e:94:f9:26: 4b:4b:4d:6c:a8:54:a6:5d:10:fb:b7:ac:0c:7f:a6:8c:76:ea: c5:89:bf:6a:0a:4a:ca:cb:80:bb:da:19:d2:fa:71:11:ca:fa: e1:a3:0c:de:88:da:fb:e5:d7:d3:cd:d3:05:c0:31:78:26:9e: a4:a2:3b:ab:21:69:ac:18:eb:4b:88:2a:c0:9e:44:c5:ef:1e: a5:f1:e6:b2:52:3e:e5:c1:f3:c3:09:7a:9d:95:ba:a5:4a:58: 95:ae:20:65:77:2d:82:a7:67:57:d0:0d:73:4e:fa:c1:5d:75: 67:85:6f:eb:0e:bb:12:b9:46:20:28:76:50:5a:bd:db:68:a6: 1f:5e:30:7c:9a:d5:47:4d:ff:4f:d6:d2:b8:3c:04:a6:16:2e: 9b:19:0e:5b:df:a1:ba:de:3f:13:b9:e5:8f:d0:74:5c:23:b2: cc:5f:b6:46:db:3a:22:4f:9b:57:6b:98:20:e6:8b:88:0d:48: 7a:df:41:ee:27:d1:da:4a:6e:67:8d:a5:2d:f0:2c:04:37:22: 9d:25:0e:40:71:62:88:f6:2c:2b:71:06:41:a6:21:49:74:59: 61:f9:43:98:af:7b:e9:d2:ae:5d:99:7d:af:9a:53:38:d8:30: 12:ea:07:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggkPeV70Yi6c2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NGU2MDAxZDQtNmQzNi00N2Q1LTk4OTUtNTYwY2IyODYzNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pyQI+blHqLiBXMJ8VdiLIahXiTYq8A4Q8jO dqxuQCCeiBxw7K2MbZXTRIVxpt5dK27eyl47MWjXWniHNBfeyatL0JCzZrnbWRVv sEW0DMW4OQo1Gzki89MEGD8skuI+F/pLeMNlhmSGGrlHY+dpoM1Gppl5Z/r/++ci O9npp0V4ByADkasvt8fjk4kHBEYe4hpppy9qkAesoEumW2EPWWXJEStD/ByB/eY4 eZ/UJNd1ppr644FUYGyrXNaWHArtZ3Sx3WmN+qHRYK8NcuxXwlMIXf7YepePZJ6b f8l+FQRITsk9UseuTuNszCQtEoGM1cd/jpZ9mtsc8cvPKIEyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeZIR7AkOxDHkFj3i1eshtUNBYvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI1NjNkNDEtYTAxYi0z NmU3LTg3ZGMtZThkMmFjZDc5NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvlPiorzU2aMIC/Kw65HpT5JktLTWyoVKZdEPu3rAx/pox26sWJv2oK SsrLgLvaGdL6cRHK+uGjDN6I2vvl19PN0wXAMXgmnqSiO6shaawY60uIKsCeRMXv HqXx5rJSPuXB88MJep2VuqVKWJWuIGV3LYKnZ1fQDXNO+sFddWeFb+sOuxK5RiAo dlBavdtoph9eMHya1UdN/0/W0rg8BKYWLpsZDlvfobrePxO55Y/QdFwjssxftkbb OiJPm1drmCDmi4gNSHrfQe4n0dpKbmeNpS3wLAQ3Ip0lDkBxYoj2LCtxBkGmIUl0 WWH5Q5ive+nSrl2Zfa+aUzjYMBLqB34= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:20 2025 by rpki-client