$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa File: 2b99a575-c696-3d6c-a848-88522920f0c5.roa (raw, json) Hash identifier: ywotPU7Zwn7/YtMTdQErHDn2FYQZn/xQ7uOj3NXNjUY= Subject key identifier: B5:D6:3B:DE:22:24:55:0B:62:A5:A3:6D:58:21:54:3F:58:11:77:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE7DB0A6B60A8B44FC480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.136.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e7:db:0a:6b:60:a8:b4:4f:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4acaf4b5-ab85-4842-b553-52f76910f6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:d8:8e:9d:66:81:e7:40:a7:e3:2a:e3:67: 82:a1:d7:f5:2b:14:02:e1:3a:6d:68:66:8a:27:c7: 0f:44:85:17:c1:43:65:9e:6a:53:4c:56:d1:7f:71: f0:ce:9e:c9:f3:b6:0c:bf:19:5b:4a:5b:59:11:33: a7:f7:57:da:9f:6e:34:7c:06:59:47:1d:99:dc:2a: 32:50:93:c3:46:ed:b0:dc:1f:98:cd:d9:c9:0c:33: 3a:c0:47:5d:45:74:9a:f9:45:34:14:1d:20:7a:45: e7:d6:9a:ec:9f:50:f9:a4:4e:1c:99:98:5d:e9:3b: 88:11:a0:ac:b7:9b:2a:cc:dc:a8:79:8e:88:b7:f6: de:fa:55:16:0b:cb:3c:63:5c:01:91:2e:3f:45:b2: d8:29:23:50:97:df:75:7d:8b:9b:2f:64:f0:bb:42: bb:20:5c:e8:6e:ec:3d:e6:7f:9b:2a:af:32:97:1f: 2e:0c:b3:f4:84:cf:b9:3a:38:ef:72:7b:1d:e6:ed: f6:89:c4:d3:ab:57:81:37:59:e9:71:b0:55:56:b1: 06:6d:b6:5a:42:22:56:92:70:01:99:c3:06:a2:3f: 17:55:13:8f:a3:5b:bb:90:a4:91:f4:56:ef:ce:3d: fc:d0:17:06:ae:ba:ca:70:d2:80:e1:bf:d3:47:21: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D6:3B:DE:22:24:55:0B:62:A5:A3:6D:58:21:54:3F:58:11:77:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b99a575-c696-3d6c-a848-88522920f0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f9:13:69:36:e9:e8:22:15:22:4e:21:6f:9f:3d:6a:a1:6f: a6:46:a3:de:16:d9:c4:05:86:dc:db:c4:d8:39:d8:74:f6:81: a2:a7:fd:00:a5:d4:84:ea:2f:f2:15:29:0f:50:9c:b5:88:af: bf:b4:5f:fa:e7:59:c2:6f:e4:2d:c1:82:0a:31:19:02:12:b7: fc:fb:85:01:4c:61:71:a7:3b:c9:c7:29:1f:a9:c5:74:1b:c7: be:7a:d4:a3:2f:df:eb:4d:5f:d4:2f:97:a5:11:68:0a:a5:2b: b8:bd:49:02:2b:0a:41:49:8f:75:da:ab:9f:52:ed:0a:18:46: 86:91:8a:85:85:cf:68:9d:54:76:78:6e:9f:34:26:8b:a6:72: bf:5a:a5:bd:93:19:f7:05:a9:7a:d5:90:c0:2d:1c:e1:06:bc: 33:85:2b:43:b3:99:1e:c4:9e:15:7d:b8:45:92:8b:b3:17:2d: a6:db:f3:6a:21:a7:bb:bd:17:92:1e:f2:08:b9:f8:46:31:6e: d4:f4:f9:af:da:74:fc:8e:d9:3b:e4:cf:9b:eb:d6:ac:2f:64: ba:03:bb:a8:6c:3f:af:74:62:8c:62:69:a0:aa:7e:19:62:7d: 97:74:e0:88:d1:77:62:28:53:51:69:e3:d9:29:a3:17:62:62: 8d:a8:fb:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+fbCmtgqLRPxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGFjYWY0YjUtYWI4NS00ODQyLWI1NTMtNTJmNzY5MTBmNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLnYjp1mgedAp+Mq42eCodf1KxQC4TptaGaK J8cPRIUXwUNlnmpTTFbRf3Hwzp7J87YMvxlbSltZETOn91fan240fAZZRx2Z3Coy UJPDRu2w3B+YzdnJDDM6wEddRXSa+UU0FB0gekXn1prsn1D5pE4cmZhd6TuIEaCs t5sqzNyoeY6It/be+lUWC8s8Y1wBkS4/RbLYKSNQl991fYubL2Twu0K7IFzobuw9 5n+bKq8ylx8uDLP0hM+5Ojjvcnsd5u32icTTq1eBN1npcbBVVrEGbbZaQiJWknAB mcMGoj8XVROPo1u7kKSR9Fbvzj380BcGrrrKcNKA4b/TRyHymQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXWO94iJFULYqWjbVghVD9YEXfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI5OWE1NzUtYzY5Ni0z ZDZjLWE4NDgtODg1MjI5MjBmMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIojAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb5E2k26egiFSJOIW+fPWqhb6ZGo94W2cQFhtzbxNg52HT2gaKn/QCl 1ITqL/IVKQ9QnLWIr7+0X/rnWcJv5C3BggoxGQISt/z7hQFMYXGnO8nHKR+pxXQb x7561KMv3+tNX9Qvl6URaAqlK7i9SQIrCkFJj3Xaq59S7QoYRoaRioWFz2idVHZ4 bp80Joumcr9apb2TGfcFqXrVkMAtHOEGvDOFK0OzmR7EnhV9uEWSi7MXLabb82oh p7u9F5Ie8gi5+EYxbtT0+a/adPyO2Tvkz5vr1qwvZLoDu6hsP690YoxiaaCqfhli fZd04IjRd2IoU1Fp49kpoxdiYo2o+9Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:59 2025 by rpki-client