$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa File: 2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa (raw, json) Hash identifier: ctAQtVrgCp/S4RABCvYXTz29KrdhZNerMs66qqZTDqY= Subject key identifier: 60:7D:21:9A:CF:5D:E8:C4:5B:14:FC:83:D6:92:0A:E0:97:DC:10:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF581732CE5A0D84C5E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.91.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f5:81:73:2c:e5:a0:d8:4c:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2ca3420a-2f2c-4a17-84d3-da868c64b35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:7b:3b:b8:4b:50:ee:f9:cf:fc:c0:ec:c7: 69:f1:7b:4d:15:96:b9:70:d0:c0:f6:04:3b:84:cc: 89:cb:c1:be:aa:0b:09:a3:cc:65:e3:4c:b8:50:dd: e2:e6:cc:3f:60:9c:ab:2d:86:30:44:b6:0c:dd:b8: 10:a3:c6:75:d1:1d:d4:25:99:4b:25:e8:28:10:18: ce:ad:7f:b1:0c:d7:70:48:71:66:ef:7d:28:13:f7: 23:44:16:25:40:d6:61:78:26:e8:f9:62:cb:34:35: 91:d9:79:7b:05:1e:84:22:fe:7e:69:ef:e4:0d:96: 3a:83:c2:eb:c1:70:ff:11:6c:ad:cf:5d:89:4a:22: 76:78:18:36:21:b7:dc:e9:14:cc:ce:0c:4d:ae:ab: 98:87:eb:ef:13:2c:69:0c:88:dd:6f:22:d5:96:6b: 81:0e:91:de:a9:ff:a0:c7:3c:e6:bd:76:31:65:b7: 52:7a:9d:39:2b:c7:4f:3c:de:9f:9d:bc:b9:72:c5: 29:7e:72:5c:5d:99:ee:19:1b:d5:d2:81:70:f5:5e: b5:c4:5b:e2:e5:5e:fd:d5:f8:66:a3:cb:91:55:c7: 9f:ba:58:74:b1:0f:2b:c0:7a:90:e0:bb:73:1c:3f: dd:15:47:32:d0:25:ac:c7:a1:7c:4b:08:1a:d4:ea: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7D:21:9A:CF:5D:E8:C4:5B:14:FC:83:D6:92:0A:E0:97:DC:10:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5dd307-17ba-331d-92b9-e7ee09ef8339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ce:c6:7a:0a:03:f9:08:f6:46:ae:ef:7e:23:f7:19:4e:a9: a7:cc:2f:ea:0a:55:a2:6a:f6:61:36:d7:77:80:0a:b5:3a:31: 91:13:c2:61:42:3a:38:e2:97:00:83:39:36:b0:b4:df:34:af: 75:1f:b8:5c:44:f0:ea:93:ee:a2:51:88:52:ab:bd:de:fe:70: 30:cb:67:82:1b:b0:b1:31:83:e7:e7:aa:4b:56:bd:73:6c:be: 4e:8e:ea:f2:00:de:21:ca:66:3a:c7:2f:31:c2:49:cd:64:0b: d2:d1:2d:bf:be:fb:88:15:26:9a:ae:cf:96:3b:27:b2:ee:7d: 71:a2:49:90:30:12:6c:cd:d8:9c:d3:fe:2d:9a:88:34:49:5c: d9:b6:74:01:c8:08:5d:8b:59:9d:c1:25:45:ba:42:5b:9b:7f: 09:ad:a3:f9:2d:96:37:f0:ed:67:42:7a:cc:fc:46:fe:fd:dd: bb:d9:eb:e7:96:3d:cd:64:ef:f5:42:f0:14:ff:0f:67:88:f5: 69:44:1a:c0:c2:28:d2:53:bf:87:99:74:4f:78:8b:15:f9:cf: 8c:c4:1e:b8:f2:66:ae:af:38:f5:09:ed:a9:b8:67:33:93:9f: 68:43:d1:76:75:a6:e8:ff:9e:e6:c6:33:cc:55:c4:59:72:82: 5b:83:98:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/WBcyzloNhMXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmNhMzQyMGEtMmYyYy00YTE3LTg0ZDMtZGE4NjhjNjRiMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wV7O7hLUO75z/zA7Mdp8XtNFZa5cNDA9gQ7 hMyJy8G+qgsJo8xl40y4UN3i5sw/YJyrLYYwRLYM3bgQo8Z10R3UJZlLJegoEBjO rX+xDNdwSHFm730oE/cjRBYlQNZheCbo+WLLNDWR2Xl7BR6EIv5+ae/kDZY6g8Lr wXD/EWytz12JSiJ2eBg2Ibfc6RTMzgxNrquYh+vvEyxpDIjdbyLVlmuBDpHeqf+g xzzmvXYxZbdSep05K8dPPN6fnby5csUpfnJcXZnuGRvV0oFw9V61xFvi5V791fhm o8uRVcefulh0sQ8rwHqQ4LtzHD/dFUcy0CWsx6F8Swga1OolKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB9IZrPXejEWxT8g9aSCuCX3BCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1ZGQzMDctMTdiYS0z MzFkLTkyYjktZTdlZTA5ZWY4MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7OxnoKA/kI9kau734j9xlOqafML+oKVaJq9mE213eACrU6MZETwmFC OjjilwCDOTawtN80r3UfuFxE8OqT7qJRiFKrvd7+cDDLZ4IbsLExg+fnqktWvXNs vk6O6vIA3iHKZjrHLzHCSc1kC9LRLb+++4gVJpquz5Y7J7LufXGiSZAwEmzN2JzT /i2aiDRJXNm2dAHICF2LWZ3BJUW6Qlubfwmto/ktljfw7WdCesz8Rv793bvZ6+eW Pc1k7/VC8BT/D2eI9WlEGsDCKNJTv4eZdE94ixX5z4zEHrjyZq6vOPUJ7am4ZzOT n2hD0XZ1puj/nubGM8xVxFlygluDmNY= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:29 2025 by rpki-client