$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa File: 2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa (raw, json) Hash identifier: OMiRJEx5vq9M7YHe17viv9xPS2LmQTDa/haR+4ZyFT8= Subject key identifier: 5A:AC:E1:07:EE:09:0B:D9:A7:0B:E4:F8:66:B1:99:45:1E:46:88:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0037E6BB9D994EF0AFA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.85.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:00:37:e6:bb:9d:99:4e:f0:af:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4241edcf-05e2-4136-95bd-6fc434380487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:29:9d:48:0a:88:d4:00:02:49:5a:21:42:58: e0:31:a6:49:79:46:16:23:45:13:9e:21:fa:06:71: 07:b2:0f:cf:33:f4:b3:08:2b:6f:0b:7a:ba:b9:fb: bc:a5:0b:3a:55:30:9d:da:c8:12:5e:57:72:5b:cd: 2b:56:e8:00:c9:de:5b:24:2e:50:33:41:f8:9d:17: 17:87:5b:3a:97:88:26:90:6c:62:bb:68:1a:b8:a6: ef:f7:66:19:1f:3c:87:b7:e7:44:f0:6a:35:2f:43: 40:4c:6d:2b:1d:32:4c:c9:f4:ad:65:84:f0:da:bd: 15:b4:ad:4a:f4:d4:99:e3:2c:b3:e6:a9:fe:33:89: ee:66:de:1a:3f:d1:24:e8:6f:a5:b0:f2:68:4f:5c: 3c:cb:6c:9a:2a:6e:67:04:68:89:3d:36:ea:da:b0: e5:70:e7:cd:02:57:6d:fa:c9:5a:2f:97:78:05:96: 3d:e1:ea:c8:04:8b:ca:9e:17:13:0e:b7:2a:9f:ec: 77:33:b6:4b:e3:75:2c:40:c5:4e:49:ff:ac:bb:13: cf:fb:23:3e:af:45:98:c7:93:73:77:29:19:ff:59: 46:f2:20:c2:e4:c7:fb:9e:0d:4f:7c:6e:f0:70:a2: 6c:34:ec:5d:b7:84:46:1d:27:80:58:8f:91:08:3a: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:E1:07:EE:09:0B:D9:A7:0B:E4:F8:66:B1:99:45:1E:46:88:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ffb7e5a-ce30-3b76-a5ed-0406f821ee49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:bc:50:58:84:4d:28:96:83:62:7e:da:77:be:9a:f5:9e:33: 8c:69:cc:8d:21:08:50:b1:7e:d3:7b:70:8f:bb:64:54:88:06: 37:28:e0:7c:bf:c6:47:2d:20:24:ed:3b:d5:b3:e1:66:6f:ef: 75:ec:6a:24:61:44:1d:07:4c:b8:89:35:b9:1c:90:bf:26:ca: d2:0b:9d:85:85:00:62:84:3b:14:e4:70:32:f6:31:a6:ae:7a: 65:dc:20:82:2c:35:9a:54:1f:16:4b:30:a6:6a:88:40:7b:91: 42:2e:07:4a:76:c5:62:cf:bb:76:77:2e:18:fa:20:b7:13:c2: 53:ee:72:cf:13:9f:f4:55:3f:ae:0e:5d:19:fd:72:36:63:2f: 19:71:30:e5:e5:ed:0a:cf:e6:11:05:a2:e6:2a:1f:a3:8b:dc: 5c:da:9b:57:c2:4f:b8:56:02:a8:04:ff:28:19:ab:38:dc:42: 9c:ca:0d:dc:96:03:26:f8:c1:89:39:f4:bc:da:24:66:4e:78: 91:83:b0:fb:48:69:69:e5:07:2a:2c:53:5f:c9:a2:5d:91:7e: 3c:a5:4c:cc:ff:f0:be:17:fe:41:15:50:5a:40:34:fa:0e:36: 4c:bc:93:2c:ea:9e:7f:50:5a:52:0b:14:25:fd:cb:c6:15:0f: e6:88:12:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAA35rudmU7wr6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDI0MWVkY2YtMDVlMi00MTM2LTk1YmQtNmZjNDM0MzgwNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkimdSAqI1AACSVohQljgMaZJeUYWI0UTniH6 BnEHsg/PM/SzCCtvC3q6ufu8pQs6VTCd2sgSXldyW80rVugAyd5bJC5QM0H4nRcX h1s6l4gmkGxiu2gauKbv92YZHzyHt+dE8Go1L0NATG0rHTJMyfStZYTw2r0VtK1K 9NSZ4yyz5qn+M4nuZt4aP9Ek6G+lsPJoT1w8y2yaKm5nBGiJPTbq2rDlcOfNAldt +slaL5d4BZY94erIBIvKnhcTDrcqn+x3M7ZL43UsQMVOSf+suxPP+yM+r0WYx5Nz dykZ/1lG8iDC5Mf7ng1PfG7wcKJsNOxdt4RGHSeAWI+RCDr3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqs4QfuCQvZpwvk+GaxmUUeRojzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZmYjdlNWEtY2UzMC0z Yjc2LWE1ZWQtMDQwNmY4MjFlZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK8UFiETSiWg2J+2ne+mvWeM4xpzI0hCFCxftN7cI+7ZFSIBjco4Hy/ xkctICTtO9Wz4WZv73XsaiRhRB0HTLiJNbkckL8mytILnYWFAGKEOxTkcDL2Maau emXcIIIsNZpUHxZLMKZqiEB7kUIuB0p2xWLPu3Z3Lhj6ILcTwlPucs8Tn/RVP64O XRn9cjZjLxlxMOXl7QrP5hEFouYqH6OL3Fzam1fCT7hWAqgE/ygZqzjcQpzKDdyW Ayb4wYk59LzaJGZOeJGDsPtIaWnlByosU1/Jol2RfjylTMz/8L4X/kEVUFpANPoO Nky8kyzqnn9QWlILFCX9y8YVD+aIEgo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:48 2025 by rpki-client