$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3123dae0-66dd-3399-a6ac-be3aba46a983.roa File: 3123dae0-66dd-3399-a6ac-be3aba46a983.roa (raw, json) Hash identifier: fwJrXPd0ngJcIhqifsAt67Csw3rNZ8h/MfvNtviqi40= Subject key identifier: E3:AC:AE:A2:FB:9C:2A:94:72:93:68:7F:FE:A7:7E:3F:02:96:48:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5817817C32F72B4A2D726C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3123dae0-66dd-3399-a6ac-be3aba46a983.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:78:17:c3:2f:72:b4:a2:d7:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a0aed9f7-d002-4959-b97a-8611032dd719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:f4:5a:6a:e8:5c:19:e6:29:d5:ed:bc:67: e7:7c:6e:48:d9:63:6e:e9:b2:13:f4:70:96:5c:ed: ed:cd:72:e7:14:48:f1:45:4a:27:5d:1c:82:da:4a: 53:cd:82:54:d3:cf:25:c4:c6:71:1e:d8:f9:c8:35: 77:51:53:10:67:91:b5:b1:4a:c5:93:04:51:19:d2: b9:ea:be:2b:01:4d:a5:6c:91:54:7f:45:50:4e:10: 2c:bd:77:b3:02:12:bb:4f:df:2f:9d:61:bc:06:21: 01:97:8a:d3:30:0f:90:01:68:77:d0:62:a6:a1:23: 7a:5f:86:2a:35:06:18:b7:5d:68:de:52:57:e9:d1: d1:db:a8:83:ef:e3:b9:d1:d5:c3:ae:58:2d:cf:33: 90:e6:a2:87:b7:0a:0b:b5:81:37:70:38:fc:6e:bd: 56:6d:1c:77:15:e2:71:f6:3b:aa:8a:cf:ee:0c:8e: 0f:7a:a3:7c:36:1e:17:09:17:d7:16:f2:4b:b1:b7: 05:a1:fb:b8:16:6d:e0:f8:e4:39:b6:cd:32:05:a5: 23:de:fb:6e:6e:42:54:9e:0c:ea:ef:cb:18:e7:a3: 3e:eb:1f:90:80:27:23:3f:e1:a5:82:88:d0:b3:5e: 0e:a5:25:03:c4:f0:eb:d4:4e:c8:8f:96:f2:a6:77: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:AE:A2:FB:9C:2A:94:72:93:68:7F:FE:A7:7E:3F:02:96:48:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3123dae0-66dd-3399-a6ac-be3aba46a983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ab:6e:f7:2a:93:6c:d5:87:e9:fb:a1:59:d6:7b:4c:59:08: de:51:68:bd:c4:d5:0d:bb:3a:c0:a5:4a:c5:1d:e8:18:4f:17: 34:4c:1a:37:98:4f:e7:4d:d5:aa:86:29:94:e5:96:7a:2a:83: e1:d6:4e:e6:05:ed:a9:d1:59:07:c7:43:b4:07:68:1e:b3:7f: 53:e9:e1:70:72:c7:44:6d:bb:11:41:c8:ae:28:28:ec:2e:03: b5:9b:3b:f1:58:6b:c2:5b:bb:8b:d6:52:3c:59:47:c7:f2:f2: 6e:c1:3b:79:72:7e:cd:a5:8c:c7:3a:e3:fd:9e:e8:76:ae:e9: a9:1d:2f:31:27:1d:eb:21:0d:1d:f8:1f:c4:fd:ca:26:64:1c: 20:14:e6:be:c0:cd:81:32:f6:32:b8:7f:c9:8f:43:a2:d8:9e: 29:bd:42:7e:19:b7:45:95:53:e6:b7:12:60:4a:b3:dc:5a:12: f4:4e:1a:c5:13:40:b4:24:17:cc:1a:ab:d3:82:66:63:f0:ce: 57:42:ef:8e:c0:7d:33:f2:3a:9d:29:51:45:ca:37:8c:75:2e: 8a:38:e3:8a:f7:2c:44:12:12:ba:48:0a:02:ff:a3:72:2a:af: 59:df:e8:70:75:a3:ab:9d:cf:bf:84:6e:f6:36:80:dc:e1:54: 55:d7:34:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXgXwy9ytKLXJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTBhZWQ5ZjctZDAwMi00OTU5LWI5N2EtODYxMTAzMmRkNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucz0WmroXBnmKdXtvGfnfG5I2WNu6bIT9HCW XO3tzXLnFEjxRUonXRyC2kpTzYJU088lxMZxHtj5yDV3UVMQZ5G1sUrFkwRRGdK5 6r4rAU2lbJFUf0VQThAsvXezAhK7T98vnWG8BiEBl4rTMA+QAWh30GKmoSN6X4Yq NQYYt11o3lJX6dHR26iD7+O50dXDrlgtzzOQ5qKHtwoLtYE3cDj8br1WbRx3FeJx 9juqis/uDI4PeqN8Nh4XCRfXFvJLsbcFofu4Fm3g+OQ5ts0yBaUj3vtubkJUngzq 78sY56M+6x+QgCcjP+GlgojQs14OpSUDxPDr1E7Ij5bypnfClQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOsrqL7nCqUcpNof/6nfj8ClkhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzEyM2RhZTAtNjZkZC0z Mzk5LWE2YWMtYmUzYWJhNDZhOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCrbvcqk2zVh+n7oVnWe0xZCN5RaL3E1Q27OsClSsUd6BhPFzRMGjeY T+dN1aqGKZTllnoqg+HWTuYF7anRWQfHQ7QHaB6zf1Pp4XByx0RtuxFByK4oKOwu A7WbO/FYa8Jbu4vWUjxZR8fy8m7BO3lyfs2ljMc64/2e6Hau6akdLzEnHeshDR34 H8T9yiZkHCAU5r7AzYEy9jK4f8mPQ6LYnim9Qn4Zt0WVU+a3EmBKs9xaEvROGsUT QLQkF8waq9OCZmPwzldC747AfTPyOp0pUUXKN4x1Loo444r3LEQSErpICgL/o3Iq r1nf6HB1o6udz7+EbvY2gNzhVFXXNCc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:35 2025 by rpki-client