$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa File: 3183701f-09a0-3cb7-adc2-b652597c335e.roa (raw, json) Hash identifier: n0wOXlSC/WWBEZlFRQkPz2pvrLC7KPj+tUVllbVukh0= Subject key identifier: 68:18:40:3B:48:66:55:72:F4:5A:A6:12:73:75:C2:22:4D:CB:D8:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C185E99193A91DA063480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.96.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:18:5e:99:19:3a:91:da:06:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=8e565190-f1ef-4d65-b38a-17b0a53163f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:97:a7:16:6d:05:91:12:42:7e:04:b3:ee: dd:c0:b1:a9:21:81:f8:67:c4:58:cc:c4:1d:d9:91: b8:4e:54:14:35:6a:89:7d:04:a6:7b:fa:d6:0e:55: 51:0f:5c:05:f7:0f:fb:9b:6d:31:6b:b1:74:af:a6: d5:dc:d7:f9:7e:81:9f:4f:cc:e3:a4:8f:b9:44:3e: fd:fd:55:90:0d:01:66:d2:09:98:10:54:18:3c:0c: 0f:37:37:a5:db:a4:ff:56:f1:6d:e2:49:f7:7e:02: 51:c9:45:ef:84:23:65:8f:1d:1a:30:9c:61:62:ea: 25:23:fd:e8:92:54:fc:ba:35:99:42:f4:7e:a9:50: 64:54:04:18:df:82:db:cf:1f:4d:83:ea:fc:ed:ae: 91:8a:16:d0:cd:ce:4d:62:44:01:c6:bd:5d:cb:fe: e4:88:35:52:e2:06:3a:f4:f3:4a:ea:03:56:35:5e: 0d:b0:c0:fe:44:81:29:59:02:6f:bf:79:94:7d:48: ac:eb:01:8f:bf:01:4b:5d:fe:3a:86:4c:ce:33:0e: 95:be:5d:fa:3f:fb:71:52:11:64:ce:eb:35:0e:11: 9d:bb:46:41:e3:5c:17:29:4f:21:30:2d:1e:fe:80: fc:90:a2:2c:38:0b:27:3e:6b:58:55:bd:bb:88:36: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:40:3B:48:66:55:72:F4:5A:A6:12:73:75:C2:22:4D:CB:D8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3183701f-09a0-3cb7-adc2-b652597c335e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5c:92:14:b9:5f:f5:a6:8c:26:a2:b0:ed:9b:29:4a:f0:ff: 80:69:02:78:e6:a2:45:66:e3:82:c4:49:83:d0:ce:32:0e:ac: a1:f5:f5:38:32:0b:23:9b:cd:19:d2:04:b8:12:b5:52:27:2b: a3:16:d1:05:78:c3:17:bf:1d:97:57:1f:03:00:9b:fa:db:28: 8f:36:0e:8d:cf:77:ee:23:bd:01:fa:63:ea:d1:a3:2a:54:92: 62:05:fb:98:46:7f:5a:5b:f6:4b:68:a6:24:67:ea:96:fe:11: e3:4b:e6:9a:3d:1a:76:8f:91:cb:b0:a0:11:84:53:f1:e2:d5: cd:c8:ab:2d:73:cc:78:1e:ed:de:dc:7d:15:fc:7e:6f:e7:96: b1:42:6d:e9:f4:f3:e0:ba:ac:38:61:81:d0:9b:f9:6b:e2:97: 9e:02:98:9a:f4:dc:dc:78:75:53:73:b6:7f:a0:32:df:40:08: aa:8c:76:dc:af:ed:12:56:0f:47:cc:c0:38:01:18:24:9b:1f: 88:2c:3c:f3:22:f1:da:d7:eb:98:7e:47:17:53:14:ea:64:e5: 6c:21:35:8d:6a:a0:aa:e9:1f:fc:c0:54:79:93:76:94:8c:db: b7:7b:41:cb:1f:a0:bb:22:2c:77:9f:c6:5d:96:1d:04:60:42: 74:cf:cb:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBhemRk6kdoGNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OGU1NjUxOTAtZjFlZi00ZDY1LWIzOGEtMTdiMGE1MzE2M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC+XpxZtBZESQn4Es+7dwLGpIYH4Z8RYzMQd 2ZG4TlQUNWqJfQSme/rWDlVRD1wF9w/7m20xa7F0r6bV3Nf5foGfT8zjpI+5RD79 /VWQDQFm0gmYEFQYPAwPNzel26T/VvFt4kn3fgJRyUXvhCNljx0aMJxhYuolI/3o klT8ujWZQvR+qVBkVAQY34Lbzx9Ng+r87a6RihbQzc5NYkQBxr1dy/7kiDVS4gY6 9PNK6gNWNV4NsMD+RIEpWQJvv3mUfUis6wGPvwFLXf46hkzOMw6Vvl36P/txUhFk zus1DhGdu0ZB41wXKU8hMC0e/oD8kKIsOAsnPmtYVb27iDZmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgYQDtIZlVy9FqmEnN1wiJNy9gRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE4MzcwMWYtMDlhMC0z Y2I3LWFkYzItYjY1MjU5N2MzMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClckhS5X/WmjCaisO2bKUrw/4BpAnjmokVm44LESYPQzjIOrKH19Tgy CyObzRnSBLgStVInK6MW0QV4wxe/HZdXHwMAm/rbKI82Do3Pd+4jvQH6Y+rRoypU kmIF+5hGf1pb9ktopiRn6pb+EeNL5po9GnaPkcuwoBGEU/Hi1c3Iqy1zzHge7d7c fRX8fm/nlrFCben08+C6rDhhgdCb+Wvil54CmJr03Nx4dVNztn+gMt9ACKqMdtyv 7RJWD0fMwDgBGCSbH4gsPPMi8drX65h+RxdTFOpk5WwhNY1qoKrpH/zAVHmTdpSM 27d7QcsfoLsiLHefxl2WHQRgQnTPy48= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:01 2025 by rpki-client