$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa File: 33ce8402-8a94-3eab-b082-24afe422f714.roa (raw, json) Hash identifier: wj/Or8Av+WvmzaSAb4iur4KJuA43quel5g63wYu7OCk= Subject key identifier: 79:28:80:60:C7:0D:65:F1:4D:7E:70:E2:95:A3:B8:4E:45:50:CD:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0D0095A0A5423E4A9F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.68.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0d:00:95:a0:a5:42:3e:4a:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=115cfc31-e7dd-4c70-bf10-0ac24f3e6117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:46:6e:e5:3c:3a:3b:fa:e6:3e:ed:7e:b0: 58:dd:6f:1c:5e:e9:0a:f0:27:52:4c:df:c9:42:74: 4a:39:3a:9c:6a:53:74:af:b6:84:31:50:32:a1:d3: 94:86:73:a9:86:aa:27:6b:c4:3b:20:1b:95:74:8f: a2:45:5b:48:0d:bf:31:69:e3:a7:21:64:67:23:10: 2a:0f:d1:f9:6b:9f:3f:57:a8:f6:41:2d:c9:d9:26: 94:13:8c:0d:c3:f1:19:2e:7a:b9:86:cc:bb:67:fd: 8a:39:16:2d:dd:f3:6e:d0:8c:89:b8:e1:a0:01:7f: 46:28:6f:d2:cc:5d:a3:6d:60:69:c7:5e:08:af:f1: f6:87:7d:cb:ab:3a:4c:dc:99:1f:47:90:61:05:87: 2b:9b:47:36:70:3e:2c:8b:c0:98:fb:66:30:c7:6a: bc:75:39:19:39:ce:bc:e2:57:d9:8d:eb:74:e6:e3: 62:b6:b7:b8:7d:6e:0b:26:3d:7a:c4:7b:80:b3:76: ba:cb:08:7c:dd:cd:b2:d5:3a:a4:e8:77:28:43:e0: e8:cb:89:7f:d2:ac:bf:57:ec:8f:59:a1:ab:f0:d9: 39:63:2e:0d:40:d9:f5:4e:d9:95:2c:26:13:ad:f9: 84:40:15:6a:ea:ae:10:2d:a1:e4:aa:48:49:5a:41: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:28:80:60:C7:0D:65:F1:4D:7E:70:E2:95:A3:B8:4E:45:50:CD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33ce8402-8a94-3eab-b082-24afe422f714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7d:8d:41:4d:8f:e5:ef:cb:cc:f3:d7:b6:3e:6b:6b:84:f4: 02:94:c4:05:e9:91:88:34:95:06:3f:2e:55:aa:c4:72:29:58: ea:6a:99:bd:40:e8:a4:1a:a3:7d:c2:58:c3:56:26:74:38:84: db:30:fc:84:e4:d1:d7:0d:ab:eb:cc:d5:55:f6:f9:a5:76:b0: fb:16:91:ab:a0:0d:07:d9:df:d1:dc:e7:c1:4a:3a:30:a3:1f: b2:71:86:5b:82:8c:4c:c3:d0:88:85:be:dc:88:51:0e:64:2f: 60:77:a4:db:0a:8d:ae:d9:c8:61:dc:71:91:28:5c:8f:fa:da: a7:f8:b8:fc:ce:20:5b:7e:68:ec:1c:02:4d:26:84:3f:63:6d: 3e:ed:c8:93:3b:b1:41:cf:0e:22:99:19:bb:2d:c9:3a:68:f3: 65:3f:62:02:c7:05:13:4f:c8:c3:06:47:a2:79:30:6f:89:72: f6:d7:cf:3b:e8:53:6b:d7:14:f8:3d:69:34:aa:7b:96:21:35: 46:37:cf:45:de:e3:50:b9:d6:91:7a:69:65:3d:e1:5f:6c:99: 0c:47:e3:bf:07:d1:55:e5:57:1a:8d:e5:54:ae:be:40:b8:d3: be:ed:35:24:53:64:96:33:bc:14:37:31:cf:58:18:a9:5a:d9: 6d:93:5a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA0AlaClQj5Kn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTE1Y2ZjMzEtZTdkZC00YzcwLWJmMTAtMGFjMjRmM2U2MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2RGbuU8Ojv65j7tfrBY3W8cXukK8CdSTN/J QnRKOTqcalN0r7aEMVAyodOUhnOphqona8Q7IBuVdI+iRVtIDb8xaeOnIWRnIxAq D9H5a58/V6j2QS3J2SaUE4wNw/EZLnq5hsy7Z/2KORYt3fNu0IyJuOGgAX9GKG/S zF2jbWBpx14Ir/H2h33LqzpM3JkfR5BhBYcrm0c2cD4si8CY+2Ywx2q8dTkZOc68 4lfZjet05uNitre4fW4LJj16xHuAs3a6ywh83c2y1Tqk6HcoQ+Doy4l/0qy/V+yP WaGr8Nk5Yy4NQNn1TtmVLCYTrfmEQBVq6q4QLaHkqkhJWkHpQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkogGDHDWXxTX5w4pWjuE5FUM3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjZTg0MDItOGE5NC0z ZWFiLWIwODItMjRhZmU0MjJmNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV9jUFNj+Xvy8zz17Y+a2uE9AKUxAXpkYg0lQY/LlWqxHIpWOpqmb1A 6KQao33CWMNWJnQ4hNsw/ITk0dcNq+vM1VX2+aV2sPsWkaugDQfZ39Hc58FKOjCj H7JxhluCjEzD0IiFvtyIUQ5kL2B3pNsKja7ZyGHccZEoXI/62qf4uPzOIFt+aOwc Ak0mhD9jbT7tyJM7sUHPDiKZGbstyTpo82U/YgLHBRNPyMMGR6J5MG+JcvbXzzvo U2vXFPg9aTSqe5YhNUY3z0Xe41C51pF6aWU94V9smQxH478H0VXlVxqN5VSuvkC4 077tNSRTZJYzvBQ3Mc9YGKla2W2TWj8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:15 2025 by rpki-client