$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa File: 35c73c0f-5a56-35db-aec9-f816488f7467.roa (raw, json) Hash identifier: mbrGvU7YC5XmsUjMqtW7PTS07XmgX8BqvH7hDlxR8Gw= Subject key identifier: 00:09:32:1C:9D:05:E0:12:43:FF:A4:B0:9A:53:25:D1:1E:A5:7A:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDF2817ADF6B2E2400680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.97.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:df:28:17:ad:f6:b2:e2:40:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c1a94a40-70ce-47b2-8de3-ce56413ff470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7d:b6:db:16:31:9f:05:81:24:20:ba:06:bf: ef:0e:ce:32:ca:fe:3c:bc:32:a1:3f:41:5a:1d:87: 65:ae:b0:fe:20:48:d8:cf:77:1d:b8:28:0a:84:f5: b0:d8:84:ad:3c:97:87:c7:2f:24:85:cf:2d:e6:53: 87:90:c6:f6:16:9b:2b:9a:8e:22:39:b0:79:01:3e: 90:bf:7b:fd:3e:5f:2b:56:b6:48:50:c0:87:b5:29: 36:de:6f:ba:12:f8:e3:ea:d0:80:d1:8b:e7:fd:a7: 83:73:7a:8e:80:eb:61:41:01:48:46:3a:6a:d7:26: 8a:b4:ae:72:cb:c7:b8:e9:62:6e:c8:cc:97:ec:7d: 24:8a:dd:07:3f:9d:07:5d:a2:a7:81:66:39:2a:98: 3f:8f:37:94:6b:6b:9e:f3:08:72:72:03:d5:85:5b: 7a:8d:92:f3:f7:bd:56:06:03:98:b8:ed:81:fc:58: f2:94:3d:d2:7a:4d:30:2f:82:5a:ed:7f:28:b9:a4: 9f:58:6f:57:bd:55:bf:e5:b5:74:9c:fc:7b:32:74: c7:dc:a3:51:8b:c9:94:2d:c4:9b:16:34:22:53:28: a2:50:2b:98:55:34:13:24:50:22:53:0e:97:80:0f: 19:d7:d8:19:ed:cf:66:92:bb:0f:99:eb:7d:1c:f5: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:09:32:1C:9D:05:E0:12:43:FF:A4:B0:9A:53:25:D1:1E:A5:7A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b5:73:fe:71:c5:c2:72:c7:11:d5:72:41:d7:70:3b:8a:1f: 0a:3f:75:17:39:b0:d4:7c:c2:c8:fc:29:58:fd:d5:08:fb:44: 4f:20:95:58:fb:be:b8:cd:99:90:d6:71:4d:a8:b8:47:06:4f: b4:90:d2:3d:8b:44:0a:55:27:9f:44:c0:0b:24:f3:c2:21:61: 50:56:63:4d:3b:b2:14:88:92:c8:e7:da:47:1d:8a:f9:0a:62: 5f:2a:fd:20:48:e2:a4:77:6a:f6:8e:69:e7:37:b2:d2:79:cd: d6:66:26:e9:f8:3b:0a:58:81:16:d3:e3:13:6b:67:82:33:73: 47:b6:5b:86:01:70:4d:05:ec:84:7f:58:a3:5a:7d:f7:62:26: fa:c6:de:e2:f0:d2:c8:ef:db:fd:05:5c:45:8c:e1:53:9a:45: 03:16:22:6d:72:d1:51:e4:15:d7:09:6a:21:f7:9d:02:e5:3f: e6:d7:4f:7c:f4:65:a8:a7:34:38:d5:84:7c:7f:b1:67:ec:0e: 9a:d3:14:2c:c3:1a:e8:96:2b:8c:e2:31:f6:cf:85:fd:dc:00: 6d:73:09:ba:2e:07:1f:81:04:9a:0e:16:cb:61:ea:64:96:bf: 27:3b:b7:93:b8:78:f6:57:e9:79:b2:f5:dd:bb:cc:36:ae:25: 68:c2:8d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS98oF632suJABoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzFhOTRhNDAtNzBjZS00N2IyLThkZTMtY2U1NjQxM2ZmNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73222xYxnwWBJCC6Br/vDs4yyv48vDKhP0Fa HYdlrrD+IEjYz3cduCgKhPWw2IStPJeHxy8khc8t5lOHkMb2Fpsrmo4iObB5AT6Q v3v9Pl8rVrZIUMCHtSk23m+6Evjj6tCA0Yvn/aeDc3qOgOthQQFIRjpq1yaKtK5y y8e46WJuyMyX7H0kit0HP50HXaKngWY5Kpg/jzeUa2ue8whycgPVhVt6jZLz971W BgOYuO2B/FjylD3Sek0wL4Ja7X8ouaSfWG9XvVW/5bV0nPx7MnTH3KNRi8mULcSb FjQiUyiiUCuYVTQTJFAiUw6XgA8Z19gZ7c9mkrsPmet9HPVBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAJMhydBeASQ/+ksJpTJdEepXpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVjNzNjMGYtNWE1Ni0z NWRiLWFlYzktZjgxNjQ4OGY3NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+1c/5xxcJyxxHVckHXcDuKHwo/dRc5sNR8wsj8KVj91Qj7RE8glVj7 vrjNmZDWcU2ouEcGT7SQ0j2LRApVJ59EwAsk88IhYVBWY007shSIksjn2kcdivkK Yl8q/SBI4qR3avaOaec3stJ5zdZmJun4OwpYgRbT4xNrZ4Izc0e2W4YBcE0F7IR/ WKNaffdiJvrG3uLw0sjv2/0FXEWM4VOaRQMWIm1y0VHkFdcJaiH3nQLlP+bXT3z0 ZainNDjVhHx/sWfsDprTFCzDGuiWK4ziMfbPhf3cAG1zCbouBx+BBJoOFsth6mSW vyc7t5O4ePZX6Xmy9d27zDauJWjCjY8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:43 2025 by rpki-client