$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa File: 36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa (raw, json) Hash identifier: nmkV8+IwR/h2xNI/FKF5t86N96R7CNNV4IJuO5QH9cI= Subject key identifier: 55:AA:EE:31:53:61:24:B5:96:55:F6:25:19:47:18:2A:FD:93:C9:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE9719ECB1D31F21B9580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.67.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e9:71:9e:cb:1d:31:f2:1b:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c3bb09cf-68d1-4f06-b439-d8d9eb21dfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:a7:db:04:d7:e9:e5:9e:b2:a0:bd:68:83: f6:68:81:28:48:8f:b8:bd:66:5c:0a:e9:8a:9a:f6: aa:25:df:2a:ec:f4:29:3f:3f:a7:e2:82:a2:d1:03: 13:e5:8f:35:dd:8a:70:56:24:41:4e:6b:db:18:81: 8d:33:18:fb:62:81:12:ab:c8:60:77:1e:63:34:1a: 2f:df:0b:a7:c2:c8:1c:52:4f:44:15:fa:51:0b:ad: 71:95:00:14:ef:de:fa:77:e7:8a:dc:df:52:4b:a9: c2:b3:d0:7b:de:06:14:0f:b6:78:30:c8:f2:5f:db: d1:c8:1c:7f:93:0e:62:c3:8b:31:c3:53:83:25:e3: c5:2f:e5:81:d2:4f:70:ee:bb:2f:13:fc:0e:88:2e: 8c:fd:05:c8:2e:ff:1f:d5:af:46:69:cf:7c:f4:90: 95:8b:d4:f2:aa:5b:19:38:30:ea:07:2e:d1:86:10: ed:0b:bc:40:34:3b:0c:42:d8:74:1e:2d:62:6c:ae: 46:cb:af:7f:fb:e4:60:fd:d9:57:90:84:51:e7:bb: 09:91:fa:69:a3:7b:6b:45:0f:de:e6:42:14:5b:00: 42:1d:a9:ab:d0:9e:80:9e:7c:f9:36:8e:79:79:1d: 3f:c3:34:45:fa:08:43:c0:f3:74:89:36:d1:8b:b7: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AA:EE:31:53:61:24:B5:96:55:F6:25:19:47:18:2A:FD:93:C9:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36d17e75-8f9b-3b82-89e4-40d5102bf3b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:60:d7:5b:f6:1c:12:08:7d:b9:b9:b0:eb:79:0d:21:16:69: 88:16:ad:06:bb:af:1d:4c:ab:07:a5:10:8e:c4:c8:b9:13:cc: 1f:21:11:fc:78:f6:c5:0b:a7:d1:61:4b:54:6a:d8:6d:bb:77: 20:10:2f:f0:74:71:e8:eb:d9:07:5a:24:28:c2:6b:5f:33:a0: d7:12:87:bf:2c:97:c7:ce:e5:b0:3b:a2:13:6a:3a:c8:93:2a: 8e:55:88:f4:ed:49:40:df:31:8d:cd:59:5e:2c:40:c5:9f:10: 6c:77:41:73:6f:70:b0:02:a8:fb:f0:8e:8b:ab:29:b7:3e:2c: 4b:1f:0b:e6:1f:43:4c:1d:70:6b:83:c5:f3:57:c4:b6:57:79: 6a:8a:44:12:c9:be:de:3e:7a:fa:d2:a3:76:04:9a:bc:38:5b: 59:b5:e4:2b:fc:42:f3:e0:42:16:1b:6b:02:13:ef:1c:c2:13: 31:88:ba:93:4b:ca:30:e0:7e:28:d2:53:f4:f4:1c:a2:e8:a0: 0c:82:6f:fb:cb:0a:ad:aa:46:ef:f8:b8:a7:79:d9:33:fe:23: 89:56:23:0e:14:3e:da:5b:f7:13:bd:80:ce:a5:d6:f2:c0:fa: 24:5e:c4:4c:aa:9c:98:e4:78:49:60:67:5d:5e:98:59:42:90: 3a:58:13:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+lxnssdMfIblYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzNiYjA5Y2YtNjhkMS00ZjA2LWI0MzktZDhkOWViMjFkZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKn2wTX6eWesqC9aIP2aIEoSI+4vWZcCumK mvaqJd8q7PQpPz+n4oKi0QMT5Y813YpwViRBTmvbGIGNMxj7YoESq8hgdx5jNBov 3wunwsgcUk9EFfpRC61xlQAU7976d+eK3N9SS6nCs9B73gYUD7Z4MMjyX9vRyBx/ kw5iw4sxw1ODJePFL+WB0k9w7rsvE/wOiC6M/QXILv8f1a9Gac989JCVi9TyqlsZ ODDqBy7RhhDtC7xANDsMQth0Hi1ibK5Gy69/++Rg/dlXkIRR57sJkfppo3trRQ/e 5kIUWwBCHamr0J6Annz5No55eR0/wzRF+ghDwPN0iTbRi7evvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWq7jFTYSS1llX2JRlHGCr9k8nnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkMTdlNzUtOGY5Yi0z YjgyLTg5ZTQtNDBkNTEwMmJmM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJg11v2HBIIfbm5sOt5DSEWaYgWrQa7rx1MqwelEI7EyLkTzB8hEfx4 9sULp9FhS1Rq2G27dyAQL/B0cejr2QdaJCjCa18zoNcSh78sl8fO5bA7ohNqOsiT Ko5ViPTtSUDfMY3NWV4sQMWfEGx3QXNvcLACqPvwjourKbc+LEsfC+YfQ0wdcGuD xfNXxLZXeWqKRBLJvt4+evrSo3YEmrw4W1m15Cv8QvPgQhYbawIT7xzCEzGIupNL yjDgfijSU/T0HKLooAyCb/vLCq2qRu/4uKd52TP+I4lWIw4UPtpb9xO9gM6l1vLA +iRexEyqnJjkeElgZ11emFlCkDpYE50= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:08 2025 by rpki-client