$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3749a87f-6fe5-3c19-92fe-858b32d98221.roa File: 3749a87f-6fe5-3c19-92fe-858b32d98221.roa (raw, json) Hash identifier: v71sNbaUpgZAFSfPaK5RoGJUQWZompcbRKSw8LU1rbA= Subject key identifier: 68:91:C2:CA:D9:8B:C3:C6:DB:59:55:F3:8E:FC:44:D7:10:F6:F5:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C087AAE140CFC91CB2180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3749a87f-6fe5-3c19-92fe-858b32d98221.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.71.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:08:7a:ae:14:0c:fc:91:cb:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3fab2d2b-56e2-42d6-b299-f335c8de49bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:df:34:f9:e3:4f:b0:62:26:fa:b2:df:cf: 56:d0:5e:75:06:2a:ae:b2:7d:1b:d4:d2:12:55:ea: dc:48:72:61:93:b1:4a:37:03:47:06:98:2c:8a:c2: 69:fd:37:6d:5b:5e:a7:06:47:fa:06:86:39:6b:9d: 7a:61:b4:1a:7e:88:1c:61:c4:d1:7c:5a:c9:2b:bf: 81:e7:90:6a:0b:f1:79:0e:ff:52:81:95:77:dd:22: e2:fb:3a:1f:1f:33:7f:2e:f4:f2:d9:93:78:6a:61: e3:44:5c:8e:11:f9:ea:4f:84:b4:a4:23:bf:43:34: c0:7b:7a:c8:12:d9:d2:07:17:80:c4:dd:06:5f:fd: b6:c6:e7:2a:b6:5f:8c:89:d1:5d:c9:e3:26:e5:7c: 63:87:10:38:e7:fe:20:4f:a1:5e:bc:fc:c1:1a:8c: b5:ad:01:0e:0d:17:fb:fa:17:02:df:ca:51:8f:50: 95:a5:dc:9d:4d:29:b4:48:de:87:a0:d7:d8:2e:67: 64:6e:c6:fc:b5:78:14:fe:41:80:6a:3e:da:ca:3e: b0:cf:1a:08:a2:08:e1:5e:62:e8:c5:62:46:b9:3a: 87:f8:8b:95:b0:ea:b8:74:1a:3d:8c:a3:02:b3:9a: 56:69:d8:3d:b7:c3:72:e9:27:05:ce:8a:04:bd:6b: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:C2:CA:D9:8B:C3:C6:DB:59:55:F3:8E:FC:44:D7:10:F6:F5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3749a87f-6fe5-3c19-92fe-858b32d98221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8d:b6:78:12:1a:48:74:01:51:1a:19:b2:63:b1:76:8d:f9: 3b:0c:44:b5:0b:7d:33:fc:db:63:08:e2:9d:e9:2e:6b:6e:6c: 6a:dc:39:7a:22:f1:45:46:cc:5a:d6:c2:2a:97:9e:8d:7b:da: 2d:8e:8e:de:6c:63:e2:0a:f0:d3:db:77:0d:f8:f6:92:18:20: 51:05:0e:ea:ac:d7:98:63:cd:4c:fd:17:c4:94:ab:b8:f8:ad: 07:fc:d9:c0:b5:0d:21:1c:a2:73:89:39:55:d4:5c:42:42:ae: d8:e5:fa:c7:8e:cc:01:96:e5:8b:74:2a:31:a9:4a:1d:73:80: 8c:ab:fe:7a:fb:57:0e:48:48:fb:9f:8c:f4:4a:31:dd:8b:ae: 25:d2:74:09:60:f9:0f:17:ba:da:e2:6c:3a:ad:95:0b:1f:55: 23:2a:cf:db:0a:51:9f:78:fb:95:38:eb:b4:a3:e2:c1:f1:72: 37:cc:f6:7d:12:6c:dc:9e:ce:c7:9a:18:5e:ec:f0:a1:22:1a: f9:2c:3e:05:cc:59:78:58:6d:70:74:92:8e:09:ea:5d:62:ef: 20:0c:7d:ca:e0:b0:50:c2:8c:97:31:11:02:ed:b6:5b:76:6b: 1e:f2:93:40:38:5c:0e:65:9f:3d:67:20:66:8d:d0:8e:a6:2d: 6b:ec:61:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAh6rhQM/JHLIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2ZhYjJkMmItNTZlMi00MmQ2LWIyOTktZjMzNWM4ZGU0OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjjfNPnjT7BiJvqy389W0F51Biqusn0b1NIS VercSHJhk7FKNwNHBpgsisJp/TdtW16nBkf6BoY5a516YbQafogcYcTRfFrJK7+B 55BqC/F5Dv9SgZV33SLi+zofHzN/LvTy2ZN4amHjRFyOEfnqT4S0pCO/QzTAe3rI EtnSBxeAxN0GX/22xucqtl+MidFdyeMm5XxjhxA45/4gT6FevPzBGoy1rQEODRf7 +hcC38pRj1CVpdydTSm0SN6HoNfYLmdkbsb8tXgU/kGAaj7ayj6wzxoIogjhXmLo xWJGuTqH+IuVsOq4dBo9jKMCs5pWadg9t8Ny6ScFzooEvWstCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiRwsrZi8PG21lV8478RNcQ9vWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzc0OWE4N2YtNmZlNS0z YzE5LTkyZmUtODU4YjMyZDk4MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiNtngSGkh0AVEaGbJjsXaN+TsMRLULfTP822MI4p3pLmtubGrcOXoi 8UVGzFrWwiqXno172i2Ojt5sY+IK8NPbdw349pIYIFEFDuqs15hjzUz9F8SUq7j4 rQf82cC1DSEconOJOVXUXEJCrtjl+seOzAGW5Yt0KjGpSh1zgIyr/nr7Vw5ISPuf jPRKMd2LriXSdAlg+Q8XutribDqtlQsfVSMqz9sKUZ94+5U467Sj4sHxcjfM9n0S bNyezseaGF7s8KEiGvksPgXMWXhYbXB0ko4J6l1i7yAMfcrgsFDCjJcxEQLttlt2 ax7yk0A4XA5lnz1nIGaN0I6mLWvsYR4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:47 2025 by rpki-client