$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38701d7a-0954-365d-a8a5-18929448cc17.roa File: 38701d7a-0954-365d-a8a5-18929448cc17.roa (raw, json) Hash identifier: vI3v/rUax0704mGPaFdbABx7YgG7g1k15ZaIhHT2IvE= Subject key identifier: 3B:23:F0:7A:22:8F:9C:E7:C9:34:D3:E3:1C:8A:7F:49:F1:D7:7D:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC9D6C32D166254FB5FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38701d7a-0954-365d-a8a5-18929448cc17.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.80.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c9:d6:c3:2d:16:62:54:fb:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=cab1a299-890b-4337-a50d-41caee809661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:10:5f:36:d9:1c:a9:75:e7:fa:31:51:de: 2a:70:de:e4:ae:d4:10:db:4a:c2:1f:92:3f:60:b4: c1:dc:3d:55:f0:01:09:60:4f:1d:39:2a:ef:d5:99: b7:19:ca:76:a5:8d:8c:1d:e2:69:05:a7:14:33:b9: 80:e3:31:42:43:22:8b:13:b7:d0:73:0e:0b:d6:58: 9a:8f:19:af:f0:4e:b2:da:a1:be:ed:45:3a:aa:15: ca:f3:15:c0:34:07:d3:02:89:2c:eb:4e:b9:01:04: 9e:5d:07:af:41:c5:cd:62:c9:43:c1:07:f2:8c:a1: b5:e6:71:b8:aa:d8:54:80:d6:8a:3c:4a:74:d5:5e: d2:97:23:f6:80:64:71:5f:58:f9:4d:4f:81:f1:dc: 85:0a:86:73:2a:aa:d2:8d:50:f8:96:c2:ee:a8:cc: ef:17:7d:8c:35:b5:2e:8d:bb:9c:1c:d8:7c:c6:8d: b8:b6:d5:95:d3:91:5f:f2:e0:a2:b2:dc:f7:77:02: 8c:04:07:14:e7:13:b8:52:a4:5f:fb:0f:5b:4d:cd: 48:d0:c6:66:35:ab:12:8d:06:b3:d6:2b:1a:af:a4: a9:3e:db:23:cf:77:64:d1:3a:76:19:28:a4:67:3f: 7c:7c:10:83:40:b3:e3:1b:bc:7e:20:b5:cb:f6:0e: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:F0:7A:22:8F:9C:E7:C9:34:D3:E3:1C:8A:7F:49:F1:D7:7D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/38701d7a-0954-365d-a8a5-18929448cc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.80.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3e:8a:8d:fb:21:58:4a:43:83:5d:eb:0e:be:22:82:5d:98: 9b:9c:95:73:32:e2:df:03:52:8f:3f:1a:06:be:4c:9d:9f:68: 7b:72:f1:ea:16:51:df:e4:f3:f3:23:9f:d0:a5:3b:49:ae:48: f6:0b:b0:2b:16:78:e7:76:a7:d7:e6:58:25:44:e9:4b:29:08: 5e:f4:35:77:d2:bc:c4:fc:76:5a:52:fd:7a:d9:73:41:ea:3b: 8a:13:74:9d:8b:65:a9:54:4a:5f:24:90:14:1a:63:2f:03:85: ae:2d:23:55:c9:22:3f:b1:65:02:94:c6:5c:dc:e1:dc:35:d1: 05:9a:03:7a:c1:38:a0:37:bb:8d:2b:cf:d2:dc:0a:05:fd:7f: 5e:e1:60:f4:0b:11:88:3b:74:6b:51:a2:19:57:3d:a3:10:52: b4:6d:1f:fe:95:e5:0d:4e:ee:a1:6b:30:6c:51:94:c6:c3:fc: 28:36:ad:93:1f:1c:e8:4e:21:0c:ea:f1:7c:08:b9:41:d4:7f: d1:55:78:d8:9c:46:d0:96:01:10:f3:fd:54:c8:12:7a:1c:d7: 47:43:a6:fe:f9:6c:ff:45:28:8b:e7:17:38:f4:81:8b:54:60: a1:d0:dd:15:0d:01:24:6f:1d:d2:62:ab:53:2a:07:2f:52:a4: a8:68:e4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8nWwy0WYlT7X8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2FiMWEyOTktODkwYi00MzM3LWE1MGQtNDFjYWVlODA5NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9YQXzbZHKl15/oxUd4qcN7krtQQ20rCH5I/ YLTB3D1V8AEJYE8dOSrv1Zm3Gcp2pY2MHeJpBacUM7mA4zFCQyKLE7fQcw4L1lia jxmv8E6y2qG+7UU6qhXK8xXANAfTAoks6065AQSeXQevQcXNYslDwQfyjKG15nG4 qthUgNaKPEp01V7SlyP2gGRxX1j5TU+B8dyFCoZzKqrSjVD4lsLuqMzvF32MNbUu jbucHNh8xo24ttWV05Ff8uCistz3dwKMBAcU5xO4UqRf+w9bTc1I0MZmNasSjQaz 1isar6SpPtsjz3dk0Tp2GSikZz98fBCDQLPjG7x+ILXL9g4bbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsj8Hoij5znyTTT4xyKf0nx1312MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg3MDFkN2EtMDk1NC0z NjVkLWE4YTUtMTg5Mjk0NDhjYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY+io37IVhKQ4Nd6w6+IoJdmJuclXMy4t8DUo8/Gga+TJ2faHty8eoW Ud/k8/Mjn9ClO0muSPYLsCsWeOd2p9fmWCVE6UspCF70NXfSvMT8dlpS/XrZc0Hq O4oTdJ2LZalUSl8kkBQaYy8Dha4tI1XJIj+xZQKUxlzc4dw10QWaA3rBOKA3u40r z9LcCgX9f17hYPQLEYg7dGtRohlXPaMQUrRtH/6V5Q1O7qFrMGxRlMbD/Cg2rZMf HOhOIQzq8XwIuUHUf9FVeNicRtCWARDz/VTIEnoc10dDpv75bP9FKIvnFzj0gYtU YKHQ3RUNASRvHdJiq1MqBy9SpKho5Kw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:49 2025 by rpki-client