$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa File: 3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa (raw, json) Hash identifier: +jc3kN6ay7RkcNikYsizv9/TBlJ11T0to0hWRrWMJi4= Subject key identifier: D0:B7:5D:04:4D:29:4D:33:18:05:ED:56:73:63:41:4F:8A:59:F1:0F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1CB21ACAA26A75F54C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.87.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1c:b2:1a:ca:a2:6a:75:f5:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=96fa43f2-b4df-46a8-87d7-dc88ff6a8269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:fb:5e:d9:f7:a5:d7:31:ec:71:21:a9:a2: 0a:1e:64:ad:2d:03:be:6b:63:8c:a8:1e:69:f3:b6: d0:a7:c9:20:07:02:6f:40:a3:32:3d:ee:62:6a:fe: 43:ea:59:b4:d3:2f:ab:c4:0a:d4:25:18:36:72:65: 36:27:f7:a1:0f:42:ee:c2:6d:82:cf:b1:7e:05:4e: 46:d2:d1:ae:46:6a:ca:9d:b0:1e:d1:c6:31:95:4a: a7:7d:0d:b0:b5:8e:ac:9d:2f:4d:f9:42:f3:eb:75: 4c:9b:4a:7c:4c:9e:2e:aa:4b:32:6d:a1:b1:91:8f: 0e:92:b6:44:e5:fc:c6:a4:d5:9f:52:64:93:4b:96: 08:b8:60:bd:9a:5d:49:47:65:75:c5:21:2d:2f:6e: 28:0f:4d:82:c1:a0:d2:56:03:01:49:72:db:0d:c3: ce:98:62:fb:8c:da:af:7d:2f:a6:ad:53:0f:38:a8: 69:ee:13:fe:9b:d1:00:48:e2:0f:bf:a8:a4:1f:91: 75:eb:c7:91:4f:38:12:0c:c0:36:cc:9e:94:2b:7b: f8:08:33:77:47:c9:75:d9:9b:ef:8e:c0:de:5a:c9: c8:6f:2b:61:29:d8:b0:ef:3b:7c:2e:a4:72:46:21: b2:b9:25:7e:f6:cf:33:53:37:9d:0f:24:1b:e0:c2: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B7:5D:04:4D:29:4D:33:18:05:ED:56:73:63:41:4F:8A:59:F1:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ba9ec96-0e24-3532-bbf0-986c8ef2016a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4e:a6:12:8d:21:72:89:34:83:a0:e6:d4:ea:01:33:10:4b: 1e:22:ec:51:b1:c3:44:4f:b2:57:6f:ca:2e:c2:b7:78:f0:fa: 59:da:46:4a:3a:26:89:6a:4c:df:12:23:05:f2:92:fb:85:3c: 1d:99:49:30:26:be:8e:ec:07:8a:46:00:cf:c3:9f:fb:4c:49: f0:e7:d9:1a:73:94:ba:ba:ef:c5:22:3c:ba:9d:07:d2:ac:bd: 7a:0a:b0:22:4a:50:ac:66:01:6c:4e:d0:9e:31:24:3d:31:9e: 85:6d:6a:3a:58:df:de:ea:e7:31:02:32:d9:62:f6:14:73:f8: 13:36:32:14:51:c7:3b:8e:70:cb:17:d8:ef:f2:44:f4:13:7f: 98:dc:db:2d:b2:43:14:6a:82:ff:ef:36:8c:91:d8:28:52:5a: ca:d1:94:39:0f:8f:6a:06:30:bc:18:33:7f:9f:e9:fe:3b:c9: 5b:1d:42:8c:c0:1b:39:2a:1e:dc:94:7d:ec:dc:c8:c3:cb:4a: b8:d6:97:e9:2a:2c:3a:fb:46:03:38:92:a9:5e:f3:d5:c5:96: 2b:06:03:8c:9b:19:ae:0e:d9:67:1c:17:94:ec:2f:19:1d:07: 42:11:42:61:a7:f9:95:1f:0f:73:6b:0e:d8:18:a7:7a:c7:7b: 9c:e6:49:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITByyGsqianX1TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTZmYTQzZjItYjRkZi00NmE4LTg3ZDctZGM4OGZmNmE4MjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitr7Xtn3pdcx7HEhqaIKHmStLQO+a2OMqB5p 87bQp8kgBwJvQKMyPe5iav5D6lm00y+rxArUJRg2cmU2J/ehD0Luwm2Cz7F+BU5G 0tGuRmrKnbAe0cYxlUqnfQ2wtY6snS9N+ULz63VMm0p8TJ4uqksybaGxkY8OkrZE 5fzGpNWfUmSTS5YIuGC9ml1JR2V1xSEtL24oD02CwaDSVgMBSXLbDcPOmGL7jNqv fS+mrVMPOKhp7hP+m9EASOIPv6ikH5F168eRTzgSDMA2zJ6UK3v4CDN3R8l12Zvv jsDeWsnIbythKdiw7zt8LqRyRiGyuSV+9s8zUzedDyQb4MJoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC3XQRNKU0zGAXtVnNjQU+KWfEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JhOWVjOTYtMGUyNC0z NTMyLWJiZjAtOTg2YzhlZjIwMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVOphKNIXKJNIOg5tTqATMQSx4i7FGxw0RPsldvyi7Ct3jw+lnaRko6 JolqTN8SIwXykvuFPB2ZSTAmvo7sB4pGAM/Dn/tMSfDn2RpzlLq678UiPLqdB9Ks vXoKsCJKUKxmAWxO0J4xJD0xnoVtajpY397q5zECMtli9hRz+BM2MhRRxzuOcMsX 2O/yRPQTf5jc2y2yQxRqgv/vNoyR2ChSWsrRlDkPj2oGMLwYM3+f6f47yVsdQozA GzkqHtyUfezcyMPLSrjWl+kqLDr7RgM4kqle89XFlisGA4ybGa4O2WccF5TsLxkd B0IRQmGn+ZUfD3NrDtgYp3rHe5zmSZ8= -----END CERTIFICATE-----Generated at Fri Apr 4 18:09:44 2025 by rpki-client