$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be22a27-9948-3fac-9560-851b2682931e.roa File: 3be22a27-9948-3fac-9560-851b2682931e.roa (raw, json) Hash identifier: mb1CLm/Ah+ZckB/rxYgekGHnT6Pui0jjNj90VH6iExQ= Subject key identifier: 48:D2:69:0A:59:F1:04:3C:E4:F5:C6:2B:56:F6:9A:71:67:3F:28:A1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58202541F5BD548E280ABC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be22a27-9948-3fac-9560-851b2682931e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.100.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:02:54:1f:5b:d5:48:e2:80:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ff90a0cc-e154-4157-a8ef-5ad527a3399a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:3b:28:ee:86:cf:68:ed:43:bf:85:1e:ca: 89:82:1f:39:8a:df:ce:ca:d5:95:81:1a:6e:de:04: c6:da:9b:03:39:3a:22:24:84:76:8a:75:7e:c8:43: e8:6f:18:b6:89:0c:42:f3:2d:69:1c:39:a1:0f:74: d1:9a:ce:59:c0:55:cf:9f:b8:98:1c:3d:39:49:1e: f0:ed:cd:2c:e8:85:48:a0:be:7c:7f:94:51:fb:7a: d0:33:5d:aa:cb:70:03:77:b0:14:35:3c:40:a4:3c: e0:c9:a1:0b:68:8b:9d:c1:ef:fb:c1:83:e7:4c:b0: f8:2c:61:36:87:26:16:72:18:7a:cb:8d:37:b0:44: 97:57:87:4f:39:44:df:7b:f9:8e:83:78:af:a0:e2: e2:45:0d:ea:46:fe:aa:f2:e9:1b:4f:86:3e:73:3b: 97:ab:18:cd:48:d9:be:de:30:fe:f2:13:10:c6:ef: 90:68:f6:ec:0c:69:91:0c:30:cc:20:65:d0:98:ef: 05:d5:ca:b0:45:84:8d:70:9f:6a:fb:8a:57:42:a9: 77:ac:7e:b8:60:6b:73:8d:1d:cb:9a:98:60:c5:b8: f6:f0:05:d6:64:bc:1b:f8:cc:22:c3:7a:80:16:70: ab:f3:19:2a:31:87:0a:02:74:54:c6:30:92:86:70: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D2:69:0A:59:F1:04:3C:E4:F5:C6:2B:56:F6:9A:71:67:3F:28:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be22a27-9948-3fac-9560-851b2682931e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.100.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:83:0a:83:d8:55:7b:96:20:50:18:70:2d:1c:9e:5c:63:a4: bc:9e:ca:5e:58:cc:aa:31:94:03:ca:30:74:85:27:a8:85:63: 76:51:df:99:d3:d8:0d:35:d1:fc:24:4b:4d:61:cf:18:46:fb: 59:b2:13:ae:10:4d:35:e4:fb:40:b6:af:25:ff:7c:be:01:18: 5a:8e:c9:53:b8:26:58:dc:3d:cd:62:a5:3f:df:eb:93:44:88: 85:c0:70:8a:c2:49:0c:e2:85:f9:00:04:d8:0c:5e:9d:6d:b1: 8e:a0:f7:34:36:ed:88:9e:29:ed:5a:f2:71:39:d2:5d:3f:ab: 66:8e:17:d9:13:11:2c:39:ec:d0:6c:71:e5:34:88:65:81:7b: cd:9c:db:26:60:90:c5:8c:73:04:2a:71:c3:37:7e:74:2d:e3: 6c:28:88:ec:0a:55:c4:ef:b2:8e:c6:b5:d8:ff:8d:11:d8:14: 92:4d:6b:d7:9f:79:66:14:b7:38:13:cd:3e:f4:89:8c:fd:a1: a5:3c:08:b6:35:01:1c:ec:67:3c:04:69:03:41:04:20:87:a2: 9f:b3:6e:5a:14:c4:a0:3b:0a:6f:94:d4:bf:2d:c8:01:5c:85: 47:ce:9b:b3:64:3e:47:a1:5e:e6:99:79:b4:95:58:48:30:f6: 2f:6d:4e:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggJUH1vVSOKAq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmY5MGEwY2MtZTE1NC00MTU3LWE4ZWYtNWFkNTI3YTMzOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZo7KO6Gz2jtQ7+FHsqJgh85it/OytWVgRpu 3gTG2psDOToiJIR2inV+yEPobxi2iQxC8y1pHDmhD3TRms5ZwFXPn7iYHD05SR7w 7c0s6IVIoL58f5RR+3rQM12qy3ADd7AUNTxApDzgyaELaIudwe/7wYPnTLD4LGE2 hyYWchh6y403sESXV4dPOUTfe/mOg3ivoOLiRQ3qRv6q8ukbT4Y+czuXqxjNSNm+ 3jD+8hMQxu+QaPbsDGmRDDDMIGXQmO8F1cqwRYSNcJ9q+4pXQql3rH64YGtzjR3L mphgxbj28AXWZLwb+Mwiw3qAFnCr8xkqMYcKAnRUxjCShnC9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjSaQpZ8QQ85PXGK1b2mnFnPyihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JlMjJhMjctOTk0OC0z ZmFjLTk1NjAtODUxYjI2ODI5MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6DCoPYVXuWIFAYcC0cnlxjpLyeyl5YzKoxlAPKMHSFJ6iFY3ZR35nT 2A010fwkS01hzxhG+1myE64QTTXk+0C2ryX/fL4BGFqOyVO4JljcPc1ipT/f65NE iIXAcIrCSQzihfkABNgMXp1tsY6g9zQ27YieKe1a8nE50l0/q2aOF9kTESw57NBs ceU0iGWBe82c2yZgkMWMcwQqccM3fnQt42woiOwKVcTvso7Gtdj/jRHYFJJNa9ef eWYUtzgTzT70iYz9oaU8CLY1ARzsZzwEaQNBBCCHop+zbloUxKA7Cm+U1L8tyAFc hUfOm7NkPkehXuaZebSVWEgw9i9tThE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:06 2025 by rpki-client