$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa File: 3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa (raw, json) Hash identifier: 9wOioX1RFcl+TWLsB81+Ri/E9WfaIzedLMxVUNB+Yxk= Subject key identifier: 8B:F4:E2:EE:AF:1E:02:67:E1:CF:13:B4:FE:5F:71:6F:BF:7D:FD:64 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC31099310E56AF068C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.70.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c3:10:99:31:0e:56:af:06:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e3c6f714-e2eb-4495-b186-02ee0bb2ce92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:c3:2a:a8:95:e0:20:be:c4:65:6b:a8:ae: 5c:44:16:c5:cd:40:3b:46:3c:e2:59:b1:11:85:b1: 54:1a:af:32:cd:27:85:9a:09:f0:72:a7:64:10:d1: 0c:29:b5:a9:91:38:5e:33:82:5f:85:ae:c2:59:17: e2:86:8b:e0:35:80:6f:e4:0d:c2:2a:5c:3d:c3:35: 14:00:c9:8d:e4:9d:a1:da:fa:59:0f:77:12:2d:4c: f3:9e:24:94:38:21:0c:2e:ab:6f:a7:f1:2d:15:81: 07:21:80:5c:bc:c7:08:1c:11:e5:95:ff:f1:89:fb: dc:59:5e:f2:22:8c:d7:54:38:22:9f:e4:03:4c:e2: 06:af:3b:52:84:57:6c:e4:5f:1a:5c:d3:92:3d:c6: d7:7f:c9:94:38:ce:ad:68:dd:06:32:22:9e:88:f0: b7:a7:28:59:3c:1e:ca:c2:f7:a4:1f:ac:91:68:8e: f2:9b:ce:76:72:89:c4:fc:1d:48:65:17:eb:36:92: 25:59:4f:ab:8a:25:2d:d2:cd:72:98:20:cb:9b:8e: 6f:21:de:88:16:07:72:c0:b6:b3:eb:a1:a1:5f:0b: b2:07:55:0c:99:c4:2a:51:85:86:32:68:2c:6b:f3: 3b:e7:2c:0b:25:cc:cf:67:2d:65:4d:d6:08:22:9c: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F4:E2:EE:AF:1E:02:67:E1:CF:13:B4:FE:5F:71:6F:BF:7D:FD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9e:a2:90:e7:d4:53:a5:c6:99:36:9e:50:27:80:31:71:ec: ae:d3:47:e9:2f:7f:d9:01:53:0f:aa:1e:85:bf:99:fd:f1:b6: e1:ef:8b:7b:98:1a:25:af:2f:75:08:6b:cd:69:d5:08:dc:2d: 54:d6:c6:c9:72:13:c6:dc:2f:97:35:b2:b4:50:da:d3:cf:93: 02:2c:99:df:79:2d:42:1f:62:1f:72:39:f2:3d:61:44:d6:ee: 3e:7f:a3:44:f3:3c:82:22:d1:37:9d:9e:a9:46:9f:f8:45:b4: a7:1a:fa:94:0f:13:97:05:74:14:bb:b3:b6:8b:1e:29:32:e7: 4a:9e:c3:e3:4e:f0:31:ad:4a:4c:48:b1:82:db:b2:f4:f9:a0: 0c:07:ae:a9:d4:7e:38:0b:0a:01:97:d2:dd:c0:18:c7:2a:f2: df:f2:8c:f6:a9:45:80:69:9a:23:72:a5:9f:ce:d0:46:29:a1: 15:da:0f:0b:4c:e0:da:7c:d3:8c:27:39:a4:b2:3d:a2:34:e1: 4a:03:b3:fc:50:f9:88:90:99:8e:c0:1a:93:67:bc:01:f9:e0: cf:85:5f:2e:2b:fd:5f:c5:91:b7:8c:6c:7c:0a:7d:be:ce:cd: ed:15:82:3d:e0:19:af:b8:73:4e:5b:9e:c2:c9:0a:ef:e2:7b: 5f:3e:2d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8MQmTEOVq8GjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTNjNmY3MTQtZTJlYi00NDk1LWIxODYtMDJlZTBiYjJjZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXDKqiV4CC+xGVrqK5cRBbFzUA7RjziWbER hbFUGq8yzSeFmgnwcqdkENEMKbWpkTheM4Jfha7CWRfihovgNYBv5A3CKlw9wzUU AMmN5J2h2vpZD3cSLUzzniSUOCEMLqtvp/EtFYEHIYBcvMcIHBHllf/xifvcWV7y IozXVDgin+QDTOIGrztShFds5F8aXNOSPcbXf8mUOM6taN0GMiKeiPC3pyhZPB7K wvekH6yRaI7ym852conE/B1IZRfrNpIlWU+riiUt0s1ymCDLm45vId6IFgdywLaz 66GhXwuyB1UMmcQqUYWGMmgsa/M75ywLJczPZy1lTdYIIpx/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv04u6vHgJn4c8TtP5fcW+/ff1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NhOGJjN2QtZTEyNC0z MGM5LWI5NjUtOGUxMmNkOTRlNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSeopDn1FOlxpk2nlAngDFx7K7TR+kvf9kBUw+qHoW/mf3xtuHvi3uY GiWvL3UIa81p1QjcLVTWxslyE8bcL5c1srRQ2tPPkwIsmd95LUIfYh9yOfI9YUTW 7j5/o0TzPIIi0TednqlGn/hFtKca+pQPE5cFdBS7s7aLHiky50qew+NO8DGtSkxI sYLbsvT5oAwHrqnUfjgLCgGX0t3AGMcq8t/yjPapRYBpmiNypZ/O0EYpoRXaDwtM 4Np804wnOaSyPaI04UoDs/xQ+YiQmY7AGpNnvAH54M+FXy4r/V/FkbeMbHwKfb7O ze0Vgj3gGa+4c05bnsLJCu/ie18+Lfc= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:48 2025 by rpki-client