$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbe13df-df8f-34d2-b195-1163c4ff6908.roa File: 3dbe13df-df8f-34d2-b195-1163c4ff6908.roa (raw, json) Hash identifier: rVRMY8gseFWO4PMh9e0hgA/BxGmyq4NAHycjNDQvldU= Subject key identifier: 8B:63:96:A5:EB:8E:4C:28:A8:6F:F8:80:7D:97:A8:FE:C7:8E:10:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0055C28AA05583014380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbe13df-df8f-34d2-b195-1163c4ff6908.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.138.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:00:55:c2:8a:a0:55:83:01:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6ceb2d2d-ffe7-487f-be58-1ff61a4f3890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:e3:1d:30:6c:23:08:dc:cb:2e:67:26:71: 4f:9d:b4:13:8a:6e:b7:50:92:bd:03:a0:24:b1:61: 38:9c:74:2e:e9:d6:fd:fe:d3:f8:6d:de:98:4f:a3: 70:a9:70:c5:32:e9:56:1c:d6:fc:19:fa:a7:98:eb: ef:24:79:f8:fe:ca:19:b7:19:12:df:47:43:53:bf: 61:36:38:62:76:72:e7:49:97:25:16:26:42:2e:47: dd:2a:91:e8:bc:9d:cb:6f:06:e4:e1:6e:f9:26:33: 92:cd:3a:14:23:11:58:54:ae:e0:15:0d:d0:d9:c5: f0:c4:fd:ba:e8:03:16:a9:ba:99:ce:76:ac:ff:ae: f4:5e:ab:a6:57:39:24:7e:03:4b:2f:ee:9e:60:84: 37:b2:6d:84:e5:9a:d1:7e:d2:68:9b:20:ed:8c:c0: 9c:16:cd:c7:0a:ba:8a:27:2b:2f:0a:5b:90:61:32: 7b:30:71:e1:c5:ad:24:65:d5:96:cf:0a:63:a7:61: 6b:ab:ee:e6:d4:91:ba:b1:87:7c:63:ff:cb:cb:89: f7:60:c1:9b:45:c2:9e:99:cb:d2:33:7b:a4:21:ec: fd:8b:dc:05:10:d6:78:17:cb:79:ae:83:93:e9:11: 31:68:0d:7a:87:fb:a5:83:55:57:c3:0c:4b:ce:6e: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:96:A5:EB:8E:4C:28:A8:6F:F8:80:7D:97:A8:FE:C7:8E:10:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3dbe13df-df8f-34d2-b195-1163c4ff6908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0e:5c:95:45:6c:33:cf:09:79:c5:ac:76:ba:7a:fe:12:e9: b2:24:73:41:0e:48:fb:f1:76:e0:ee:87:33:5d:e4:8b:38:4f: df:04:fa:4f:09:82:ce:c2:3f:37:89:87:3f:23:a1:3e:c4:29: 71:5f:a1:c1:1b:b1:fe:c6:19:94:73:de:78:ec:81:c7:c9:1a: a2:ba:3e:e4:e7:ab:48:89:5e:9e:e9:64:72:a0:b6:b6:be:0f: 82:72:77:7c:5f:c1:69:04:e1:30:1f:87:c6:78:3d:3b:a7:82: 6f:15:fe:b0:0e:f6:87:53:6f:6e:c3:d2:cc:49:a9:e6:0e:da: fc:4d:81:4b:be:1a:05:8e:37:75:9e:5d:ec:e6:1f:b2:ff:ec: 73:96:76:71:72:71:3c:77:98:40:ce:1b:6b:8f:09:d3:62:51: 70:93:db:d6:ef:c5:25:bc:7e:66:8f:0f:25:03:d9:b3:7f:77: ec:da:28:e2:aa:36:5a:3f:73:53:b8:aa:ac:1b:87:48:e7:8f: bf:c8:24:fa:0d:65:ae:b7:fa:17:00:82:b2:29:76:e8:e2:f6: 9e:39:67:40:3c:51:fb:02:69:9c:2f:57:32:ee:19:ca:eb:67: 0d:db:8f:49:e9:33:f2:f2:97:62:fb:c9:4f:97:6c:d0:38:27: 3f:6f:67:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITABVwoqgVYMBQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NmNlYjJkMmQtZmZlNy00ODdmLWJlNTgtMWZmNjFhNGYzODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hbjHTBsIwjcyy5nJnFPnbQTim63UJK9A6Ak sWE4nHQu6db9/tP4bd6YT6NwqXDFMulWHNb8GfqnmOvvJHn4/soZtxkS30dDU79h NjhidnLnSZclFiZCLkfdKpHovJ3Lbwbk4W75JjOSzToUIxFYVK7gFQ3Q2cXwxP26 6AMWqbqZznas/670XqumVzkkfgNLL+6eYIQ3sm2E5ZrRftJomyDtjMCcFs3HCrqK JysvCluQYTJ7MHHhxa0kZdWWzwpjp2Frq+7m1JG6sYd8Y//Ly4n3YMGbRcKemcvS M3ukIez9i9wFENZ4F8t5roOT6RExaA16h/ulg1VXwwxLzm4MIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItjlqXrjkwoqG/4gH2XqP7HjhAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2RiZTEzZGYtZGY4Zi0z NGQyLWIxOTUtMTE2M2M0ZmY2OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEOXJVFbDPPCXnFrHa6ev4S6bIkc0EOSPvxduDuhzNd5Is4T98E+k8J gs7CPzeJhz8joT7EKXFfocEbsf7GGZRz3njsgcfJGqK6PuTnq0iJXp7pZHKgtra+ D4Jyd3xfwWkE4TAfh8Z4PTungm8V/rAO9odTb27D0sxJqeYO2vxNgUu+GgWON3We XezmH7L/7HOWdnFycTx3mEDOG2uPCdNiUXCT29bvxSW8fmaPDyUD2bN/d+zaKOKq Nlo/c1O4qqwbh0jnj7/IJPoNZa63+hcAgrIpduji9p45Z0A8UfsCaZwvVzLuGcrr Zw3bj0npM/Lyl2L7yU+XbNA4Jz9vZ+k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:38 2025 by rpki-client