$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa File: 3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa (raw, json) Hash identifier: z8mpgHapmVJ0++5X4yuWhcme5Sr1pZRlT1bHcTcINEk= Subject key identifier: A0:69:E6:37:D8:F4:93:F2:C3:52:83:D5:91:98:AE:F0:40:04:08:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC07F91227A0A66FD7400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.68.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c0:7f:91:22:7a:0a:66:fd:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0e1cac6b-e60c-43d5-a153-4544c53e30d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:eb:1e:24:b6:9c:dd:85:9b:66:96:43:a5: 32:b9:c1:0f:e8:e9:a2:2c:ad:2d:2a:a6:0e:67:90: 8d:10:80:db:a9:64:8f:3c:9f:ff:94:46:6d:83:83: bd:63:b3:99:db:f6:50:83:b7:95:4e:ee:24:b1:9e: b6:6a:81:5a:d6:30:37:27:ba:c9:8f:1b:91:38:96: 9f:15:1c:5e:52:b1:35:dd:97:52:25:c7:fc:d5:2a: 6c:72:ae:6c:35:8c:48:8e:7c:44:5d:de:c9:18:86: cb:99:bd:80:c5:9a:45:a9:f4:93:68:df:e6:82:1c: 54:93:39:0e:e9:63:39:7a:d4:e7:1f:ee:03:bb:c2: 89:9f:dc:94:9a:79:bd:aa:39:cd:05:c0:bd:90:51: f5:f2:b4:d9:94:19:39:6e:d1:d5:f2:82:00:fb:97: 63:53:fa:da:db:4c:fa:66:7c:5d:20:9a:8e:b1:a4: d7:c3:f2:fc:6f:72:71:67:2c:9e:7e:d9:4f:77:92: 24:3a:46:47:d2:51:99:6a:86:18:bf:2c:8d:1c:9d: 86:27:ad:2c:cc:93:52:6b:3e:43:c8:c8:41:b4:cb: 41:a1:d2:b7:8e:06:34:c7:e3:df:d5:4a:ba:14:3d: 4f:44:55:e3:1e:bb:23:3d:6b:8d:c0:bd:1e:c2:15: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:69:E6:37:D8:F4:93:F2:C3:52:83:D5:91:98:AE:F0:40:04:08:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f3d455d-5faa-3dc1-b867-5a3377f0e553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a1:f7:92:9d:80:8c:b6:5e:d3:1a:06:d8:aa:21:cd:de:00: fd:24:b9:9e:da:95:b1:9b:a4:73:84:88:10:60:b3:4c:12:bd: 2a:19:87:36:b3:a8:7d:32:a1:83:94:09:9a:b3:1b:21:0f:bb: 1f:67:62:85:13:fd:bf:30:d5:36:39:ad:4d:1f:52:12:0d:86: 1a:f4:91:e9:76:c1:f2:21:15:67:4d:d2:ef:52:bf:4d:04:e3: 4e:40:cd:1a:b1:ea:2e:f0:88:ee:60:8f:44:f6:30:08:71:97: 6b:2d:e6:0d:fa:e1:6d:dc:19:ab:a9:4a:8f:bc:ff:14:b8:a1: 7a:b8:4c:99:f7:43:eb:d7:26:d8:a4:55:11:24:e3:07:06:e9: 90:f6:55:d9:28:0c:80:c7:8a:3a:65:48:8e:a6:9c:74:36:4e: 48:86:29:a8:02:84:a3:41:32:9b:8d:2a:3d:14:2b:23:56:48: 0d:43:86:e6:d6:c3:56:f0:91:a4:3b:c8:84:98:03:03:ec:46: 0c:41:7f:45:3d:93:5d:8b:22:f1:97:4f:f9:ed:83:24:dd:d8: 44:6d:77:83:be:63:52:d1:9c:51:19:3d:58:70:a0:5a:93:2d: 92:11:1b:36:76:75:53:da:ec:a2:9d:65:71:0b:1d:82:14:b7: 96:fb:18:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8B/kSJ6Cmb9dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MGUxY2FjNmItZTYwYy00M2Q1LWExNTMtNDU0NGM1M2UzMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uTrHiS2nN2Fm2aWQ6UyucEP6OmiLK0tKqYO Z5CNEIDbqWSPPJ//lEZtg4O9Y7OZ2/ZQg7eVTu4ksZ62aoFa1jA3J7rJjxuROJaf FRxeUrE13ZdSJcf81Spscq5sNYxIjnxEXd7JGIbLmb2AxZpFqfSTaN/mghxUkzkO 6WM5etTnH+4Du8KJn9yUmnm9qjnNBcC9kFH18rTZlBk5btHV8oIA+5djU/ra20z6 ZnxdIJqOsaTXw/L8b3JxZyyeftlPd5IkOkZH0lGZaoYYvyyNHJ2GJ60szJNSaz5D yMhBtMtBodK3jgY0x+Pf1Uq6FD1PRFXjHrsjPWuNwL0ewhWvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBp5jfY9JPyw1KD1ZGYrvBABAguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2YzZDQ1NWQtNWZhYS0z ZGMxLWI4NjctNWEzMzc3ZjBlNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSh95KdgIy2XtMaBtiqIc3eAP0kuZ7albGbpHOEiBBgs0wSvSoZhzaz qH0yoYOUCZqzGyEPux9nYoUT/b8w1TY5rU0fUhINhhr0kel2wfIhFWdN0u9Sv00E 405AzRqx6i7wiO5gj0T2MAhxl2st5g364W3cGaupSo+8/xS4oXq4TJn3Q+vXJtik VREk4wcG6ZD2VdkoDIDHijplSI6mnHQ2TkiGKagChKNBMpuNKj0UKyNWSA1DhubW w1bwkaQ7yISYAwPsRgxBf0U9k12LIvGXT/ntgyTd2ERtd4O+Y1LRnFEZPVhwoFqT LZIRGzZ2dVPa7KKdZXELHYIUt5b7GLw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:01 2025 by rpki-client