$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa File: 4215d1e7-5573-3392-ba71-d93fac0fd31a.roa (raw, json) Hash identifier: HULZx1HAcL4xwyc65KVSpM/rslnN72+AyIVnzwGr9Rc= Subject key identifier: 2A:FA:19:75:3F:68:16:16:49:47:77:14:2A:EA:1C:0C:D8:42:55:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBAE15A46A818B62AA000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.147.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ba:e1:5a:46:a8:18:b6:2a:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=08e47e0f-5d5d-4e52-b7b9-4dfbaed9246d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:65:5f:ab:12:5d:0a:41:bd:00:35:e5:8f: fb:9e:0c:29:15:17:36:87:3e:0f:be:b9:4e:39:6e: 00:12:15:9f:2a:d2:b1:0e:38:90:31:a0:ca:df:23: 13:8d:3f:ba:73:b7:53:3b:0c:29:c3:47:1e:24:a3: 5f:5e:9b:cb:67:60:de:bb:8a:a8:89:c4:ea:63:95: 54:8e:69:0e:66:7b:aa:eb:8b:51:c5:52:d5:80:d5: b6:1e:43:15:a3:84:23:fb:55:8a:da:04:4a:93:61: 75:04:a2:b6:73:30:59:c0:b2:08:9e:c7:85:51:5c: 70:57:84:f8:ef:43:64:3b:7a:b1:78:d8:be:6d:90: bc:32:88:c5:bc:8c:88:4b:a6:4b:58:ee:2c:0a:f3: 2a:44:24:db:22:b3:7f:52:a3:b6:84:84:a6:57:14: 5a:62:b4:26:1f:5b:3d:ae:60:43:2a:ff:f6:83:3b: 8f:38:0e:db:2a:c3:79:ef:d9:4d:c3:b6:3c:a0:fc: fe:f2:5b:ff:3f:c8:48:3e:2a:0e:97:77:39:dc:07: 99:d3:f9:2e:38:2a:d4:9a:f8:cc:da:c5:7e:32:22: 1a:fc:1e:1c:69:e8:36:c4:91:62:26:10:9a:79:85: 9c:77:1f:70:a1:29:68:ed:10:c4:6b:65:e7:0f:d6: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FA:19:75:3F:68:16:16:49:47:77:14:2A:EA:1C:0C:D8:42:55:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4215d1e7-5573-3392-ba71-d93fac0fd31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9e:11:d8:e3:1b:b4:75:9d:82:bc:14:14:31:f4:14:88:6a: a0:50:51:ab:6d:34:ed:2d:a2:26:43:0a:5b:db:7c:6a:c5:97: 1c:e6:65:5d:2e:5b:de:01:21:b8:37:37:0a:48:c1:6a:d3:c2: 87:19:29:09:1e:15:e7:92:ed:c9:49:ce:1c:ad:73:1b:d6:b8: 95:a4:74:d8:9d:53:7b:18:80:9b:47:b2:09:72:51:c4:af:a1: b8:ad:04:38:3b:63:c6:ed:f9:22:21:84:b9:0b:43:94:55:60: d6:eb:ce:63:6b:01:88:38:88:77:b5:bd:1a:85:80:94:bd:26: 7d:fd:9c:61:51:ee:67:98:72:99:7a:c2:99:4f:94:f8:d9:77: b6:ea:9e:78:e6:43:e8:39:90:14:89:18:fd:69:be:fb:4f:f1: b5:08:80:14:40:1e:2a:99:a5:a9:db:49:b7:bf:6b:5a:8e:84: 19:a1:22:83:31:01:d9:a6:98:e7:d5:94:08:38:19:b0:4e:38: 6b:94:7b:02:0e:89:c7:e7:af:be:05:42:5a:f5:e4:ec:2c:a7: 64:6f:d2:60:fa:ec:c2:a1:0b:42:ab:de:de:1e:99:21:f8:6a: b5:b2:bb:54:3d:f9:99:1e:a3:0a:65:54:43:63:aa:fa:ef:df: 44:59:8f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7rhWkaoGLYqoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDhlNDdlMGYtNWQ1ZC00ZTUyLWI3YjktNGRmYmFlZDkyNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV1lX6sSXQpBvQA15Y/7ngwpFRc2hz4PvrlO OW4AEhWfKtKxDjiQMaDK3yMTjT+6c7dTOwwpw0ceJKNfXpvLZ2Deu4qoicTqY5VU jmkOZnuq64tRxVLVgNW2HkMVo4Qj+1WK2gRKk2F1BKK2czBZwLIInseFUVxwV4T4 70NkO3qxeNi+bZC8MojFvIyIS6ZLWO4sCvMqRCTbIrN/UqO2hISmVxRaYrQmH1s9 rmBDKv/2gzuPOA7bKsN579lNw7Y8oPz+8lv/P8hIPioOl3c53AeZ0/kuOCrUmvjM 2sV+MiIa/B4caeg2xJFiJhCaeYWcdx9woSlo7RDEa2XnD9aomwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr6GXU/aBYWSUd3FCrqHAzYQlXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIxNWQxZTctNTU3My0z MzkyLWJhNzEtZDkzZmFjMGZkMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmeEdjjG7R1nYK8FBQx9BSIaqBQUattNO0toiZDClvbfGrFlxzmZV0u W94BIbg3NwpIwWrTwocZKQkeFeeS7clJzhytcxvWuJWkdNidU3sYgJtHsglyUcSv obitBDg7Y8bt+SIhhLkLQ5RVYNbrzmNrAYg4iHe1vRqFgJS9Jn39nGFR7meYcpl6 wplPlPjZd7bqnnjmQ+g5kBSJGP1pvvtP8bUIgBRAHiqZpanbSbe/a1qOhBmhIoMx AdmmmOfVlAg4GbBOOGuUewIOicfnr74FQlr15Owsp2Rv0mD67MKhC0Kr3t4emSH4 arWyu1Q9+ZkeowplVENjqvrv30RZj5c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:26 2025 by rpki-client