$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4296c95d-de0d-3234-906a-3137e6ae561d.roa File: 4296c95d-de0d-3234-906a-3137e6ae561d.roa (raw, json) Hash identifier: my1nG0fq/ZhEEjlHwEeyrmHFpYSnz6oHK4kvMq0HuU0= Subject key identifier: E5:92:02:8C:25:2F:96:30:D7:82:7B:7C:B1:6C:4C:ED:F7:0A:22:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC3C1DE8B6C52D62C4580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4296c95d-de0d-3234-906a-3137e6ae561d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.98.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c3:c1:de:8b:6c:52:d6:2c:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6e3199da-5d7f-43b4-a732-6f44aafbe3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:6f:53:c2:0b:a2:53:6a:c4:3b:7f:0a:b7: 33:14:ad:e2:8c:95:61:be:02:e8:da:5c:77:b3:51: 3c:ef:bb:ca:e2:f5:35:49:9d:f0:8b:7e:3b:52:d2: fb:09:5b:48:18:67:01:fb:44:c3:63:50:56:fb:ff: 63:c8:7e:4f:14:06:23:53:e3:f3:ec:82:67:6a:45: 33:88:83:5e:77:4b:71:fe:6b:7c:81:aa:55:03:0b: 3c:dd:ff:f9:52:d4:81:22:28:da:1e:ca:78:bc:d7: 18:ea:33:ed:00:f6:0d:3d:93:9e:7e:b5:6f:4c:e5: b1:29:c3:92:8c:df:9a:4d:7f:ac:93:36:fc:ba:c8: 74:36:a6:79:a0:b0:3f:b5:55:83:8c:2f:98:ce:4a: bc:9f:78:77:53:aa:ef:98:92:23:58:59:79:23:ed: 97:20:5c:36:63:8f:9f:43:27:4d:c0:32:bb:2b:7a: ac:0e:5b:34:cd:c2:ae:68:fd:eb:bb:0b:ee:41:6c: 89:b9:c0:2a:b4:83:8e:ce:e5:f6:39:14:d7:3d:bf: 02:32:e9:8e:81:44:e4:b1:a4:72:86:be:c2:98:da: 08:42:79:3b:93:1b:1f:ee:11:13:61:78:9c:30:2b: ab:3d:e2:cc:d5:90:a3:65:19:9c:ab:4c:d4:e0:5d: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:02:8C:25:2F:96:30:D7:82:7B:7C:B1:6C:4C:ED:F7:0A:22:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4296c95d-de0d-3234-906a-3137e6ae561d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ff:ac:ec:ae:f8:5e:23:3c:97:9a:91:30:c5:4f:a1:94:a9: e6:46:8e:1a:f1:46:e6:cd:2b:a9:d6:50:6a:d3:6e:01:5d:28: 90:62:c3:20:af:b3:a3:2d:d3:36:2c:ab:1a:d5:ad:ca:27:68: 37:cb:b7:60:3e:98:94:44:b1:05:46:74:b0:09:57:e9:b5:89: e6:cd:10:14:e8:ee:4e:b8:c8:3e:43:d0:08:a4:1d:95:b4:c1: 7e:a3:f1:e0:db:cb:60:bf:42:d0:b3:da:0c:1b:96:e5:90:92: 6a:20:e1:3d:ed:48:bd:a5:3c:b6:10:a5:5c:5f:59:52:0b:79: ca:05:96:9e:aa:27:d6:80:df:d7:ab:01:35:9c:ec:1b:61:63: 07:30:03:0d:8a:05:8a:41:1a:e5:c5:2e:7d:12:2b:76:d6:05: c8:b1:a6:00:14:1c:7e:96:ac:78:23:9e:7b:53:24:12:4e:c3: 29:15:9a:e3:8b:e2:77:7b:3d:8e:9c:b1:11:0a:88:33:ca:55: 9e:ec:19:bc:32:38:2a:f6:b1:75:04:35:e8:aa:e7:71:34:18: df:fd:64:fa:00:52:c0:a2:2c:33:ba:14:22:f6:db:d8:91:1a: 30:ff:a4:22:16:96:89:b3:cc:29:77:bf:12:8e:8a:5a:a2:08: 98:92:95:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8PB3otsUtYsRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NmUzMTk5ZGEtNWQ3Zi00M2I0LWE3MzItNmY0NGFhZmJlM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbdvU8ILolNqxDt/CrczFK3ijJVhvgLo2lx3 s1E877vK4vU1SZ3wi347UtL7CVtIGGcB+0TDY1BW+/9jyH5PFAYjU+Pz7IJnakUz iINed0tx/mt8gapVAws83f/5UtSBIijaHsp4vNcY6jPtAPYNPZOefrVvTOWxKcOS jN+aTX+skzb8ush0NqZ5oLA/tVWDjC+Yzkq8n3h3U6rvmJIjWFl5I+2XIFw2Y4+f QydNwDK7K3qsDls0zcKuaP3ruwvuQWyJucAqtIOOzuX2ORTXPb8CMumOgUTksaRy hr7CmNoIQnk7kxsf7hETYXicMCurPeLM1ZCjZRmcq0zU4F1ijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWSAowlL5Yw14J7fLFsTO33CiKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDI5NmM5NWQtZGUwZC0z MjM0LTkwNmEtMzEzN2U2YWU1NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH/rOyu+F4jPJeakTDFT6GUqeZGjhrxRubNK6nWUGrTbgFdKJBiwyCv s6Mt0zYsqxrVrconaDfLt2A+mJREsQVGdLAJV+m1iebNEBTo7k64yD5D0AikHZW0 wX6j8eDby2C/QtCz2gwbluWQkmog4T3tSL2lPLYQpVxfWVILecoFlp6qJ9aA39er ATWc7BthYwcwAw2KBYpBGuXFLn0SK3bWBcixpgAUHH6WrHgjnntTJBJOwykVmuOL 4nd7PY6csREKiDPKVZ7sGbwyOCr2sXUENeiq53E0GN/9ZPoAUsCiLDO6FCL229iR GjD/pCIWlomzzCl3vxKOilqiCJiSlUk= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:49 2025 by rpki-client