$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c2d915-5eff-3f59-a5b8-73de42f76f90.roa File: 42c2d915-5eff-3f59-a5b8-73de42f76f90.roa (raw, json) Hash identifier: cpi4ALHIbIWjy7eEr1zTonZdbLgTu0uBw8iLqzWN0BY= Subject key identifier: F9:CE:2A:9D:C9:E4:34:9A:C5:FB:41:92:48:5E:2F:01:D7:33:FA:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58229FFDA986F060CE217C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c2d915-5eff-3f59-a5b8-73de42f76f90.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.106.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:29:ff:da:98:6f:06:0c:e2:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6c54b61d-f11f-4088-8e4a-899abf9d238f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:ba:86:76:33:78:9f:eb:ab:8f:21:1a:83: 39:e1:74:90:24:21:ff:17:f7:9f:d0:ac:ad:9c:91: 30:01:51:6d:31:9f:c8:a2:23:07:5e:4e:1a:f6:90: d1:7d:5c:b4:95:25:a7:0a:6a:1e:80:b5:01:c0:4a: 6b:f7:f9:0d:b8:77:b5:1f:ea:04:a1:4b:d8:a0:95: 1d:c3:a1:00:b9:4d:c2:76:4c:e6:b8:60:9f:07:3e: df:47:40:a3:f7:ab:5a:3c:c2:0a:27:fb:3f:fb:8a: a2:d3:2f:8a:c6:c1:77:71:23:42:57:f7:dd:54:ce: 85:3a:20:12:08:c3:2b:68:de:20:8b:bb:0c:4e:de: 21:09:29:dc:46:14:18:69:b1:2d:10:f7:32:30:d1: 7e:2b:35:3f:c6:3d:90:a9:ac:a7:8e:d7:77:a8:ea: 5f:17:4a:e2:2c:c9:bb:cc:29:7b:21:89:2e:16:59: a5:6a:e0:42:ea:5f:ee:46:c0:30:4f:8a:24:df:1b: 10:0c:8b:74:5f:1d:fa:e2:bb:76:ac:37:e2:3a:04: 2b:d1:55:b4:fd:91:d3:7a:5e:9a:1c:83:28:fb:c2: a8:73:f6:80:25:07:75:e8:89:c2:be:63:78:bb:5b: 61:81:d5:17:de:88:14:0b:c6:e6:1e:ad:42:b7:56: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CE:2A:9D:C9:E4:34:9A:C5:FB:41:92:48:5E:2F:01:D7:33:FA:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c2d915-5eff-3f59-a5b8-73de42f76f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.106.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:aa:1b:de:7f:e2:84:a8:59:f9:82:12:0c:cc:2d:ea:15:da: 7a:8f:55:8e:5f:aa:72:19:70:e0:98:93:fb:6b:8c:c6:ca:fb: 37:08:f2:51:75:54:77:b8:2a:59:5b:33:cc:6d:70:a6:15:c0: 0c:16:c6:79:ad:15:1b:9c:4c:7e:d9:fe:f8:e9:28:32:bb:08: 03:b5:8f:4a:b1:a5:50:18:93:77:e1:f9:57:19:2f:ec:7e:00: b6:13:b0:c7:7a:94:9b:23:1f:28:5b:ac:dd:1d:26:32:1e:d2: 2c:01:fa:5a:e8:bd:d8:9a:9a:7e:9b:df:14:a4:45:ab:23:c2: 0b:57:75:23:8a:94:16:9d:76:77:65:9d:df:53:37:44:7a:53: c9:9e:bc:a4:10:b8:1b:3f:cf:5d:8c:ca:91:9c:5f:bc:33:23: 2a:63:6d:5b:53:8c:b9:83:e7:0b:6b:12:f1:ac:38:fb:db:96: f6:15:5b:f3:5d:e4:1c:fd:3e:f7:b7:2c:f6:00:ef:d3:f5:97: 64:0c:2a:ed:fa:79:78:d3:0a:92:21:fb:f8:1a:b1:22:38:cd: 0b:91:df:a7:c2:d9:77:9f:5e:64:1d:77:c1:67:dd:40:12:53: 50:cf:b6:90:de:4a:9e:d1:1c:c9:d3:55:d9:07:11:57:64:93: 95:f9:7e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgin/2phvBgziF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmM1NGI2MWQtZjExZi00MDg4LThlNGEtODk5YWJmOWQyMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgq6hnYzeJ/rq48hGoM54XSQJCH/F/ef0Kyt nJEwAVFtMZ/IoiMHXk4a9pDRfVy0lSWnCmoegLUBwEpr9/kNuHe1H+oEoUvYoJUd w6EAuU3CdkzmuGCfBz7fR0Cj96taPMIKJ/s/+4qi0y+KxsF3cSNCV/fdVM6FOiAS CMMraN4gi7sMTt4hCSncRhQYabEtEPcyMNF+KzU/xj2Qqaynjtd3qOpfF0riLMm7 zCl7IYkuFlmlauBC6l/uRsAwT4ok3xsQDIt0Xx364rt2rDfiOgQr0VW0/ZHTel6a HIMo+8Koc/aAJQd16InCvmN4u1thgdUX3ogUC8bmHq1Ct1YWdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnOKp3J5DSaxftBkkheLwHXM/rdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDJjMmQ5MTUtNWVmZi0z ZjU5LWE1YjgtNzNkZTQyZjc2ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmqG95/4oSoWfmCEgzMLeoV2nqPVY5fqnIZcOCYk/trjMbK+zcI8lF1 VHe4KllbM8xtcKYVwAwWxnmtFRucTH7Z/vjpKDK7CAO1j0qxpVAYk3fh+VcZL+x+ ALYTsMd6lJsjHyhbrN0dJjIe0iwB+lrovdiamn6b3xSkRasjwgtXdSOKlBaddndl nd9TN0R6U8mevKQQuBs/z12MypGcX7wzIypjbVtTjLmD5wtrEvGsOPvblvYVW/Nd 5Bz9Pve3LPYA79P1l2QMKu36eXjTCpIh+/gasSI4zQuR36fC2XefXmQdd8Fn3UAS U1DPtpDeSp7RHMnTVdkHEVdkk5X5frc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:49 2025 by rpki-client