$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c270b0-baa4-3e3b-a458-af9f8000780f.roa File: 49c270b0-baa4-3e3b-a458-af9f8000780f.roa (raw, json) Hash identifier: u30LWmFg54D1AXGog8rGwsR8JGtWdkKFsvha0IsbQJk= Subject key identifier: D3:99:72:53:2D:AB:5D:6F:82:AD:B9:D0:EB:18:73:C3:87:0B:15:26 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC882DF1E0A2B6D727580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c270b0-baa4-3e3b-a458-af9f8000780f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.142.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c8:82:df:1e:0a:2b:6d:72:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=89e53a4c-df83-400a-90d8-e034de3e4c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:99:7a:a3:b2:75:6a:1c:83:ec:43:2b:dc: 93:71:1a:79:60:2d:92:e3:e4:be:8d:d5:54:06:3f: 7e:96:8c:2d:cc:c3:49:68:a3:07:64:05:ce:11:fb: d7:2a:a2:7e:8a:69:91:e0:a6:7b:9f:c4:0b:8b:1e: 19:b7:53:af:64:cd:15:7e:0a:0f:b8:f0:db:2f:ac: 30:41:32:4b:01:c2:88:c1:3d:63:6f:0e:07:b2:5b: 49:e6:2e:c2:c7:bc:51:13:8b:19:d7:ac:7e:e3:43: 40:3f:d1:de:e1:5a:33:60:8c:dd:76:22:bb:88:b6: 8e:81:63:6d:0e:77:d2:dd:81:98:fd:9c:6b:10:04: 60:ca:ab:69:16:28:8b:65:05:87:b7:00:d1:15:90: b7:a3:b4:8f:4d:44:65:95:91:5e:37:f9:7b:99:7f: a6:78:51:6e:d4:a5:f9:5c:4c:72:b0:c1:92:86:d8: 9e:f0:32:4f:f4:f6:52:d0:f7:e1:37:b9:d0:f7:2e: f7:1c:c8:73:76:04:50:71:ed:af:ae:46:1f:b7:b3: 0e:fe:1f:2e:64:e4:4e:1d:4c:98:c6:09:4f:cc:15: 48:2c:c3:c4:81:29:68:6e:14:01:8b:c6:4a:94:98: b9:a8:ad:61:75:7b:b1:5c:a0:b7:5c:1f:22:89:ac: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:72:53:2D:AB:5D:6F:82:AD:B9:D0:EB:18:73:C3:87:0B:15:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c270b0-baa4-3e3b-a458-af9f8000780f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.142.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7b:b3:bf:3d:9b:69:88:2c:04:2d:79:88:13:7e:f9:52:4f: 6d:be:1b:e2:84:bd:6f:17:9e:e3:9f:d9:02:85:67:c2:87:b3: bf:db:bc:f3:89:f5:0c:d7:21:26:41:11:e3:56:28:e2:cd:f0: 77:05:f4:60:bd:3f:d9:fc:e9:cb:99:7d:b7:ff:71:2f:2a:2d: 15:c1:a6:8d:9b:cf:3f:70:c1:82:fa:c8:75:56:1d:47:c6:5c: fe:7e:a1:50:34:1f:35:63:4b:aa:47:5d:ec:77:42:10:b1:ee: 45:4c:4f:70:fc:d4:83:cc:54:6a:f9:fe:60:dc:3a:a3:98:d4: 90:a0:9c:15:6d:26:c9:06:0c:d8:fa:fb:18:a4:89:17:75:7f: 95:50:d4:c5:09:ed:fd:35:3b:95:03:e3:3c:4a:6d:81:b1:fe: cd:1a:e2:7b:68:6b:07:2e:47:3f:48:fa:3d:e5:55:2c:ab:2e: 65:2d:c2:14:bf:08:2f:33:74:ed:a7:4f:94:3f:8b:f5:c8:2f: ca:de:cb:61:b0:3b:0e:4d:34:d8:91:2b:b7:e7:b8:fa:1b:8d: 19:9b:c5:df:aa:c3:a6:f7:9a:1e:af:67:e4:d5:e0:c8:b2:41: cc:d0:b5:45:16:bd:3e:f7:76:64:f1:5c:49:99:7c:9d:c8:dc: a2:43:3d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8iC3x4KK21ydYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODllNTNhNGMtZGY4My00MDBhLTkwZDgtZTAzNGRlM2U0YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte6ZeqOydWocg+xDK9yTcRp5YC2S4+S+jdVU Bj9+lowtzMNJaKMHZAXOEfvXKqJ+immR4KZ7n8QLix4Zt1OvZM0VfgoPuPDbL6ww QTJLAcKIwT1jbw4HsltJ5i7Cx7xRE4sZ16x+40NAP9He4VozYIzddiK7iLaOgWNt DnfS3YGY/ZxrEARgyqtpFiiLZQWHtwDRFZC3o7SPTURllZFeN/l7mX+meFFu1KX5 XExysMGShtie8DJP9PZS0PfhN7nQ9y73HMhzdgRQce2vrkYft7MO/h8uZOROHUyY xglPzBVILMPEgSlobhQBi8ZKlJi5qK1hdXuxXKC3XB8iiazf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOZclMtq11vgq250OsYc8OHCxUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDljMjcwYjAtYmFhNC0z ZTNiLWE0NTgtYWY5ZjgwMDA3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt7s789m2mILAQteYgTfvlST22+G+KEvW8XnuOf2QKFZ8KHs7/bvPOJ 9QzXISZBEeNWKOLN8HcF9GC9P9n86cuZfbf/cS8qLRXBpo2bzz9wwYL6yHVWHUfG XP5+oVA0HzVjS6pHXex3QhCx7kVMT3D81IPMVGr5/mDcOqOY1JCgnBVtJskGDNj6 +xikiRd1f5VQ1MUJ7f01O5UD4zxKbYGx/s0a4ntoawcuRz9I+j3lVSyrLmUtwhS/ CC8zdO2nT5Q/i/XIL8rey2GwOw5NNNiRK7fnuPobjRmbxd+qw6b3mh6vZ+TV4Miy QczQtUUWvT73dmTxXEmZfJ3I3KJDPTM= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:44 2025 by rpki-client