$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa File: 4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa (raw, json) Hash identifier: bFbiizgBUBOjPgV/b/pjisrUI3+ypCJ+g0jkJN6Au2Y= Subject key identifier: F5:2F:AE:24:94:D1:86:03:3C:51:0A:F3:0A:0F:F1:12:C7:3C:AB:4A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581892BCDB6B8CF0235BAA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.118.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:89:2b:cd:b6:b8:cf:02:35:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=dbde0b2c-a73e-47b2-a9fe-d4a589ebe576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:24:21:9a:3b:09:bd:3c:2c:15:b9:70:40: a6:1d:50:a9:2c:01:5f:18:09:0f:ab:1b:b1:85:51: f9:b9:34:9b:71:f2:ce:46:5a:af:39:05:f3:32:29: 9f:54:47:67:ea:eb:20:e1:dc:fd:2f:b0:24:1b:71: b4:0b:ee:a5:f3:fe:e0:c8:57:37:08:e8:fe:66:8d: 24:27:8d:ff:26:5b:5d:85:93:2f:58:b7:69:87:2e: 38:fe:b9:83:4f:3d:d7:32:59:db:e4:0a:5a:8d:ff: 9f:4b:b2:8b:b1:2d:51:f6:69:ee:6e:8a:e5:7f:d1: d2:94:d3:26:e0:1e:fc:77:2c:79:58:c2:a8:4c:0e: 8a:42:1c:de:6d:d9:f9:98:64:37:24:19:7f:45:b4: 7d:97:c9:76:27:bc:a3:4f:2f:72:8d:fe:39:cd:2a: d0:aa:40:12:68:56:b3:b6:a4:71:09:53:36:b5:ef: 02:04:49:76:17:89:4f:6b:da:25:87:13:c0:2e:44: e2:c8:18:12:53:4c:68:57:b4:2e:94:6e:29:3e:57: b2:8b:90:7c:85:52:93:97:af:37:9b:e0:03:6b:57: d2:5a:66:40:9a:b9:56:76:33:21:97:99:ec:ca:8c: c6:8c:de:fa:0a:d1:99:1e:dc:a4:0e:9f:ac:b9:f3: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:AE:24:94:D1:86:03:3C:51:0A:F3:0A:0F:F1:12:C7:3C:AB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cef0ba6-7dc6-30db-9115-e1ccacea9ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:74:48:35:93:14:2d:af:93:a4:20:06:3d:6c:ad:22:c5:b9: ca:6f:19:fa:96:ae:d8:c2:05:00:4d:41:52:25:e6:4f:d3:e9: 73:15:52:e1:29:63:4c:f6:e8:62:58:09:ba:c5:8a:2b:02:47: a6:3b:90:4a:db:2a:a2:be:f5:0e:27:48:69:7d:30:7c:83:67: cc:b4:8b:30:1b:3e:ba:df:2a:c1:31:bb:97:41:bd:73:58:29: 04:25:08:23:d4:56:4e:31:4e:c1:40:01:c3:d5:7b:60:1a:7f: 15:24:fc:01:17:3b:83:a7:97:df:73:05:4c:3b:b1:68:a7:a8: 4c:e0:08:34:59:3d:b5:7b:5c:77:80:81:fd:e4:52:23:d5:5c: 37:c4:97:62:fb:f7:12:80:58:49:d6:b3:fa:9f:48:90:fb:fd: cb:9f:38:be:07:b9:c7:5c:75:4e:d5:dc:bd:5f:59:96:39:48: c4:cd:52:04:4c:22:7d:33:d5:50:8a:64:5c:a5:79:54:c7:44: 05:ef:87:e3:96:45:e6:00:eb:ec:6c:ee:41:3f:b8:c7:15:01: 3d:e0:d3:8a:94:ac:05:ed:b4:98:be:73:40:b6:a6:8e:dd:b2: ee:f0:c2:1b:3a:25:bc:e4:92:86:14:b4:29:fd:80:c4:f6:7a: 40:88:e5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYkrzba4zwI1uqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGJkZTBiMmMtYTczZS00N2IyLWE5ZmUtZDRhNTg5ZWJlNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2gkIZo7Cb08LBW5cECmHVCpLAFfGAkPqxux hVH5uTSbcfLORlqvOQXzMimfVEdn6usg4dz9L7AkG3G0C+6l8/7gyFc3COj+Zo0k J43/JltdhZMvWLdphy44/rmDTz3XMlnb5Apajf+fS7KLsS1R9mnuborlf9HSlNMm 4B78dyx5WMKoTA6KQhzebdn5mGQ3JBl/RbR9l8l2J7yjTy9yjf45zSrQqkASaFaz tqRxCVM2te8CBEl2F4lPa9olhxPALkTiyBgSU0xoV7QulG4pPleyi5B8hVKTl683 m+ADa1fSWmZAmrlWdjMhl5nsyozGjN76CtGZHtykDp+sufM/bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUvriSU0YYDPFEK8woP8RLHPKtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGNlZjBiYTYtN2RjNi0z MGRiLTkxMTUtZTFjY2FjZWE5ZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG50SDWTFC2vk6QgBj1srSLFucpvGfqWrtjCBQBNQVIl5k/T6XMVUuEp Y0z26GJYCbrFiisCR6Y7kErbKqK+9Q4nSGl9MHyDZ8y0izAbPrrfKsExu5dBvXNY KQQlCCPUVk4xTsFAAcPVe2AafxUk/AEXO4Onl99zBUw7sWinqEzgCDRZPbV7XHeA gf3kUiPVXDfEl2L79xKAWEnWs/qfSJD7/cufOL4HucdcdU7V3L1fWZY5SMTNUgRM In0z1VCKZFyleVTHRAXvh+OWReYA6+xs7kE/uMcVAT3g04qUrAXttJi+c0C2po7d su7wwhs6JbzkkoYUtCn9gMT2ekCI5as= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:31 2025 by rpki-client