$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa File: 4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa (raw, json) Hash identifier: LO7BJE2XgBHYKb6eSj6rytTyBciV3Xwb6BxH5gfueMc= Subject key identifier: 99:BA:A2:D0:C7:2A:FD:FB:74:1B:22:93:C7:67:63:A7:8A:A3:3D:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5822E87F5F8A92BAE065E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2e:87:f5:f8:a9:2b:ae:06:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d67557c5-2cc4-47f7-936c-aa2ea4400555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:82:bd:08:a6:cd:bb:80:6d:17:40:a8:a7:32: cb:70:07:46:e8:24:e0:00:af:ae:b8:16:00:49:24: 09:23:06:10:5c:01:e8:88:86:9e:46:f8:4f:24:ff: e9:9d:0e:79:1e:2d:98:41:56:ea:d5:85:e0:be:24: 3a:75:87:1b:37:7e:a6:d4:22:86:5a:3f:f5:6a:85: fb:d0:95:30:17:18:6b:f9:48:1d:43:2d:c9:11:2f: 13:0c:32:e2:70:d7:8e:fc:e2:6e:a8:b9:1d:5c:e6: a1:45:97:04:45:49:cf:9f:bc:34:41:b1:57:13:15: 6e:e6:6e:34:d9:56:72:ee:ae:bd:60:d2:0f:9d:4c: 37:51:7f:da:32:1d:c4:9e:28:aa:d3:c9:f5:99:bc: 50:5e:46:ed:72:31:d1:79:2a:80:f9:ea:9e:db:07: 32:7b:51:c4:59:f0:89:3f:97:71:99:1e:b2:f8:dd: 0a:40:0d:a5:4d:47:65:44:4b:05:e4:33:00:41:c5: 59:af:58:16:ab:1e:04:e3:bc:29:f6:31:be:d9:83: 2e:ba:7b:bb:80:ef:f3:df:3b:e7:72:df:ab:fc:de: 31:11:81:a7:ae:39:0c:b6:29:2a:8c:e6:c3:04:3f: 05:a2:63:24:41:83:10:06:14:08:88:19:42:4d:fe: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:A2:D0:C7:2A:FD:FB:74:1B:22:93:C7:67:63:A7:8A:A3:3D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dc29631-065a-345a-a8ec-14c6dd2fac1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ed:8b:6c:ec:54:7e:ae:90:72:df:e0:50:5b:7b:fe:08:24: cb:ea:b0:44:ca:75:64:ad:2c:64:d7:c0:44:23:d9:c3:b2:d5: 72:52:ba:0f:95:19:90:f8:0a:1c:98:f6:e7:72:38:2a:c9:26: 6b:4c:0e:b9:2b:ac:47:99:e2:ba:8c:37:ec:1e:76:e2:8f:1f: 75:fa:d4:a1:44:84:ac:95:54:2e:d6:4c:36:f4:af:4c:1b:b5: e0:ac:e2:f5:75:b0:17:2a:40:06:3a:b9:36:00:29:f6:e4:7e: 42:46:59:f7:4c:e7:d1:1b:94:96:f3:e7:f8:8a:88:28:42:f6: 46:52:21:a4:15:a8:16:70:2b:21:f9:86:84:b8:84:13:b9:80: 0e:fc:ce:8b:52:9c:78:ee:c6:a8:87:61:81:08:c1:3b:55:ff: 3b:82:e1:10:d5:64:dd:e0:19:40:98:51:1a:e0:28:f2:e2:53: b0:6d:89:d6:72:ac:7c:9f:ba:9b:c3:ba:af:02:06:38:c4:fe: 6b:2d:ef:c1:24:bf:70:14:dc:06:64:26:01:3d:9f:0b:c4:25: e2:ab:10:7c:68:87:dc:21:f2:4c:4f:d6:85:98:c6:a5:8c:55: 0a:3b:de:0b:e3:04:83:11:e3:e4:0f:5d:79:b3:5d:0e:89:c5: e5:c0:b4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi6H9fipK64GXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY3NTU3YzUtMmNjNC00N2Y3LTkzNmMtYWEyZWE0NDAwNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YK9CKbNu4BtF0CopzLLcAdG6CTgAK+uuBYA SSQJIwYQXAHoiIaeRvhPJP/pnQ55Hi2YQVbq1YXgviQ6dYcbN36m1CKGWj/1aoX7 0JUwFxhr+UgdQy3JES8TDDLicNeO/OJuqLkdXOahRZcERUnPn7w0QbFXExVu5m40 2VZy7q69YNIPnUw3UX/aMh3Eniiq08n1mbxQXkbtcjHReSqA+eqe2wcye1HEWfCJ P5dxmR6y+N0KQA2lTUdlREsF5DMAQcVZr1gWqx4E47wp9jG+2YMuunu7gO/z3zvn ct+r/N4xEYGnrjkMtikqjObDBD8FomMkQYMQBhQIiBlCTf4IvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm6otDHKv37dBsik8dnY6eKoz3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRjMjk2MzEtMDY1YS0z NDVhLWE4ZWMtMTRjNmRkMmZhYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDti2zsVH6ukHLf4FBbe/4IJMvqsETKdWStLGTXwEQj2cOy1XJSug+V GZD4ChyY9udyOCrJJmtMDrkrrEeZ4rqMN+weduKPH3X61KFEhKyVVC7WTDb0r0wb teCs4vV1sBcqQAY6uTYAKfbkfkJGWfdM59EblJbz5/iKiChC9kZSIaQVqBZwKyH5 hoS4hBO5gA78zotSnHjuxqiHYYEIwTtV/zuC4RDVZN3gGUCYURrgKPLiU7BtidZy rHyfupvDuq8CBjjE/mst78Ekv3AU3AZkJgE9nwvEJeKrEHxoh9wh8kxP1oWYxqWM VQo73gvjBIMR4+QPXXmzXQ6JxeXAtDI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:08 2025 by rpki-client