$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dfc49c7-0468-3186-a3fc-10c20275a210.roa File: 4dfc49c7-0468-3186-a3fc-10c20275a210.roa (raw, json) Hash identifier: ytfMtMT4Kctr0tBPvjbfHVubW9lO0/Y8vFHlQ51vwZE= Subject key identifier: AA:D6:9F:45:FE:40:74:8C:9A:CF:1E:23:9C:6A:FC:F0:50:32:30:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582050E5C5695DDAE3917C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dfc49c7-0468-3186-a3fc-10c20275a210.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.101.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:05:0e:5c:56:95:dd:ae:39:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=00b98355-a588-4171-a0c2-2a04a65db576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:0c:d6:9a:df:8b:ab:12:9e:25:f8:9b:de: e9:70:dd:0d:2f:cd:31:a5:bf:19:8c:46:db:83:cc: 3b:07:63:ca:60:36:73:60:8e:81:7a:09:9f:a9:42: 17:d2:70:b4:03:c7:7b:af:3d:d1:2e:b8:fb:db:b0: 50:43:c4:4a:1a:c6:78:d6:4a:83:ff:d4:01:ef:ca: 28:0b:5f:b3:0e:93:5d:9a:b4:1d:25:d6:e8:0b:ad: 12:55:e0:e1:56:c6:63:ad:3a:c8:15:f7:43:6c:d1: 9a:4d:bd:2f:ae:54:7d:d5:d8:6e:43:72:a9:da:ce: d5:59:4f:b9:e6:2e:19:f8:26:05:07:1b:ad:37:43: a1:04:21:22:f8:c1:27:b5:df:8a:d9:bc:65:f7:93: bd:af:28:42:d7:87:d2:53:6e:01:77:31:d9:80:b7: 65:4e:2c:02:53:17:58:7f:48:5a:49:cf:d1:15:b8: 07:2d:e3:d9:68:55:ee:7c:32:22:74:db:55:d9:b9: f3:ab:dc:89:0f:5e:7b:09:38:39:2c:1c:7f:13:31: 95:28:3a:91:9b:8e:03:14:56:39:5f:91:6c:27:78: 37:93:3f:3f:b2:6a:0d:4f:70:93:17:e1:5e:c5:a2: cf:20:ce:c5:a9:a3:92:81:b1:86:df:19:2a:da:66: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D6:9F:45:FE:40:74:8C:9A:CF:1E:23:9C:6A:FC:F0:50:32:30:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dfc49c7-0468-3186-a3fc-10c20275a210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8f:d3:f5:42:63:1e:64:83:c7:3c:17:6b:4c:e4:d0:8a:05: d3:69:5b:b1:9c:99:da:b6:fc:b8:cf:75:fb:14:00:ec:ef:c5: ce:a8:71:c1:de:c4:d6:1c:c0:6b:9f:65:e3:5d:c7:f0:5b:85: f8:76:9f:e8:ff:25:10:89:c0:fe:ac:0a:4a:c1:88:f7:78:6d: 20:a5:45:ec:8d:e6:9f:63:00:cf:c0:e1:cd:52:9c:80:b0:6e: c1:71:c3:70:26:16:f3:2d:08:ec:cf:66:f8:40:02:ae:ad:98: 66:5d:70:4c:25:3f:1e:c7:40:91:10:69:08:6b:57:d9:8c:e7: 28:53:88:01:a8:85:20:35:eb:bc:b9:55:85:e8:9c:9f:09:93: 1a:43:1d:34:9c:9a:5c:a6:3d:85:40:86:34:bb:8b:a6:5f:39: e1:82:c3:a2:42:02:00:8c:1f:11:db:c7:c8:2e:08:c8:6d:9b: d5:c9:9d:bd:c5:8b:b7:25:4e:1d:4a:6f:60:ae:5f:f5:0e:7b: 08:f0:e7:b4:33:21:e7:3f:82:5e:d7:b6:e5:74:34:bc:fe:51: 1e:db:58:53:26:d5:dd:e2:9a:01:bc:57:32:5c:6d:20:a2:21: 2c:c1:0c:06:6c:76:d6:73:7f:ea:b4:85:62:b5:32:85:b2:a3: d8:0c:af:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggUOXFaV3a45F8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDBiOTgzNTUtYTU4OC00MTcxLWEwYzItMmEwNGE2NWRiNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzMM1prfi6sSniX4m97pcN0NL80xpb8ZjEbb g8w7B2PKYDZzYI6BegmfqUIX0nC0A8d7rz3RLrj727BQQ8RKGsZ41kqD/9QB78oo C1+zDpNdmrQdJdboC60SVeDhVsZjrTrIFfdDbNGaTb0vrlR91dhuQ3Kp2s7VWU+5 5i4Z+CYFBxutN0OhBCEi+MEntd+K2bxl95O9ryhC14fSU24BdzHZgLdlTiwCUxdY f0haSc/RFbgHLePZaFXufDIidNtV2bnzq9yJD157CTg5LBx/EzGVKDqRm44DFFY5 X5FsJ3g3kz8/smoNT3CTF+FexaLPIM7FqaOSgbGG3xkq2mYxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrWn0X+QHSMms8eI5xq/PBQMjCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRmYzQ5YzctMDQ2OC0z MTg2LWEzZmMtMTBjMjAyNzVhMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqP0/VCYx5kg8c8F2tM5NCKBdNpW7Gcmdq2/LjPdfsUAOzvxc6occHe xNYcwGufZeNdx/Bbhfh2n+j/JRCJwP6sCkrBiPd4bSClReyN5p9jAM/A4c1SnICw bsFxw3AmFvMtCOzPZvhAAq6tmGZdcEwlPx7HQJEQaQhrV9mM5yhTiAGohSA167y5 VYXonJ8JkxpDHTScmlymPYVAhjS7i6ZfOeGCw6JCAgCMHxHbx8guCMhtm9XJnb3F i7clTh1Kb2CuX/UOewjw57QzIec/gl7XtuV0NLz+UR7bWFMm1d3imgG8VzJcbSCi ISzBDAZsdtZzf+q0hWK1MoWyo9gMrwg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:12 2025 by rpki-client