$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa File: 52037103-8e6a-31e2-91b6-01a8928ef1da.roa (raw, json) Hash identifier: P9zw1b449Rgvkhet1ax/XfyaKfNCIZO33M+BiOr+p4U= Subject key identifier: D9:AD:72:39:BA:58:CC:1C:6D:B7:69:B5:10:72:54:AE:9C:21:03:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0FD5EF19D34F3C22E080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.123.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0f:d5:ef:19:d3:4f:3c:22:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7e5b1ccf-86db-4f1a-a6a2-612103ae6a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:e8:ca:7c:c3:16:ef:b6:ff:db:5c:e8:95: f4:e0:cb:fc:b2:5c:51:1a:59:89:99:6c:2c:a9:6e: f7:20:b4:28:a0:22:0c:13:32:51:e6:f6:be:5d:82: 02:49:f7:1e:6f:36:80:4f:98:ea:1c:ca:81:d6:f2: 4f:ad:9b:36:90:61:2d:88:dd:87:3e:24:0c:15:2b: a9:2d:39:05:8d:00:c1:85:39:51:de:25:3f:c2:f2: 18:7d:78:4e:2c:28:b8:79:19:5b:be:31:ae:a1:d9: 0f:a0:67:78:db:59:68:35:3b:fa:60:45:98:63:31: 04:bb:ee:95:a1:cd:a4:7f:ba:39:5e:5d:c5:31:99: 0c:80:0a:0b:70:ce:74:d4:90:76:ba:a7:f8:7a:5c: 74:f9:dc:81:74:25:56:86:ae:d7:66:7c:ce:2d:45: 87:30:b1:b2:3b:6e:ef:7d:98:44:f7:5b:7d:7c:6a: 9a:1d:72:11:1e:da:15:20:6f:c0:86:2e:af:f8:ca: b1:e3:42:f7:3c:61:43:7f:03:66:c1:04:cb:56:ca: b7:d5:1b:62:73:f5:f0:77:e8:51:c8:b2:c6:54:51: 0a:29:e6:82:e2:e2:5d:2c:08:66:f9:d2:6c:00:07: eb:e8:56:1d:59:c1:22:88:0a:1a:94:9e:a5:b2:47: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:72:39:BA:58:CC:1C:6D:B7:69:B5:10:72:54:AE:9C:21:03:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52037103-8e6a-31e2-91b6-01a8928ef1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c2:85:2d:85:86:75:d9:6f:ee:15:8b:ff:19:73:14:d5:ef: 8e:d8:82:fd:f4:a9:6d:a0:78:ef:19:4f:d8:09:2b:99:6c:2c: 98:48:0c:4a:39:bf:de:91:8f:7e:9b:1c:86:0d:96:af:77:55: c2:5e:9d:57:fa:d6:60:b8:ef:eb:a3:f6:4d:c1:87:fc:24:18: 9a:fa:2f:19:a5:9f:21:5e:89:88:d1:01:17:b2:59:dd:0c:4c: 37:9f:46:c9:be:33:33:c1:02:19:f2:f8:8e:6d:94:af:f6:a8: f2:b5:c9:25:e0:4e:0c:9b:57:1b:01:3e:ed:fb:d8:e4:b1:92: 26:e0:ca:d8:9c:5e:5a:55:ae:8b:a0:a5:41:a3:55:f0:22:38: e9:0b:af:0a:cb:1f:1e:36:fe:70:cc:91:08:ee:d6:6b:ae:64: 15:6d:ed:54:bd:65:ee:09:3b:07:98:a6:13:a9:9c:34:17:fe: 6e:af:a0:9f:f2:51:99:53:a6:a7:59:2f:1e:09:f2:bd:2d:aa: d1:c5:31:f8:44:b3:12:4b:f1:1b:d6:83:a6:4e:44:ce:db:a8: 68:fc:16:81:b6:c8:23:59:2e:14:63:e3:bc:90:5c:d0:32:82: 23:e7:0f:40:dc:01:01:cc:ca:f5:40:cb:1c:95:68:12:60:0a: 6e:8f:84:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA/V7xnTTzwi4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk N2U1YjFjY2YtODZkYi00ZjFhLWE2YTItNjEyMTAzYWU2YTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLroynzDFu+2/9tc6JX04Mv8slxRGlmJmWws qW73ILQooCIMEzJR5va+XYICSfcebzaAT5jqHMqB1vJPrZs2kGEtiN2HPiQMFSup LTkFjQDBhTlR3iU/wvIYfXhOLCi4eRlbvjGuodkPoGd421loNTv6YEWYYzEEu+6V oc2kf7o5Xl3FMZkMgAoLcM501JB2uqf4elx0+dyBdCVWhq7XZnzOLUWHMLGyO27v fZhE91t9fGqaHXIRHtoVIG/Ahi6v+Mqx40L3PGFDfwNmwQTLVsq31Rtic/Xwd+hR yLLGVFEKKeaC4uJdLAhm+dJsAAfr6FYdWcEiiAoalJ6lskc4LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmtcjm6WMwcbbdptRByVK6cIQNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTIwMzcxMDMtOGU2YS0z MWUyLTkxYjYtMDFhODkyOGVmMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7ChS2FhnXZb+4Vi/8ZcxTV747Ygv30qW2geO8ZT9gJK5lsLJhIDEo5 v96Rj36bHIYNlq93VcJenVf61mC47+uj9k3Bh/wkGJr6LxmlnyFeiYjRAReyWd0M TDefRsm+MzPBAhny+I5tlK/2qPK1ySXgTgybVxsBPu372OSxkibgyticXlpVroug pUGjVfAiOOkLrwrLHx42/nDMkQju1muuZBVt7VS9Ze4JOweYphOpnDQX/m6voJ/y UZlTpqdZLx4J8r0tqtHFMfhEsxJL8RvWg6ZORM7bqGj8FoG2yCNZLhRj47yQXNAy giPnD0DcAQHMyvVAyxyVaBJgCm6PhNw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:47 2025 by rpki-client