$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b09e772-b959-3e41-8385-99721d507f9e.roa File: 5b09e772-b959-3e41-8385-99721d507f9e.roa (raw, json) Hash identifier: KPS8035agXQ8sGNDcGVb8LsZK5hTLHLopp5QGfpn0hg= Subject key identifier: 3E:1D:A1:90:56:60:DB:83:AD:69:44:F6:88:4E:B7:AB:B3:EF:D7:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB1D2C8D8725720505540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b09e772-b959-3e41-8385-99721d507f9e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.134.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b1:d2:c8:d8:72:57:20:50:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=876b38d2-abf4-40d3-ae05-dca73439d743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:87:71:21:4f:e5:83:13:af:8b:22:3d:28: 2b:93:18:e5:ce:2f:a6:c4:18:90:8c:84:0c:d3:7b: 2a:40:d7:e0:e2:ff:aa:fe:f9:91:c3:50:6f:95:66: 92:5e:64:0c:0b:c8:bb:dc:09:bc:0f:0e:27:7d:6b: 78:39:0a:42:59:39:41:b5:2c:74:dc:09:a7:d3:43: 42:12:65:43:86:a8:6b:f6:d9:21:3b:aa:cb:a5:b5: 36:2a:16:9c:7d:44:4e:a0:c3:57:1f:c6:0b:9b:ed: e9:c1:b9:1a:2a:e4:94:25:3b:98:dd:8f:bc:5f:e3: 96:a6:72:0f:12:b0:7a:f0:be:e4:0c:a2:53:86:88: 5c:6a:5d:e1:14:21:e5:e3:df:c3:dc:f0:e1:e5:ba: ee:51:a6:ab:84:ce:30:ba:1e:85:db:e0:3f:fc:65: 05:e4:53:36:57:9d:c6:a5:71:8b:83:3d:02:bb:3d: d6:d1:59:fc:a5:3e:ac:7d:e8:2b:9c:50:29:9f:49: a5:66:bc:cd:a1:d6:bf:71:a8:6b:39:20:75:f1:18: 40:a2:32:b9:1e:19:bd:eb:a6:fa:b7:fd:66:75:75: 5c:7d:94:44:ae:45:29:72:38:99:85:5a:90:10:ee: b6:c4:61:7c:4c:9f:0f:5f:38:03:2c:4a:b8:de:45: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1D:A1:90:56:60:DB:83:AD:69:44:F6:88:4E:B7:AB:B3:EF:D7:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5b09e772-b959-3e41-8385-99721d507f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e3:8e:0d:c8:c5:03:2e:44:2d:ef:a0:db:99:28:88:6f:19: de:41:24:0d:3c:84:5c:f7:92:6a:b9:bf:98:90:56:42:8f:13: 1d:e2:db:38:3f:d8:6b:af:ab:4d:53:05:cb:c1:33:20:b4:ac: b8:09:37:df:64:e5:4e:b8:4e:95:f4:11:09:d6:58:4d:20:1b: 27:fb:c1:d0:e7:20:6b:75:d2:50:68:72:17:f3:00:82:66:1f: 8e:f0:dd:56:6f:a1:ba:de:41:04:cf:46:2f:80:d5:1f:8b:f2: 27:0c:cf:92:c0:8f:ea:29:53:4d:75:20:c8:50:a6:1a:a8:e7: 29:a7:c9:69:1e:9d:28:06:ac:73:96:22:d5:bb:f0:81:29:b6: de:fb:85:78:24:69:73:8c:29:77:c5:bd:7a:7e:9b:02:46:72: b4:4c:26:f5:41:a8:da:5f:d3:d8:29:74:87:69:72:c2:b4:d4: e4:37:fc:fa:f0:d6:1b:2d:1e:c2:01:63:cc:4c:ce:38:17:3d: 96:ae:b7:84:b0:a7:94:d9:0c:ed:fe:ac:f2:9e:f2:47:bd:c8: 2e:25:70:cf:ab:67:18:0c:21:44:e3:9c:70:26:07:cc:03:6e: a1:c7:47:34:4a:35:c5:a3:31:b5:51:3f:34:df:9e:74:98:19: c0:78:a7:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7HSyNhyVyBQVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODc2YjM4ZDItYWJmNC00MGQzLWFlMDUtZGNhNzM0MzlkNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqKHcSFP5YMTr4siPSgrkxjlzi+mxBiQjIQM 03sqQNfg4v+q/vmRw1BvlWaSXmQMC8i73Am8Dw4nfWt4OQpCWTlBtSx03Amn00NC EmVDhqhr9tkhO6rLpbU2KhacfUROoMNXH8YLm+3pwbkaKuSUJTuY3Y+8X+OWpnIP ErB68L7kDKJThohcal3hFCHl49/D3PDh5bruUaarhM4wuh6F2+A//GUF5FM2V53G pXGLgz0Cuz3W0Vn8pT6sfegrnFApn0mlZrzNoda/cahrOSB18RhAojK5Hhm966b6 t/1mdXVcfZRErkUpcjiZhVqQEO62xGF8TJ8PXzgDLEq43kXFSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4doZBWYNuDrWlE9ohOt6uz79deMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWIwOWU3NzItYjk1OS0z ZTQxLTgzODUtOTk3MjFkNTA3ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIobwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfjjg3IxQMuRC3voNuZKIhvGd5BJA08hFz3kmq5v5iQVkKPEx3i2zg/ 2Guvq01TBcvBMyC0rLgJN99k5U64TpX0EQnWWE0gGyf7wdDnIGt10lBochfzAIJm H47w3VZvobreQQTPRi+A1R+L8icMz5LAj+opU011IMhQphqo5ymnyWkenSgGrHOW ItW78IEptt77hXgkaXOMKXfFvXp+mwJGcrRMJvVBqNpf09gpdIdpcsK01OQ3/Prw 1hstHsIBY8xMzjgXPZaut4Swp5TZDO3+rPKe8ke9yC4lcM+rZxgMIUTjnHAmB8wD bqHHRzRKNcWjMbVRPzTfnnSYGcB4p2A= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:42 2025 by rpki-client