$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa File: 5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa (raw, json) Hash identifier: Ti+UqchNLkRKkjZK2z5oOYLyCPGymEpgKrAOKfJSLgw= Subject key identifier: 32:21:83:8C:6B:D7:2A:64:96:32:EC:C8:9E:E5:5F:E0:CE:00:21:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE04176A3A8029998BB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.68.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e0:41:76:a3:a8:02:99:98:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1e9ac91d-d4d9-43bc-8664-f1d3c5bce430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:78:d8:b2:8e:c6:83:bb:87:04:c2:be:51: f5:a9:4b:d1:d6:94:cf:7b:a9:2f:f5:dc:33:e6:56: 1d:4d:c3:e7:9c:7e:d6:eb:0b:b9:07:ef:78:be:78: ad:d6:49:e5:f8:4d:09:ea:95:ad:3a:d7:42:39:de: ab:b7:84:bf:ee:63:cb:fc:f3:44:3e:92:5e:c2:39: f0:62:b2:94:d0:ae:9a:90:dd:c8:17:f5:04:7a:4d: ee:44:c2:52:6d:01:94:d8:f5:5e:39:9a:9d:46:53: c1:7c:86:54:2e:4b:70:b1:79:9c:b8:3d:d6:fd:63: 64:e4:13:ee:e9:15:47:89:85:7f:df:7f:d8:b0:24: 7c:fc:50:4c:12:79:50:01:7e:7b:28:ca:d2:79:c1: 08:57:6d:15:9a:12:1c:ac:54:14:7c:39:74:d3:a9: 70:35:aa:43:5b:7a:96:17:ac:af:39:92:1f:3d:2c: e3:30:17:72:f6:30:f0:14:db:b5:9a:d4:bf:70:3c: 6a:aa:78:c6:c2:15:e2:c3:da:a1:8d:ab:f7:a1:fa: 27:f7:25:bb:88:39:17:27:e0:e3:3e:8c:c8:18:11: 18:3a:c3:93:94:6b:27:b3:8f:73:9f:6d:78:6b:17: ab:bb:1c:10:ce:27:4b:e5:77:41:96:18:5b:df:af: 78:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:83:8C:6B:D7:2A:64:96:32:EC:C8:9E:E5:5F:E0:CE:00:21:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:96:00:73:1b:af:d2:40:24:ea:d8:2b:de:f2:7b:4b:a2:f8: e1:b4:7b:bb:0c:ff:ca:83:c6:fb:76:bd:1b:fe:18:65:f3:ba: 33:76:0b:c0:19:7f:0b:f0:74:06:6e:4d:4b:a2:2f:f5:e1:e0: 92:67:79:d9:1f:ed:0d:6a:5e:b4:5f:9a:4f:4b:99:28:f0:20: 4f:e4:44:6a:8a:a2:e9:23:35:b7:db:45:05:94:99:17:f3:7b: 38:b1:2e:4f:cb:c6:20:ce:b6:1b:21:28:58:25:6e:78:cd:a7: 87:ef:5f:08:54:d8:ac:c7:0f:cd:5e:43:45:6b:2a:47:6f:e9: 79:7e:99:29:47:2c:a9:e6:17:c8:31:eb:a5:76:03:e6:5f:3b: 84:2b:51:d4:ba:ea:dd:6c:90:09:24:b9:b0:9d:44:39:69:e2: 01:f1:d2:07:6f:54:dc:08:3e:c2:81:81:1e:fb:32:30:d7:8d: 48:c2:c0:12:da:dc:dc:ee:36:7c:65:12:1c:57:3b:eb:6b:a2: 25:2e:7a:07:cd:fb:93:52:a3:08:cc:8a:13:70:e7:53:2a:f2: 05:00:de:c8:da:61:99:29:42:c1:ee:64:34:6a:89:08:ab:9b: 6a:13:06:e2:24:30:4b:a0:78:c1:6d:8d:84:77:f9:a1:06:b2: d3:a9:d0:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+BBdqOoApmYuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWU5YWM5MWQtZDRkOS00M2JjLTg2NjQtZjFkM2M1YmNlNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28542LKOxoO7hwTCvlH1qUvR1pTPe6kv9dwz 5lYdTcPnnH7W6wu5B+94vnit1knl+E0J6pWtOtdCOd6rt4S/7mPL/PNEPpJewjnw YrKU0K6akN3IF/UEek3uRMJSbQGU2PVeOZqdRlPBfIZULktwsXmcuD3W/WNk5BPu 6RVHiYV/33/YsCR8/FBMEnlQAX57KMrSecEIV20VmhIcrFQUfDl006lwNapDW3qW F6yvOZIfPSzjMBdy9jDwFNu1mtS/cDxqqnjGwhXiw9qhjav3ofon9yW7iDkXJ+Dj PozIGBEYOsOTlGsns49zn214axeruxwQzidL5XdBlhhb3694pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIhg4xr1ypkljLsyJ7lX+DOACH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmYTk3MGItYTUwZS0z Yjk4LWFmMzYtN2E0ODQ1NGNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOWAHMbr9JAJOrYK97ye0ui+OG0e7sM/8qDxvt2vRv+GGXzujN2C8AZ fwvwdAZuTUuiL/Xh4JJnedkf7Q1qXrRfmk9LmSjwIE/kRGqKoukjNbfbRQWUmRfz ezixLk/LxiDOthshKFglbnjNp4fvXwhU2KzHD81eQ0VrKkdv6Xl+mSlHLKnmF8gx 66V2A+ZfO4QrUdS66t1skAkkubCdRDlp4gHx0gdvVNwIPsKBgR77MjDXjUjCwBLa 3NzuNnxlEhxXO+troiUuegfN+5NSowjMihNw51Mq8gUA3sjaYZkpQsHuZDRqiQir m2oTBuIkMEugeMFtjYR3+aEGstOp0LU= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:12 2025 by rpki-client