$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa File: 5e586e27-366f-3114-916b-691e605b157a.roa (raw, json) Hash identifier: GZv5zmdEDZ6FH1xKag/l041kIThEh5Sm5Km5/coyZOY= Subject key identifier: 30:75:64:47:FB:1C:23:EE:3A:AF:FD:85:29:02:31:27:35:D4:34:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58188456B1B89C6504E6680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:45:6b:1b:89:c6:50:4e:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5dce9fdc-c2a0-44fb-8e7d-d65a67d54196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:2b:c5:43:e7:e8:91:f1:05:d0:28:f9:d5: 53:18:51:e9:e7:c6:72:d0:46:69:54:52:59:de:f7: be:41:dc:55:ce:9b:c3:6a:f0:7f:36:32:90:d4:03: 53:b9:72:4c:53:cd:ec:78:4f:7e:b1:da:38:62:78: 33:5b:bc:14:d9:b2:6b:66:33:6f:45:dc:86:78:a7: 2b:fb:54:f0:1e:9e:c5:4f:86:f4:46:7f:97:77:51: f4:77:2e:19:ef:ac:22:76:40:10:d6:67:4e:24:91: a1:a5:33:31:0d:61:e4:0c:df:8d:63:ed:2b:16:c4: 6d:ea:a1:27:22:fd:19:c1:85:91:57:9b:24:d9:f1: 31:2a:36:e7:c6:6b:c3:70:64:fc:de:90:0c:f2:18: 53:09:42:17:1a:75:b8:dd:ea:b1:f2:45:b8:cb:7a: a2:11:41:4d:0e:26:22:46:ee:d4:97:bc:9a:9f:cd: 86:dd:ff:98:9f:81:0f:3b:8f:6b:e8:f5:fc:c4:f6: 97:f4:5d:e9:ae:79:51:86:b8:9e:b9:47:0a:ed:3d: 3e:22:05:8f:d8:05:41:9e:af:e8:0d:17:d2:f0:39: 6f:30:8c:8e:41:03:19:d3:f2:ee:7f:4a:ed:cf:45: d0:f1:6a:7b:dc:8e:a6:8c:21:29:2b:6c:d0:ea:68: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:64:47:FB:1C:23:EE:3A:AF:FD:85:29:02:31:27:35:D4:34:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5e586e27-366f-3114-916b-691e605b157a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d0:a5:f3:f8:10:63:d7:7f:28:93:c3:21:4a:cb:3e:89:e0: 83:d8:01:3c:ca:d9:78:fb:54:d7:10:83:e5:15:d8:b5:f5:ea: 02:8b:96:94:20:23:11:6c:17:b7:d8:1c:51:9e:14:55:2a:52: 7e:0a:02:1a:1b:bd:d3:15:26:3e:59:89:c2:83:59:1d:e3:60: 64:92:bd:43:3b:69:0e:af:98:05:c9:35:85:aa:20:7b:de:96: 2d:b8:36:06:b6:80:3f:ef:f1:f0:85:4d:e8:86:c1:c8:f9:a6: 97:a7:b0:71:f1:4f:07:d0:5a:69:67:97:fc:fe:dd:3e:c5:83: 5d:d1:51:b5:94:76:59:e4:d1:23:5f:17:4b:ae:0e:86:fc:7a: e8:ee:bb:5a:a8:05:4a:ae:62:8f:13:9f:03:59:ac:c6:43:f2: 3d:29:5c:c4:22:cf:41:5e:68:ac:34:2d:47:ea:c3:5f:b4:32: 24:95:25:89:06:ea:91:dc:b5:7d:d6:2a:2c:fc:df:94:05:04: 8a:69:e5:52:e2:51:f4:7a:36:db:c4:08:d9:5c:32:12:0f:4d: 66:95:ec:d3:53:ca:64:36:6d:ee:66:05:ff:33:d6:d6:a4:76: 51:d8:39:2d:8f:65:b2:b6:f2:f4:20:31:f8:58:56:4b:c7:3d: c3:78:91:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYhFaxuJxlBOZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWRjZTlmZGMtYzJhMC00NGZiLThlN2QtZDY1YTY3ZDU0MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiArxUPn6JHxBdAo+dVTGFHp58Zy0EZpVFJZ 3ve+QdxVzpvDavB/NjKQ1ANTuXJMU83seE9+sdo4YngzW7wU2bJrZjNvRdyGeKcr +1TwHp7FT4b0Rn+Xd1H0dy4Z76widkAQ1mdOJJGhpTMxDWHkDN+NY+0rFsRt6qEn Iv0ZwYWRV5sk2fExKjbnxmvDcGT83pAM8hhTCUIXGnW43eqx8kW4y3qiEUFNDiYi Ru7Ul7yan82G3f+Yn4EPO49r6PX8xPaX9F3prnlRhrieuUcK7T0+IgWP2AVBnq/o DRfS8DlvMIyOQQMZ0/Luf0rtz0XQ8Wp73I6mjCEpK2zQ6mix7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB1ZEf7HCPuOq/9hSkCMSc11DRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWU1ODZlMjctMzY2Zi0z MTE0LTkxNmItNjkxZTYwNWIxNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDQpfP4EGPXfyiTwyFKyz6J4IPYATzK2Xj7VNcQg+UV2LX16gKLlpQg IxFsF7fYHFGeFFUqUn4KAhobvdMVJj5ZicKDWR3jYGSSvUM7aQ6vmAXJNYWqIHve li24Nga2gD/v8fCFTeiGwcj5ppensHHxTwfQWmlnl/z+3T7Fg13RUbWUdlnk0SNf F0uuDob8eujuu1qoBUquYo8TnwNZrMZD8j0pXMQiz0FeaKw0LUfqw1+0MiSVJYkG 6pHctX3WKiz835QFBIpp5VLiUfR6NtvECNlcMhIPTWaV7NNTymQ2be5mBf8z1tak dlHYOS2PZbK28vQgMfhYVkvHPcN4kbI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:03 2025 by rpki-client