$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa File: 5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa (raw, json) Hash identifier: fdhyM7bZFzeLe6zMYAKgOBxXfIo40TRkpnFyO9sQlec= Subject key identifier: C4:5F:9C:AF:56:61:14:35:5B:9A:50:67:52:57:88:A9:4C:E5:70:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFBD53C533194E0221880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.72.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fb:d5:3c:53:31:94:e0:22:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=894924ef-e64c-49fb-9b29-7b371dcfae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:83:a9:00:06:e8:1d:ad:b6:7d:bc:bb:97: 48:9e:db:7a:dc:32:90:1f:4c:28:d2:7b:de:18:49: 2d:a0:96:4b:85:7f:89:7f:eb:4b:22:d5:ee:e6:bb: 24:e9:46:17:d5:ec:e9:52:fd:f9:1a:52:56:8b:d3: 98:77:20:f0:e0:16:05:d5:d5:7b:6c:61:fb:7b:77: 76:b8:3f:49:e8:e1:d6:a1:b6:49:d1:ac:c5:63:70: 53:9f:22:23:60:f5:c9:64:a5:49:52:1b:7f:41:a9: f4:c4:46:37:62:d0:9b:05:a1:d9:cf:96:de:34:ab: 01:c2:07:25:20:18:28:8f:d2:81:a7:23:c5:15:c0: 44:1e:2d:d7:46:8d:55:b4:ed:a3:78:e5:87:ad:c3: 10:d0:bc:61:96:00:19:7b:5b:f4:e1:9e:55:f9:49: 37:4e:a6:81:d9:46:eb:08:ef:47:24:40:c1:44:32: 59:23:0b:34:b1:eb:c0:21:28:48:be:2a:c9:20:ea: 3d:07:34:57:0c:27:0c:a2:20:88:65:b0:6f:3f:c3: 63:67:d2:8a:d4:12:ba:7d:ca:2f:f1:be:47:54:85: ca:fa:15:0c:e3:c1:08:42:9d:0a:22:be:73:cb:81: bf:48:67:99:2b:f1:55:47:93:eb:29:0d:91:ac:48: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5F:9C:AF:56:61:14:35:5B:9A:50:67:52:57:88:A9:4C:E5:70:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcc0eae-6fe4-33f9-9d77-a9413fff1e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:84:a3:e5:22:bb:e7:5a:54:0e:28:bb:54:78:75:5b:93:09: d7:2e:2f:22:c4:b9:a7:21:8d:b6:dd:5d:ce:a1:7e:54:c8:c8: 6f:c7:91:b6:53:52:3b:a2:4e:73:95:b4:75:06:88:d6:3f:31: d4:ce:f9:10:05:9b:9f:c7:ff:27:29:07:c4:df:ce:c1:a9:45: 92:60:80:73:49:cf:d9:ce:40:a6:5f:9e:18:25:32:5c:04:a5: d2:5a:ff:ca:7b:fe:e2:10:8f:ea:cb:4b:07:34:7f:dd:c0:5a: 2f:c2:8d:97:16:a0:d7:d0:75:e8:da:17:71:42:93:18:f4:fc: 11:a6:1a:c5:c4:92:a9:fe:fa:00:86:c6:f0:79:26:1b:de:04: 0b:6d:7e:7d:a7:87:2b:84:75:bc:8e:e2:d0:eb:fe:fe:c5:87: 7e:56:29:76:ee:fe:34:c7:f4:fc:d1:ee:f5:f1:e1:08:c7:fe: 36:68:ea:ca:dc:74:ba:bc:57:c8:91:e6:1a:01:c5:c0:ba:78: 9c:64:ad:01:08:d9:84:eb:b0:e7:0e:64:01:5a:58:f2:a3:50: 0b:ef:86:59:ad:cc:2e:f3:bd:d1:d7:c1:6b:0a:d0:bc:07:92: 90:e5:7e:de:2e:39:34:41:36:20:8f:38:e6:d9:fd:58:6d:c6: 21:81:6c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/vVPFMxlOAiGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODk0OTI0ZWYtZTY0Yy00OWZiLTliMjktN2IzNzFkY2ZhZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGyDqQAG6B2ttn28u5dIntt63DKQH0wo0nve GEktoJZLhX+Jf+tLItXu5rsk6UYX1ezpUv35GlJWi9OYdyDw4BYF1dV7bGH7e3d2 uD9J6OHWobZJ0azFY3BTnyIjYPXJZKVJUht/Qan0xEY3YtCbBaHZz5beNKsBwgcl IBgoj9KBpyPFFcBEHi3XRo1VtO2jeOWHrcMQ0LxhlgAZe1v04Z5V+Uk3TqaB2Ubr CO9HJEDBRDJZIws0sevAIShIvirJIOo9BzRXDCcMoiCIZbBvP8NjZ9KK1BK6fcov 8b5HVIXK+hUM48EIQp0KIr5zy4G/SGeZK/FVR5PrKQ2RrEi0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRfnK9WYRQ1W5pQZ1JXiKlM5XBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZjYzBlYWUtNmZlNC0z M2Y5LTlkNzctYTk0MTNmZmYxZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWEo+Uiu+daVA4ou1R4dVuTCdcuLyLEuachjbbdXc6hflTIyG/HkbZT UjuiTnOVtHUGiNY/MdTO+RAFm5/H/ycpB8TfzsGpRZJggHNJz9nOQKZfnhglMlwE pdJa/8p7/uIQj+rLSwc0f93AWi/CjZcWoNfQdejaF3FCkxj0/BGmGsXEkqn++gCG xvB5JhveBAttfn2nhyuEdbyO4tDr/v7Fh35WKXbu/jTH9PzR7vXx4QjH/jZo6src dLq8V8iR5hoBxcC6eJxkrQEI2YTrsOcOZAFaWPKjUAvvhlmtzC7zvdHXwWsK0LwH kpDlft4uOTRBNiCPOObZ/VhtxiGBbC8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:16 2025 by rpki-client