$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcd4bae-b8b1-389e-97ca-e3797e923663.roa File: 5fcd4bae-b8b1-389e-97ca-e3797e923663.roa (raw, json) Hash identifier: MaAbhwW273d5dsE0SGgiRpjOQQDzV+drcggj41ls/60= Subject key identifier: 03:94:DC:2D:F4:3C:E5:A9:11:97:54:06:69:C3:97:0C:9D:9B:4A:1A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE3E80BF5FF17D45C3700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcd4bae-b8b1-389e-97ca-e3797e923663.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.97.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e3:e8:0b:f5:ff:17:d4:5c:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2ecb0073-564f-4cf7-a81d-a1b0f30fee12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:27:50:71:d9:d6:da:be:09:15:01:96:04:68: b9:dd:7c:8a:0b:db:94:80:70:9b:6a:65:16:72:3e: df:10:9b:1a:f9:fd:8b:f1:d2:49:39:76:d2:e5:43: e1:d0:04:40:d5:ec:51:72:2c:7e:11:8e:5a:3c:1d: a3:fb:fb:da:15:60:e6:70:8e:95:c8:b0:d3:d5:c2: 87:20:ef:39:73:8c:13:2c:cc:48:d6:1b:cf:c5:86: 3b:93:44:02:da:0b:c0:60:74:2d:2f:43:4c:d4:46: 59:82:1c:b9:c9:5d:20:7f:be:a3:0f:91:de:60:7a: eb:56:36:a6:f6:37:1a:86:f3:4a:02:d4:27:fb:b5: 2d:4f:88:b6:45:32:b1:aa:41:35:ac:8a:c6:fa:4f: 16:38:14:4d:e0:9b:1d:3f:65:bf:f9:2c:68:b1:a8: 55:78:fa:36:b6:c9:8d:ba:ff:7e:b9:31:2f:5f:5e: a3:e9:c9:ff:35:10:99:6e:7c:0f:28:f6:82:95:90: 3b:4d:76:d1:c5:dd:ae:6c:11:86:ea:f4:39:3e:b4: 31:77:f5:e8:35:91:77:1e:8e:a9:64:9d:a3:d1:c0: 8d:74:9b:22:be:9d:14:ad:2e:e1:f6:01:44:01:5c: ba:76:80:85:4e:4a:94:9d:4b:37:89:7d:7c:f6:fb: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:94:DC:2D:F4:3C:E5:A9:11:97:54:06:69:C3:97:0C:9D:9B:4A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5fcd4bae-b8b1-389e-97ca-e3797e923663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dc:e6:5d:ee:b0:76:97:10:17:5c:88:84:fa:0d:78:9e:80: df:a0:74:31:53:87:a4:fd:24:86:70:52:2e:8d:e5:2a:86:ec: e9:c7:eb:66:a4:3e:1d:7a:0d:5c:36:40:79:d8:0d:ab:f6:9b: 23:66:a5:45:70:3f:b1:ba:7e:0a:55:4d:59:9e:9f:e3:4c:19: 45:ec:5b:71:66:0b:8b:5d:8a:36:a1:6f:93:78:ac:dc:cd:2f: 56:8d:3e:57:73:c6:37:1d:62:e0:66:53:8c:24:32:27:5b:06: 8b:0d:48:ff:08:0e:09:b8:5d:e6:ba:0e:b6:e5:4d:0a:ff:77: 3f:1b:9a:b0:08:82:80:6c:2a:95:00:7d:ba:e5:b3:1a:88:13: bd:c1:74:b6:d2:97:8a:60:41:53:f3:f0:c3:80:43:74:e6:b6: 69:4f:29:58:29:a0:6e:ee:ee:b1:87:a1:87:3c:00:7e:f7:19: 37:79:b8:0f:28:56:3d:bd:da:71:3d:d3:49:ee:99:4d:c7:fd: 10:4b:6f:1f:d7:bb:0a:44:61:29:fb:c8:0a:43:2e:14:f8:46: 4c:1e:17:b4:01:f2:13:51:99:46:47:7e:44:05:d7:f9:88:18: 95:b2:2b:66:38:7b:e7:d9:d0:bf:0d:29:6a:7e:ce:57:56:23: 38:42:5d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+PoC/X/F9RcNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmVjYjAwNzMtNTY0Zi00Y2Y3LWE4MWQtYTFiMGYzMGZlZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgydQcdnW2r4JFQGWBGi53XyKC9uUgHCbamUW cj7fEJsa+f2L8dJJOXbS5UPh0ARA1exRcix+EY5aPB2j+/vaFWDmcI6VyLDT1cKH IO85c4wTLMxI1hvPxYY7k0QC2gvAYHQtL0NM1EZZghy5yV0gf76jD5HeYHrrVjam 9jcahvNKAtQn+7UtT4i2RTKxqkE1rIrG+k8WOBRN4JsdP2W/+SxosahVePo2tsmN uv9+uTEvX16j6cn/NRCZbnwPKPaClZA7TXbRxd2ubBGG6vQ5PrQxd/XoNZF3Ho6p ZJ2j0cCNdJsivp0UrS7h9gFEAVy6doCFTkqUnUs3iX189vsYFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOU3C30POWpEZdUBmnDlwydm0oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZjZDRiYWUtYjhiMS0z ODllLTk3Y2EtZTM3OTdlOTIzNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELc5l3usHaXEBdciIT6DXiegN+gdDFTh6T9JIZwUi6N5SqG7OnH62ak Ph16DVw2QHnYDav2myNmpUVwP7G6fgpVTVmen+NMGUXsW3FmC4tdijahb5N4rNzN L1aNPldzxjcdYuBmU4wkMidbBosNSP8IDgm4Xea6DrblTQr/dz8bmrAIgoBsKpUA fbrlsxqIE73BdLbSl4pgQVPz8MOAQ3TmtmlPKVgpoG7u7rGHoYc8AH73GTd5uA8o Vj292nE900numU3H/RBLbx/XuwpEYSn7yApDLhT4RkweF7QB8hNRmUZHfkQF1/mI GJWyK2Y4e+fZ0L8NKWp+zldWIzhCXco= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:59 2025 by rpki-client