$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa File: 67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa (raw, json) Hash identifier: S6omtMmE/lIjuFUM2SNsBrGNNGxkOZdHWmNe+ppuJiQ= Subject key identifier: 7B:14:06:B2:4D:1B:9C:EF:C6:12:EA:48:6C:FD:48:F5:AC:64:5B:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5817005CE4DFD13D32E8490 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:70:05:ce:4d:fd:13:d3:2e:84:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f081d8bc-9ac2-4a73-bb8e-5b0893a293d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:55:02:24:dd:11:0d:cf:f7:26:9c:2f:aa:5e: 0c:87:14:65:a5:45:49:fd:c2:d7:aa:8e:b4:fe:27: 39:df:24:01:b2:c3:ef:b9:8f:d0:ff:1c:2d:6a:2f: c7:59:43:e4:fc:bc:d5:ab:bb:a7:25:a4:2a:ee:eb: 46:bb:d4:a3:e2:83:28:a4:d8:fe:10:14:1e:bb:fd: 07:bf:e8:43:7f:ca:e3:f5:10:33:b8:73:ff:4b:4e: a8:ed:cf:02:4b:dd:10:59:79:3e:1c:1b:71:db:8f: bf:df:b1:da:16:71:64:d1:9f:07:2a:ed:7b:d6:00: 7e:a7:05:0e:e3:e0:37:a2:09:08:4b:ad:4f:19:aa: 97:a0:d2:83:4a:54:b2:3a:c8:61:6c:99:06:4f:97: 3d:d4:b2:d4:f8:dd:5d:4a:1d:e0:c8:1b:13:00:57: 32:19:e7:94:c5:0f:6d:7c:e0:2a:f9:5f:02:15:b9: 86:4d:aa:d4:6f:7d:1c:01:b0:c2:3a:2a:cd:07:11: 1a:da:13:2a:7d:8c:73:ac:4f:29:0d:25:0f:13:f2: 32:da:87:20:95:ed:6b:51:a9:1b:19:fa:e2:8d:4e: c6:c0:ff:40:fb:3f:16:3c:3e:24:09:09:4e:63:c8: 01:97:c5:4f:63:f1:a1:83:9b:2a:11:6c:ca:65:e9: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:14:06:B2:4D:1B:9C:EF:C6:12:EA:48:6C:FD:48:F5:AC:64:5B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67e45b69-61ef-3ff0-89e4-8d2796fe6e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:38:aa:74:b0:e2:a3:9c:bf:eb:6e:b4:13:a4:4c:1e:b2:47: 34:c8:c0:a6:10:0d:8b:4c:fd:74:58:29:05:88:59:4c:6e:0e: 94:b0:55:db:65:8f:9f:c1:09:4a:d5:f1:4a:75:78:6e:1a:56: bc:98:b2:51:72:3b:fd:6f:54:ae:16:a4:6c:ae:d2:d1:cf:88: 9f:6f:b9:e9:71:25:8e:24:65:7e:2d:72:d8:ab:9a:af:5d:ca: 92:09:20:08:e0:90:0f:af:20:f2:13:54:d2:db:bb:7c:05:5e: 7c:c3:97:7c:a3:2b:71:df:d2:06:3f:eb:75:9f:42:09:36:1c: ae:36:22:ff:ab:68:e3:78:76:2f:e3:0e:0d:40:7f:2f:45:f8: bd:84:d3:17:11:35:d7:fd:e3:e3:13:c8:4c:d5:92:26:d1:a6: 98:db:cb:40:a7:4c:b5:c3:03:3a:d2:ff:c8:8d:9a:b2:74:1b: ad:cc:9e:e3:d4:2b:ef:7e:c8:e9:0d:57:2c:b0:fb:9c:4d:55: 38:ac:16:49:fb:1b:41:bb:63:9e:af:84:02:34:f1:a7:a5:1b: 45:bd:f1:f0:5a:b6:9a:2d:2f:48:df:95:20:29:0e:82:60:0e: 32:bc:6a:44:a0:44:ef:2e:e8:64:8b:29:9f:b1:a5:44:d9:5f: 2c:93:14:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXAFzk39E9MuhJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjA4MWQ4YmMtOWFjMi00YTczLWJiOGUtNWIwODkzYTI5M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVUCJN0RDc/3Jpwvql4MhxRlpUVJ/cLXqo60 /ic53yQBssPvuY/Q/xwtai/HWUPk/LzVq7unJaQq7utGu9Sj4oMopNj+EBQeu/0H v+hDf8rj9RAzuHP/S06o7c8CS90QWXk+HBtx24+/37HaFnFk0Z8HKu171gB+pwUO 4+A3ogkIS61PGaqXoNKDSlSyOshhbJkGT5c91LLU+N1dSh3gyBsTAFcyGeeUxQ9t fOAq+V8CFbmGTarUb30cAbDCOirNBxEa2hMqfYxzrE8pDSUPE/Iy2ocgle1rUakb GfrijU7GwP9A+z8WPD4kCQlOY8gBl8VPY/Ghg5sqEWzKZekuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsUBrJNG5zvxhLqSGz9SPWsZFvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjdlNDViNjktNjFlZi0z ZmYwLTg5ZTQtOGQyNzk2ZmU2ZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA4qnSw4qOcv+tutBOkTB6yRzTIwKYQDYtM/XRYKQWIWUxuDpSwVdtl j5/BCUrV8Up1eG4aVryYslFyO/1vVK4WpGyu0tHPiJ9vuelxJY4kZX4tctirmq9d ypIJIAjgkA+vIPITVNLbu3wFXnzDl3yjK3Hf0gY/63WfQgk2HK42Iv+raON4di/j Dg1Afy9F+L2E0xcRNdf94+MTyEzVkibRppjby0CnTLXDAzrS/8iNmrJ0G63MnuPU K+9+yOkNVyyw+5xNVTisFkn7G0G7Y56vhAI08aelG0W98fBatpotL0jflSApDoJg DjK8akSgRO8u6GSLKZ+xpUTZXyyTFFQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:08 2025 by rpki-client