$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6cd5d55f-44c2-3bde-8378-32232be0f9f4.roa File: 6cd5d55f-44c2-3bde-8378-32232be0f9f4.roa (raw, json) Hash identifier: O+m977FtBuJZiVMjHveZ5fK4Jt/E2drYGLOuK6zcAFQ= Subject key identifier: AA:B7:96:03:6B:98:FE:91:98:D5:5B:BE:F0:C7:7D:1E:55:62:B2:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEEE36128C960E0A6C980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6cd5d55f-44c2-3bde-8378-32232be0f9f4.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.126.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ee:e3:61:28:c9:60:e0:a6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=bd39f8a6-134a-47b2-8442-7de319d3adac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:28:36:30:b8:29:5b:ae:01:d4:b4:0a:8c: 23:d6:b0:ff:2d:46:a0:c2:d6:c2:8d:73:49:2a:d4: d9:40:ce:96:dc:68:6e:81:56:91:63:97:6e:95:4d: 46:a8:f4:c7:69:a2:40:32:dc:bd:25:ff:74:9f:be: 2c:66:f9:a5:35:d2:c7:5c:66:bc:3f:80:db:c1:1e: f9:0a:42:f9:1e:a3:31:8d:c0:16:55:c5:4c:b4:3d: 68:00:15:1f:74:4a:b0:7d:20:45:fc:7d:b6:dc:1e: 60:b8:68:9d:fe:37:48:28:a8:5a:d5:49:18:47:e9: bb:ef:48:3c:dd:f0:2f:d7:85:f3:a6:9b:bb:aa:09: 11:f3:c3:39:72:60:2f:fa:63:9d:9f:35:dc:29:87: f1:c3:7b:31:29:a8:27:52:c0:05:1a:7d:ec:dc:4e: 6c:7c:63:53:b6:a7:bf:b6:b4:b6:a9:2d:f0:7f:31: 00:b1:54:d1:d2:7d:8f:96:e7:a1:43:53:3c:04:32: 28:89:8e:9e:69:1e:cf:6d:7d:62:6a:df:f6:45:5e: e2:44:9a:a7:74:ff:96:62:5f:72:79:fb:26:9e:c8: 1f:cf:b8:0a:e4:c3:29:01:72:ea:85:08:11:5c:ff: f0:92:dc:4a:55:37:81:9a:40:bd:60:39:00:1e:a1: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B7:96:03:6B:98:FE:91:98:D5:5B:BE:F0:C7:7D:1E:55:62:B2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6cd5d55f-44c2-3bde-8378-32232be0f9f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.126.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b8:d4:7b:4d:e5:45:29:cc:e4:d6:1e:0e:50:a6:6e:32:17: 1f:bd:43:d9:91:16:76:b1:8b:b1:c1:5d:64:56:37:46:ad:8a: 4a:65:a1:52:21:95:bd:db:53:57:4e:03:4a:ab:8d:c7:55:8b: 0a:7e:f7:04:73:88:34:a8:aa:24:a9:63:3f:6e:b3:55:ed:38: 20:22:8d:4d:74:d4:ea:8d:4d:fc:5f:cd:1a:58:71:e6:0e:fd: 9c:ea:cc:09:f8:1c:fa:fd:9a:4b:27:8a:73:56:0b:40:96:11: 78:8a:b4:cd:a7:36:a6:3d:64:e9:55:c9:b2:1e:46:52:9e:60: f8:14:6d:87:13:6b:4a:03:9e:10:38:0c:5f:9a:82:31:3b:3e: 35:e5:73:6a:6f:4b:76:f6:bb:e1:cc:59:bf:69:bf:6c:49:ce: ad:5b:63:07:4b:ec:6f:6b:f1:e3:f3:2b:24:9f:41:28:9d:c6: 4c:9b:22:af:12:60:eb:98:cc:29:8c:80:9d:88:79:a0:77:73: 59:49:01:29:39:69:e0:70:18:dc:f7:03:da:8c:de:61:92:a3: a0:8a:dc:ed:5c:67:9c:d3:8f:26:ea:8f:db:eb:6e:48:0b:72: c5:5f:e3:cc:69:ec:90:03:32:68:15:66:60:fa:b0:aa:8e:55: 77:c7:33:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+7jYSjJYOCmyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YmQzOWY4YTYtMTM0YS00N2IyLTg0NDItN2RlMzE5ZDNhZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqAoNjC4KVuuAdS0Cowj1rD/LUagwtbCjXNJ KtTZQM6W3GhugVaRY5dulU1GqPTHaaJAMty9Jf90n74sZvmlNdLHXGa8P4DbwR75 CkL5HqMxjcAWVcVMtD1oABUfdEqwfSBF/H223B5guGid/jdIKKha1UkYR+m770g8 3fAv14Xzppu7qgkR88M5cmAv+mOdnzXcKYfxw3sxKagnUsAFGn3s3E5sfGNTtqe/ trS2qS3wfzEAsVTR0n2PluehQ1M8BDIoiY6eaR7PbX1iat/2RV7iRJqndP+WYl9y efsmnsgfz7gK5MMpAXLqhQgRXP/wktxKVTeBmkC9YDkAHqHCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq3lgNrmP6RmNVbvvDHfR5VYrJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmNkNWQ1NWYtNDRjMi0z YmRlLTgzNzgtMzIyMzJiZTBmOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy41HtN5UUpzOTWHg5Qpm4yFx+9Q9mRFnaxi7HBXWRWN0atikploVIh lb3bU1dOA0qrjcdViwp+9wRziDSoqiSpYz9us1XtOCAijU101OqNTfxfzRpYceYO /ZzqzAn4HPr9mksninNWC0CWEXiKtM2nNqY9ZOlVybIeRlKeYPgUbYcTa0oDnhA4 DF+agjE7PjXlc2pvS3b2u+HMWb9pv2xJzq1bYwdL7G9r8ePzKySfQSidxkybIq8S YOuYzCmMgJ2IeaB3c1lJASk5aeBwGNz3A9qM3mGSo6CK3O1cZ5zTjybqj9vrbkgL csVf48xp7JADMmgVZmD6sKqOVXfHMy4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:39 2025 by rpki-client