$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa File: 70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa (raw, json) Hash identifier: +2rk2JqYIe3UASksB7U2vWOixmSQTlMghx8APx8nZ5Q= Subject key identifier: D9:91:01:5C:A5:32:5D:DA:C8:B6:AA:82:C8:F4:8B:E8:CF:3C:01:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1C87CF0192559FA3A240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.134.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1c:87:cf:01:92:55:9f:a3:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=632320a9-f74f-4d94-a2ee-1662491fdb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2c:c0:1c:87:27:2d:32:d9:b7:e0:48:6c:92: ba:8c:c8:a2:03:8a:9a:54:d5:7c:6a:1d:b7:b0:13: f5:55:dc:79:e7:22:4d:66:bf:36:33:3d:98:68:1b: 8d:42:45:cb:81:e9:c5:1f:4a:96:52:2c:f7:16:20: 07:36:36:44:13:bc:2d:e1:17:de:26:5e:bc:ff:ba: 33:eb:f2:d7:f3:9f:29:7d:33:42:78:7e:44:7b:37: 54:25:99:41:a3:15:04:d6:43:21:ab:9a:44:3d:1b: b4:91:65:bb:d2:62:f3:bc:52:00:a7:f9:e6:c3:ee: 9b:97:e7:87:0d:a3:67:ac:28:eb:5a:38:53:de:2a: ec:3d:f9:37:ee:30:bf:05:3b:80:f3:99:f6:7d:d7: 61:e1:46:af:2c:ac:a9:f4:39:fb:52:ab:60:f2:f1: 0d:2f:c5:ac:62:87:ba:cb:93:14:ed:3f:9c:ad:75: eb:e9:94:c0:4f:77:b7:1d:2e:ab:46:c4:38:36:6b: d0:0f:4c:50:bb:61:fd:45:ca:65:ba:7c:86:69:64: b5:61:b0:c7:1a:f1:5c:82:6f:5d:27:98:88:e0:11: 62:91:96:55:8f:fb:0c:fb:2e:63:ae:33:95:e3:74: 0b:1b:e3:ac:bc:29:f5:4a:9e:e2:4c:ce:ba:e5:65: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:91:01:5C:A5:32:5D:DA:C8:B6:AA:82:C8:F4:8B:E8:CF:3C:01:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/70c8c71b-1b59-33a5-8f9e-29e043e4ad0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d2:d1:c5:8e:32:9c:88:c5:60:cf:35:55:9e:74:80:8f:56: 18:3b:a3:92:31:55:10:96:57:0b:fe:3d:55:a1:95:5e:43:cb: 95:6a:9f:0f:34:c8:2a:b6:3e:73:ce:c3:0f:ad:f4:f6:bd:eb: ca:82:6e:67:0c:a1:53:35:f3:30:ed:6b:1d:30:10:e7:14:a0: 4d:61:8f:b2:55:a5:42:ea:9e:83:38:28:19:ca:3c:f4:b0:06: 12:4a:e7:c1:07:7f:84:0c:2a:13:f2:f8:1c:3a:ba:68:90:a0: ea:b9:35:c7:f5:23:24:47:e0:94:8f:41:64:5d:c3:df:59:02: 44:e8:2f:c2:3f:0d:d8:22:f0:26:c6:13:1c:1a:7d:ac:d3:53: f9:fa:8f:e7:f7:90:ca:87:5f:f0:c9:77:d7:a5:ad:7a:45:20: 2f:5c:da:25:e9:be:d8:a6:22:f3:12:45:46:4c:52:84:11:2b: a7:d6:06:7d:4c:86:e7:ee:a8:2e:7e:ef:db:f4:36:38:d4:2f: 63:99:5f:46:90:6c:cc:e5:1c:0a:2f:f1:22:66:3a:93:2d:a4: 47:04:a6:16:3f:2d:a5:94:58:e0:a7:66:4c:42:82:20:eb:7e: d2:d6:c3:3c:de:06:81:5e:5e:1e:f3:a4:28:69:6c:4f:bf:3c: a8:5b:93:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITByHzwGSVZ+jokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjMyMzIwYTktZjc0Zi00ZDk0LWEyZWUtMTY2MjQ5MWZkYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSzAHIcnLTLZt+BIbJK6jMiiA4qaVNV8ah23 sBP1Vdx55yJNZr82Mz2YaBuNQkXLgenFH0qWUiz3FiAHNjZEE7wt4RfeJl68/7oz 6/LX858pfTNCeH5EezdUJZlBoxUE1kMhq5pEPRu0kWW70mLzvFIAp/nmw+6bl+eH DaNnrCjrWjhT3irsPfk37jC/BTuA85n2fddh4UavLKyp9Dn7Uqtg8vENL8WsYoe6 y5MU7T+crXXr6ZTAT3e3HS6rRsQ4NmvQD0xQu2H9RcplunyGaWS1YbDHGvFcgm9d J5iI4BFikZZVj/sM+y5jrjOV43QLG+OsvCn1Sp7iTM665WUhPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmRAVylMl3ayLaqgsj0i+jPPAE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzBjOGM3MWItMWI1OS0z M2E1LThmOWUtMjllMDQzZTRhZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInS0cWOMpyIxWDPNVWedICPVhg7o5IxVRCWVwv+PVWhlV5Dy5Vqnw80 yCq2PnPOww+t9Pa968qCbmcMoVM18zDtax0wEOcUoE1hj7JVpULqnoM4KBnKPPSw BhJK58EHf4QMKhPy+Bw6umiQoOq5Ncf1IyRH4JSPQWRdw99ZAkToL8I/Ddgi8CbG ExwafazTU/n6j+f3kMqHX/DJd9elrXpFIC9c2iXpvtimIvMSRUZMUoQRK6fWBn1M hufuqC5+79v0NjjUL2OZX0aQbMzlHAov8SJmOpMtpEcEphY/LaWUWOCnZkxCgiDr ftLWwzzeBoFeXh7zpChpbE+/PKhbk64= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:45 2025 by rpki-client