$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa File: 72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa (raw, json) Hash identifier: Nu9xw1W6kRiTLnj3qcA6L+ECZs5edbSPXm5ZBdJ9wF8= Subject key identifier: 40:94:69:7E:A2:CF:9D:81:F9:D3:E7:9D:50:E3:70:D9:B6:EF:57:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1F00F7F9FC16A2D395A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.130.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1f:00:f7:f9:fc:16:a2:d3:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1c735261-3167-4e34-9538-9810b38d76a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a2:39:64:64:55:7f:7a:28:7e:58:91:55:86: b3:9f:32:51:35:0f:11:97:05:c7:f0:07:6c:1d:3d: 3e:3c:fb:30:56:57:87:2e:c8:4d:5f:6a:5d:54:67: 03:97:35:ae:16:35:0f:c2:27:28:0e:46:09:2f:ce: 91:f2:ff:10:35:57:dd:bb:a8:cf:b0:00:0c:35:81: 0f:c7:56:7b:a4:74:a8:26:11:fe:ba:b3:f6:3e:81: ae:01:39:a7:90:ff:4a:89:7e:93:78:e0:12:9c:63: bb:65:86:8e:db:4f:14:62:8b:9d:8d:32:5a:71:0f: cb:4b:04:7b:2d:65:66:5c:9b:0f:83:86:54:6e:0f: 78:a8:42:7a:a5:bb:fe:4f:8f:e8:3e:03:62:66:6a: 66:f6:45:69:3c:51:a4:25:e6:67:d5:44:3d:c6:71: 94:bd:6c:c7:ca:8d:d4:6e:b7:93:c3:b5:55:6c:d0: bd:38:73:dd:cc:0d:94:b4:ac:90:00:46:c9:21:95: 5f:2c:1e:3e:3d:f7:64:7c:fe:03:af:84:99:7d:c6: c8:7b:fc:1c:7f:16:c5:33:c8:cc:7d:7c:bd:7e:7b: cb:cb:f5:32:07:30:2f:e1:41:74:ba:37:61:ab:98: f1:dd:51:01:de:0b:19:67:23:80:78:3c:4d:fd:1f: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:94:69:7E:A2:CF:9D:81:F9:D3:E7:9D:50:E3:70:D9:B6:EF:57:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72ada2e9-2bf2-3b7a-bc51-f1f8fb3e39ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.130.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:45:78:19:0c:2a:89:bf:c5:da:e6:49:4c:f6:52:00:e1:bf: e1:6c:9f:c9:26:57:27:8f:4a:03:a0:dd:4e:e8:c6:74:b6:31: b2:9b:b8:45:e4:6a:cc:5f:0d:e0:cd:ab:9b:6c:ee:93:91:93: ab:dc:3b:d5:53:be:ba:a5:46:0b:91:ef:9a:01:90:ea:41:fb: 70:03:80:47:3d:e3:33:7e:77:f0:28:1c:42:56:20:b8:c7:76: 36:64:42:fe:e9:09:84:51:ce:01:b2:ab:c2:a8:1c:7a:27:78: 58:a3:c9:d8:4e:52:76:a6:d6:66:20:ec:9c:12:e8:4e:34:a2: ec:b2:40:a7:14:71:fd:54:ee:51:05:2d:cb:c8:31:00:8c:6c: 24:e9:2d:84:e6:86:bb:18:f3:03:3e:d9:4d:7c:c9:32:cb:74: 07:20:9d:a0:5f:bf:25:27:30:2f:0e:4a:8b:f4:11:fe:d2:3b: 99:d3:91:07:d3:2e:f2:98:aa:d9:98:db:60:c3:45:6f:b0:20: 3c:0e:95:8b:49:2f:82:31:e9:fa:8c:6d:bf:16:c8:95:dd:92: b3:0f:da:b1:31:4b:d2:ff:20:d6:de:2d:54:ae:98:f3:44:21: ff:6c:21:ce:47:8c:02:c9:9c:fd:88:64:f6:4f:a1:c5:63:95: c1:82:5c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB8A9/n8FqLTlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWM3MzUyNjEtMzE2Ny00ZTM0LTk1MzgtOTgxMGIzOGQ3NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKI5ZGRVf3oofliRVYaznzJRNQ8RlwXH8Ads HT0+PPswVleHLshNX2pdVGcDlzWuFjUPwicoDkYJL86R8v8QNVfdu6jPsAAMNYEP x1Z7pHSoJhH+urP2PoGuATmnkP9KiX6TeOASnGO7ZYaO208UYoudjTJacQ/LSwR7 LWVmXJsPg4ZUbg94qEJ6pbv+T4/oPgNiZmpm9kVpPFGkJeZn1UQ9xnGUvWzHyo3U breTw7VVbNC9OHPdzA2UtKyQAEbJIZVfLB4+PfdkfP4Dr4SZfcbIe/wcfxbFM8jM fXy9fnvLy/UyBzAv4UF0ujdhq5jx3VEB3gsZZyOAeDxN/R8DQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECUaX6iz52B+dPnnVDjcNm271fkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzJhZGEyZTktMmJmMi0z YjdhLWJjNTEtZjFmOGZiM2UzOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpFeBkMKom/xdrmSUz2UgDhv+Fsn8kmVyePSgOg3U7oxnS2MbKbuEXk asxfDeDNq5ts7pORk6vcO9VTvrqlRguR75oBkOpB+3ADgEc94zN+d/AoHEJWILjH djZkQv7pCYRRzgGyq8KoHHoneFijydhOUnam1mYg7JwS6E40ouyyQKcUcf1U7lEF LcvIMQCMbCTpLYTmhrsY8wM+2U18yTLLdAcgnaBfvyUnMC8OSov0Ef7SO5nTkQfT LvKYqtmY22DDRW+wIDwOlYtJL4Ix6fqMbb8WyJXdkrMP2rExS9L/INbeLVSumPNE If9sIc5HjALJnP2IZPZPocVjlcGCXMs= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:03 2025 by rpki-client