$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa File: 7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa (raw, json) Hash identifier: 8qP84jp5GoEPGVWcSAe4WTLyJfYMdUkan3+Ydkt4A+k= Subject key identifier: 95:4D:57:3E:52:B1:9A:68:D9:5C:09:92:E2:8D:1E:EF:4B:E8:91:2B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0891688D10EA0CCF50A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.129.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:08:91:68:8d:10:ea:0c:cf:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=68ef7796-e7c7-40ef-9c14-01c1ea8ba612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:06:68:8c:0e:31:3d:21:ab:4d:c0:13:ba: a5:8d:76:f1:4c:f3:d8:d8:a7:98:bf:4d:14:e5:28: c7:c4:40:a1:06:e7:79:3f:af:4d:1c:51:6b:e5:5e: 43:74:f3:ba:c1:72:2a:b6:86:17:76:a4:19:55:ee: 52:d9:2b:94:1d:37:80:69:8f:5a:58:48:f2:7a:1b: 79:89:a7:52:87:1b:ba:08:0f:6c:13:4d:1d:88:f0: f0:9a:ed:59:13:86:3b:08:3c:3e:6e:4e:4e:24:8c: 27:24:9b:06:82:7f:59:08:b0:fb:cc:8f:cf:ee:d0: 07:22:d9:21:ed:d5:e5:c7:1b:e4:30:08:9b:ed:84: 39:74:50:dd:57:7d:5f:c2:6f:39:65:ae:fe:17:14: fd:d0:78:f1:13:d6:c4:8c:c2:6a:5b:ec:26:dd:1d: bc:45:15:5d:1e:da:fe:11:80:4d:35:78:20:b3:eb: 77:83:0c:6e:6e:62:34:3e:35:dc:cc:39:8f:99:53: e2:64:bc:04:75:da:90:4b:59:d2:6f:ca:87:b7:5a: f1:f9:a7:5b:ae:0f:4f:b8:9d:c2:29:64:92:b4:8b: 46:51:81:b8:1a:da:66:c3:23:3e:86:ae:bf:2a:63: 05:0e:3a:61:ea:10:ac:7a:8e:6c:50:c6:66:d6:b1: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:57:3E:52:B1:9A:68:D9:5C:09:92:E2:8D:1E:EF:4B:E8:91:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7eec4813-4c67-3e4a-875a-cd0dfc0e0b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8b:1b:5c:e8:a7:f4:90:14:8b:ed:b6:cc:7a:7f:c3:82:90: 71:75:96:0f:33:a7:25:52:9d:1e:e2:3b:88:13:19:bf:d6:d8: cf:f2:f7:3e:bc:c3:12:31:ed:a3:42:66:5a:ba:3a:8f:3f:61: 0f:6a:99:ea:12:f0:b2:16:87:90:02:46:4a:1c:fa:9d:bb:c6: e6:88:de:37:13:7d:a1:86:d7:82:1d:09:7a:e1:e0:05:48:69: 59:45:fe:56:ec:15:1d:cd:cf:ab:4f:7f:14:d0:a3:7e:39:4d: 2d:af:f2:68:df:d8:3e:bc:08:ca:6d:70:41:42:9e:a9:7e:93: 23:fc:5b:eb:b0:06:8f:6b:aa:c5:a6:57:78:00:bf:97:7e:59: 65:4f:4f:0f:bd:39:22:93:88:d1:7b:27:d6:a8:6d:d8:fe:26: 2f:c7:b1:7b:66:ff:fe:53:d5:a4:4f:28:67:b6:42:f6:6d:e3: 94:51:c7:62:dc:43:6a:60:f6:5d:eb:ea:e4:b5:3a:57:4a:c8: a5:85:89:ef:49:4b:0e:83:ce:c4:76:ef:04:8b:f1:37:ad:72: 93:e7:c5:90:c3:e4:be:63:f2:a9:84:13:46:8f:da:06:ef:47: 7f:56:72:3d:26:33:97:be:a3:70:f3:4b:a8:2c:c2:bb:c6:6b: 67:e1:aa:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAiRaI0Q6gzPUKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjhlZjc3OTYtZTdjNy00MGVmLTljMTQtMDFjMWVhOGJhNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17cGaIwOMT0hq03AE7qljXbxTPPY2KeYv00U 5SjHxEChBud5P69NHFFr5V5DdPO6wXIqtoYXdqQZVe5S2SuUHTeAaY9aWEjyeht5 iadShxu6CA9sE00diPDwmu1ZE4Y7CDw+bk5OJIwnJJsGgn9ZCLD7zI/P7tAHItkh 7dXlxxvkMAib7YQ5dFDdV31fwm85Za7+FxT90HjxE9bEjMJqW+wm3R28RRVdHtr+ EYBNNXggs+t3gwxubmI0PjXczDmPmVPiZLwEddqQS1nSb8qHt1rx+adbrg9PuJ3C KWSStItGUYG4GtpmwyM+hq6/KmMFDjph6hCseo5sUMZm1rGIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVNVz5SsZpo2VwJkuKNHu9L6JErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2VlYzQ4MTMtNGM2Ny0z ZTRhLTg3NWEtY2QwZGZjMGUwYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSLG1zop/SQFIvttsx6f8OCkHF1lg8zpyVSnR7iO4gTGb/W2M/y9z68 wxIx7aNCZlq6Oo8/YQ9qmeoS8LIWh5ACRkoc+p27xuaI3jcTfaGG14IdCXrh4AVI aVlF/lbsFR3Nz6tPfxTQo345TS2v8mjf2D68CMptcEFCnql+kyP8W+uwBo9rqsWm V3gAv5d+WWVPTw+9OSKTiNF7J9aobdj+Ji/HsXtm//5T1aRPKGe2QvZt45RRx2Lc Q2pg9l3r6uS1OldKyKWFie9JSw6DzsR27wSL8TetcpPnxZDD5L5j8qmEE0aP2gbv R39Wcj0mM5e+o3DzS6gswrvGa2fhqgU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:20 2025 by rpki-client