$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85a2759a-3650-3daf-b0c2-c580c7724208.roa File: 85a2759a-3650-3daf-b0c2-c580c7724208.roa (raw, json) Hash identifier: GGiYOnKhhXlxQ1g/UeyNSKden9ojC/LllSqVwL2Rirs= Subject key identifier: 98:4C:B6:1A:B3:19:D3:E3:1A:63:F0:B5:CF:E0:15:99:42:37:1A:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA4ACE42D90B368351AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85a2759a-3650-3daf-b0c2-c580c7724208.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.136.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a4:ac:e4:2d:90:b3:68:35:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3b710caf-cdf9-4ada-8213-78e19839f0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:7b:27:35:8f:14:ec:1f:f8:e6:ee:08:ca: d3:6d:60:07:96:a5:08:9e:7f:3e:54:81:87:64:11: 21:aa:7b:72:89:4f:03:62:a5:9d:a4:43:01:cd:db: f6:99:c4:65:db:8b:f6:c9:65:64:34:34:09:8a:ca: 09:a3:2d:f8:e3:d1:aa:cc:5d:21:0c:22:40:2f:64: 71:9f:0f:d6:c1:aa:ff:0f:14:4b:e0:c8:78:76:6f: 36:6f:09:ca:fd:b0:05:08:e3:33:fa:6d:17:ba:6d: a3:b1:54:6b:7f:bd:36:bd:06:68:3e:87:69:3e:47: 2c:15:3b:ba:8f:22:48:2e:3e:91:2d:dc:c6:e2:7f: ab:71:4b:54:cc:ba:89:8d:af:b6:7a:95:21:2c:2d: f1:c9:3c:b9:fe:8a:39:65:22:76:e8:b7:7f:0a:1a: df:4b:2a:3b:59:5e:9b:43:8f:04:f5:23:43:d9:fc: fd:7e:74:da:c8:ff:1d:ce:fc:a3:4d:11:38:f1:84: 28:1e:61:26:93:cf:1a:77:95:5a:d3:0b:a1:cb:03: fa:ac:7f:d4:84:fc:77:20:53:5a:4e:a1:9c:d7:cc: d8:46:27:40:95:34:7e:38:c8:be:81:1c:51:f7:79: dc:b1:68:f7:b2:83:c8:bb:7d:6b:d0:6e:29:72:e5: 2c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:B6:1A:B3:19:D3:E3:1A:63:F0:B5:CF:E0:15:99:42:37:1A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85a2759a-3650-3daf-b0c2-c580c7724208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2f:78:67:7b:05:77:fb:b5:40:61:ed:2e:97:9e:0d:a4:ed: fd:72:74:f2:c3:94:30:42:f2:de:f3:af:56:95:78:9d:0a:64: 64:76:d7:bd:0f:b3:02:85:3b:8c:41:2d:9a:85:bd:a5:59:08: 46:fc:25:07:a0:9a:1e:b4:ae:ca:fc:45:32:6f:15:d3:61:0e: 61:aa:5a:1f:8c:79:09:ba:50:a8:4d:2c:48:40:d9:2a:7c:b4: aa:ed:80:d5:ee:d8:3e:09:63:af:0b:85:02:9f:cb:85:34:39: b0:07:91:0a:cc:de:77:29:21:bc:8a:15:71:e3:58:51:61:dd: 97:b9:31:6d:c5:7a:bb:18:58:53:e2:32:38:ba:93:52:a4:c2: 95:65:67:de:71:26:53:0f:c3:df:f4:de:7c:7b:c7:55:d9:ce: b3:7d:27:ba:4e:b2:56:5d:88:d7:09:bb:62:d9:b9:d0:29:6c: 0f:ba:9d:a3:b3:dd:2a:cf:cb:9a:5d:6f:cf:c3:40:4d:92:5f: 06:e5:d3:01:8b:4f:68:6a:e5:c7:90:88:1a:95:36:39:19:77: b7:ce:b4:0f:cb:9e:14:d3:4f:16:48:0d:41:1d:16:87:e0:3c: d3:a6:26:99:f6:f7:21:69:bb:a5:05:71:58:94:3d:69:18:5c: 9c:02:77:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6Ss5C2Qs2g1GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2I3MTBjYWYtY2RmOS00YWRhLTgyMTMtNzhlMTk4MzlmMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk97JzWPFOwf+ObuCMrTbWAHlqUInn8+VIGH ZBEhqntyiU8DYqWdpEMBzdv2mcRl24v2yWVkNDQJisoJoy3449GqzF0hDCJAL2Rx nw/Wwar/DxRL4Mh4dm82bwnK/bAFCOMz+m0Xum2jsVRrf702vQZoPodpPkcsFTu6 jyJILj6RLdzG4n+rcUtUzLqJja+2epUhLC3xyTy5/oo5ZSJ26Ld/ChrfSyo7WV6b Q48E9SND2fz9fnTayP8dzvyjTRE48YQoHmEmk88ad5Va0wuhywP6rH/UhPx3IFNa TqGc18zYRidAlTR+OMi+gRxR93ncsWj3soPIu31r0G4pcuUsuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhMthqzGdPjGmPwtc/gFZlCNxrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODVhMjc1OWEtMzY1MC0z ZGFmLWIwYzItYzU4MGM3NzI0MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIohAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUveGd7BXf7tUBh7S6Xng2k7f1ydPLDlDBC8t7zr1aVeJ0KZGR2170P swKFO4xBLZqFvaVZCEb8JQegmh60rsr8RTJvFdNhDmGqWh+MeQm6UKhNLEhA2Sp8 tKrtgNXu2D4JY68LhQKfy4U0ObAHkQrM3ncpIbyKFXHjWFFh3Ze5MW3FersYWFPi Mji6k1KkwpVlZ95xJlMPw9/03nx7x1XZzrN9J7pOslZdiNcJu2LZudApbA+6naOz 3SrPy5pdb8/DQE2SXwbl0wGLT2hq5ceQiBqVNjkZd7fOtA/LnhTTTxZIDUEdFofg PNOmJpn29yFpu6UFcViUPWkYXJwCd18= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:40 2025 by rpki-client