$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa File: 86bed144-128f-3b1b-8d74-51dbbfc5c638.roa (raw, json) Hash identifier: N9e5QQWzBKZYXSVhSHY0kovY0K7XeEzWZEPzDw3vtgQ= Subject key identifier: C6:F8:0C:32:D2:BC:D3:83:67:5C:D8:DF:A7:C3:42:C7:B0:9E:8F:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE7FD38358F26689D4F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.134.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e7:fd:38:35:8f:26:68:9d:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0b078fed-2707-4f07-916f-0bbe28f130c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:23:2c:6a:f4:42:e0:c5:9c:6d:ec:c9:13: fb:71:ce:37:6d:ea:63:2b:93:75:6f:1a:1e:13:5b: 29:fe:93:c0:f6:dd:f8:77:c3:04:95:d6:c5:88:8c: db:85:da:f2:6c:c7:c2:a3:4d:c5:a7:ce:26:c2:1e: 70:fe:8d:d5:b7:14:b6:2d:e1:57:5e:5a:5e:c3:25: cb:65:33:34:a8:b3:ac:d1:5a:fc:4c:66:23:ef:80: af:fc:6a:a0:d0:8f:ae:f6:8f:df:e9:a1:11:bf:78: 35:0c:a7:43:86:80:59:4b:f7:4e:76:e5:a2:1d:68: f9:e0:de:c2:c4:06:78:c5:22:c6:be:22:7b:b7:61: 2e:c6:8e:11:d2:37:1b:ff:1d:a7:87:9f:d8:33:55: ba:6c:59:7d:23:0f:23:0e:14:a7:85:a4:aa:38:29: d9:15:70:96:56:3c:9a:e3:9d:1f:03:19:f1:2f:8a: ba:19:f8:9b:e0:88:a7:7d:fd:e0:e7:7e:fe:f2:a6: 03:af:a7:f3:02:38:11:98:b4:8a:88:1e:66:3a:d2: 19:93:a0:66:50:e5:0f:30:0c:06:84:14:85:8a:94: c5:bd:bd:bb:9b:36:62:6f:fa:bd:8b:b4:07:f7:09: 0d:5c:f5:31:49:d1:68:66:00:f6:0a:23:f5:ee:e1: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F8:0C:32:D2:BC:D3:83:67:5C:D8:DF:A7:C3:42:C7:B0:9E:8F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86bed144-128f-3b1b-8d74-51dbbfc5c638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:43:30:cb:34:c3:35:2b:4d:86:84:4e:8e:5a:08:c7:9a:ce: 2f:42:96:89:6e:4d:24:e8:56:9b:fb:ed:b6:3b:34:e5:34:a1: ac:aa:e6:3a:16:44:d5:c3:be:52:ab:16:44:f0:b4:2d:f2:c1: bd:52:d7:b0:70:f0:14:18:16:5d:36:b6:57:7a:7a:51:3a:a0: 03:2e:60:a6:cc:d4:bb:4b:97:64:4f:72:e8:33:8d:df:54:92: 5f:cf:40:6b:eb:99:8e:94:6c:77:ba:90:af:71:f3:eb:47:2d: 80:f4:bf:9b:7d:c2:fd:42:48:f7:c2:46:c0:a1:91:a8:69:08: 3d:c0:fc:cc:7a:6c:60:07:0b:5b:84:cb:54:e5:ef:d5:39:bf: 10:58:61:6a:12:2d:ff:93:ec:23:f7:9d:b4:25:70:32:69:a5: f3:f3:94:80:4e:8b:7a:b7:af:c5:24:14:71:29:f8:e6:61:60: 50:37:b9:a0:29:d3:06:bd:98:31:46:81:07:47:a9:d7:65:83: 70:26:56:31:00:c0:f3:a9:24:8c:36:81:32:6a:b9:39:06:2b: fd:2b:e9:9f:fd:d9:81:f8:10:d3:41:e9:c9:cb:91:b7:24:f0: 84:d0:c8:b8:1e:f1:4e:dd:5e:2a:57:33:42:ea:3b:03:fd:6d: 59:54:be:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+f9ODWPJmidTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MGIwNzhmZWQtMjcwNy00ZjA3LTkxNmYtMGJiZTI4ZjEzMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDEjLGr0QuDFnG3syRP7cc43bepjK5N1bxoe E1sp/pPA9t34d8MEldbFiIzbhdrybMfCo03Fp84mwh5w/o3VtxS2LeFXXlpewyXL ZTM0qLOs0Vr8TGYj74Cv/Gqg0I+u9o/f6aERv3g1DKdDhoBZS/dOduWiHWj54N7C xAZ4xSLGviJ7t2Euxo4R0jcb/x2nh5/YM1W6bFl9Iw8jDhSnhaSqOCnZFXCWVjya 450fAxnxL4q6Gfib4Iinff3g537+8qYDr6fzAjgRmLSKiB5mOtIZk6BmUOUPMAwG hBSFipTFvb27mzZib/q9i7QH9wkNXPUxSdFoZgD2CiP17uGekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMb4DDLSvNODZ1zY36fDQsewno91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZiZWQxNDQtMTI4Zi0z YjFiLThkNzQtNTFkYmJmYzVjNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJDMMs0wzUrTYaETo5aCMeazi9CloluTSToVpv77bY7NOU0oayq5joW RNXDvlKrFkTwtC3ywb1S17Bw8BQYFl02tld6elE6oAMuYKbM1LtLl2RPcugzjd9U kl/PQGvrmY6UbHe6kK9x8+tHLYD0v5t9wv1CSPfCRsChkahpCD3A/Mx6bGAHC1uE y1Tl79U5vxBYYWoSLf+T7CP3nbQlcDJppfPzlIBOi3q3r8UkFHEp+OZhYFA3uaAp 0wa9mDFGgQdHqddlg3AmVjEAwPOpJIw2gTJquTkGK/0r6Z/92YH4ENNB6cnLkbck 8ITQyLge8U7dXipXM0LqOwP9bVlUvq4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:53 2025 by rpki-client