$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa File: 8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa (raw, json) Hash identifier: p/ZyC7xSc1QY8SHqIgl+W1KWu+ggKWCg3Wbr43/cux8= Subject key identifier: 7F:8E:5A:3D:FF:8B:C1:23:EB:18:0A:4A:0F:7E:E1:B2:AE:59:90:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1CDAC542AFAACAB0F700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.138.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1c:da:c5:42:af:aa:ca:b0:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c0da782e-1bcb-49d4-b238-2c0c41937dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:0f:7e:da:a1:65:09:bb:77:80:f7:c1:d3: 90:aa:b6:91:87:89:75:58:1d:27:96:d6:95:6c:04: a4:2e:82:59:c6:6a:94:01:69:68:ea:de:25:88:43: 37:c7:ba:de:e2:a3:49:76:3d:16:a4:81:cb:65:d9: 9e:91:c3:1d:dc:51:f1:0c:3c:f0:e6:45:38:d9:e2: db:86:33:cd:7f:26:29:5e:1b:db:d0:2f:ad:ae:79: d2:f3:15:b0:26:0d:91:20:87:15:4f:b4:85:c7:8f: e8:5d:bb:ac:0d:a6:57:47:98:fb:ab:af:e8:a3:a3: cc:31:f0:80:82:5b:95:bf:3d:88:84:36:f5:df:b3: 70:1b:42:ec:8b:bb:3e:0f:a6:ac:44:9e:f9:97:36: 6a:5e:b6:42:a8:2f:74:41:56:7d:95:89:43:f9:84: 07:b0:19:b1:42:3d:94:3b:dd:31:d1:68:5b:28:1d: 84:b0:e7:87:b4:e1:c4:30:6c:6a:3b:3f:8c:fe:51: ce:dd:a2:98:d2:5a:74:0f:5f:8f:b4:d2:6f:4d:d1: a5:71:1d:c0:3f:86:49:b4:06:10:68:9d:19:4d:bb: e2:2c:47:cd:56:41:b4:09:9a:cd:3f:cf:c4:9f:d5: f6:58:a4:4b:fb:47:51:2f:59:7d:5b:16:76:99:a3: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:5A:3D:FF:8B:C1:23:EB:18:0A:4A:0F:7E:E1:B2:AE:59:90:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8c4dc6ac-6d29-3a0a-b2cf-a2f19ed99437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3a:0b:88:a8:43:5b:13:30:b9:59:01:dd:20:e5:03:1b:39: 89:7e:4d:e9:84:15:1b:d6:94:1e:78:08:dd:7f:19:f5:0c:44: ae:83:b0:86:ce:9e:01:ed:68:1f:35:10:0f:eb:6c:52:f8:47: 35:a4:9e:34:d6:d3:7b:68:ec:9a:5d:3a:e7:69:be:e6:81:27: 48:aa:ec:a0:1f:1c:9c:e9:5e:89:cd:d2:2a:e2:fa:cc:26:80: d6:f7:6c:07:94:f3:8b:7c:77:cb:f4:ba:49:fd:f4:3f:d1:b5: 4b:7d:c5:51:79:7a:69:01:3e:48:1a:c6:de:c2:69:5a:71:ef: f0:cd:e8:f5:5c:96:78:47:de:12:eb:5e:3f:5b:2a:22:f1:6b: e6:ec:1b:43:14:96:99:d6:48:da:4c:93:b7:b1:93:e5:1c:f6: 41:59:c2:08:25:56:de:ec:8d:be:75:57:1e:5e:0a:a6:a8:c3: 91:4e:38:7b:d6:49:32:0d:0f:d0:43:04:7d:94:39:db:3b:98: b3:02:c1:06:dd:3a:2d:84:97:d5:cb:3a:cf:e1:f7:40:25:c5: c1:86:b1:b1:ad:2d:a2:3f:f8:e2:0a:62:c3:05:de:58:24:cb: 7f:3b:15:f3:e4:90:58:ce:c8:54:87:42:32:0c:d9:5a:84:90: cc:2d:80:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBzaxUKvqsqw9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzBkYTc4MmUtMWJjYi00OWQ0LWIyMzgtMmMwYzQxOTM3ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpwPftqhZQm7d4D3wdOQqraRh4l1WB0nltaV bASkLoJZxmqUAWlo6t4liEM3x7re4qNJdj0WpIHLZdmekcMd3FHxDDzw5kU42eLb hjPNfyYpXhvb0C+trnnS8xWwJg2RIIcVT7SFx4/oXbusDaZXR5j7q6/oo6PMMfCA gluVvz2IhDb137NwG0Lsi7s+D6asRJ75lzZqXrZCqC90QVZ9lYlD+YQHsBmxQj2U O90x0WhbKB2EsOeHtOHEMGxqOz+M/lHO3aKY0lp0D1+PtNJvTdGlcR3AP4ZJtAYQ aJ0ZTbviLEfNVkG0CZrNP8/En9X2WKRL+0dRL1l9WxZ2maOifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+OWj3/i8Ej6xgKSg9+4bKuWZDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGM0ZGM2YWMtNmQyOS0z YTBhLWIyY2YtYTJmMTllZDk5NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs6C4ioQ1sTMLlZAd0g5QMbOYl+TemEFRvWlB54CN1/GfUMRK6DsIbO ngHtaB81EA/rbFL4RzWknjTW03to7JpdOudpvuaBJ0iq7KAfHJzpXonN0iri+swm gNb3bAeU84t8d8v0ukn99D/RtUt9xVF5emkBPkgaxt7CaVpx7/DN6PVclnhH3hLr Xj9bKiLxa+bsG0MUlpnWSNpMk7exk+Uc9kFZwgglVt7sjb51Vx5eCqaow5FOOHvW STIND9BDBH2UOds7mLMCwQbdOi2El9XLOs/h90AlxcGGsbGtLaI/+OIKYsMF3lgk y387FfPkkFjOyFSHQjIM2VqEkMwtgEs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:41 2025 by rpki-client