$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cfadbc4-f3f4-370d-8792-51ca40359e97.roa File: 8cfadbc4-f3f4-370d-8792-51ca40359e97.roa (raw, json) Hash identifier: chWCHdF6vcTJMhs0SgQZoZZloUsnzLh6tFl7hbEPPcs= Subject key identifier: 90:DB:7D:9C:95:BC:80:00:59:0B:22:A0:A2:6E:C9:40:D0:E7:FA:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAB03EAF8B01E53569EB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cfadbc4-f3f4-370d-8792-51ca40359e97.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.123.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ab:03:ea:f8:b0:1e:53:56:9e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=53222312-7fc4-4c2a-a88d-1c08fdaf4cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:cd:ea:8f:b7:54:65:9a:15:1d:80:e5:1c: 9e:24:09:e0:2b:93:0b:0e:79:e2:58:60:05:ac:36: e4:06:00:82:86:9e:ce:65:5c:40:a1:d3:c3:53:66: 54:ac:92:06:6c:b5:2b:cb:04:a3:c8:0c:b7:36:b7: 2f:3d:e6:da:41:39:d3:09:d4:12:44:ff:6f:04:fa: 69:17:7c:7b:68:e4:40:94:5c:26:85:cb:09:b0:16: 3f:ed:fc:b7:30:79:0a:7e:08:5c:ac:9a:de:bc:cb: c2:15:6a:3f:f6:1d:67:8a:fe:b0:37:49:7b:f7:11: d3:72:a6:ae:6f:1c:9c:5e:83:54:2d:21:87:34:40: 8c:03:da:d2:0d:41:96:d4:6f:5d:9b:fc:cb:16:ac: ad:19:06:74:05:32:18:0f:e3:9f:0f:ee:5c:60:ea: a3:d8:a3:9a:84:e6:cd:8e:cb:36:d6:35:18:d1:94: 38:4a:85:31:a7:26:12:20:b8:0e:e1:29:97:89:28: 5f:cd:bf:a9:de:cd:e7:0d:a9:f6:e0:6a:71:99:03: d5:f2:32:8b:d5:d0:b3:17:db:7f:be:09:4d:85:22: ec:34:bc:b4:7b:c5:ec:7e:d6:2d:3f:cd:6f:86:16: 3b:ef:57:55:bb:64:cf:1f:f7:7e:bd:5b:4b:65:95: 7d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DB:7D:9C:95:BC:80:00:59:0B:22:A0:A2:6E:C9:40:D0:E7:FA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cfadbc4-f3f4-370d-8792-51ca40359e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:da:0e:38:56:26:de:7d:7b:d1:ba:04:63:c1:c3:18:93:35: c0:d9:12:8b:8c:b7:86:26:c4:6b:1e:8a:24:f0:bf:2a:ce:2b: 26:85:e5:e1:8b:7f:d7:dc:a3:fb:77:f4:70:54:14:5a:18:63: ed:d7:8c:d7:bd:ad:8d:c7:73:be:e7:27:92:31:d8:8a:bd:26: 91:b5:a8:b4:fb:60:79:28:ad:6a:6a:30:94:ea:7b:9f:9c:fb: 12:23:e3:6d:43:ac:9b:4a:3e:c3:64:c4:e1:9b:5a:c9:d0:3b: 05:de:9a:0b:27:89:e6:a9:78:34:b6:cf:13:78:93:f4:e4:07: d6:5b:47:0e:13:de:18:69:47:4b:08:4b:24:07:7e:fa:50:9f: 9f:5a:e8:8d:16:ae:93:15:b4:5f:3e:c7:7e:95:2d:fe:50:d2: f5:b9:9e:cd:e3:1b:53:ad:7a:30:58:8e:4f:54:fe:9f:cb:48: e3:dc:a7:7a:0c:4b:09:94:1b:0f:04:09:24:98:60:21:4c:dd: 52:3a:21:c4:36:2a:98:c6:c0:f1:2f:25:20:40:dd:bd:0a:9d: fb:f6:46:53:fa:47:af:91:89:fd:c8:b2:bf:78:c4:0f:ae:39: 52:0e:8f:d6:f0:65:ea:87:da:c7:bf:81:0d:d0:a7:25:47:8f: f8:02:26:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6sD6viwHlNWnrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTMyMjIzMTItN2ZjNC00YzJhLWE4OGQtMWMwOGZkYWY0Y2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRrN6o+3VGWaFR2A5RyeJAngK5MLDnniWGAF rDbkBgCChp7OZVxAodPDU2ZUrJIGbLUrywSjyAy3NrcvPebaQTnTCdQSRP9vBPpp F3x7aORAlFwmhcsJsBY/7fy3MHkKfghcrJrevMvCFWo/9h1niv6wN0l79xHTcqau bxycXoNULSGHNECMA9rSDUGW1G9dm/zLFqytGQZ0BTIYD+OfD+5cYOqj2KOahObN jss21jUY0ZQ4SoUxpyYSILgO4SmXiShfzb+p3s3nDan24GpxmQPV8jKL1dCzF9t/ vglNhSLsNLy0e8XsftYtP81vhhY771dVu2TPH/d+vVtLZZV9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDbfZyVvIAAWQsioKJuyUDQ5/pgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGNmYWRiYzQtZjNmNC0z NzBkLTg3OTItNTFjYTQwMzU5ZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfaDjhWJt59e9G6BGPBwxiTNcDZEouMt4YmxGseiiTwvyrOKyaF5eGL f9fco/t39HBUFFoYY+3XjNe9rY3Hc77nJ5Ix2Iq9JpG1qLT7YHkorWpqMJTqe5+c +xIj421DrJtKPsNkxOGbWsnQOwXemgsnieapeDS2zxN4k/TkB9ZbRw4T3hhpR0sI SyQHfvpQn59a6I0WrpMVtF8+x36VLf5Q0vW5ns3jG1OtejBYjk9U/p/LSOPcp3oM SwmUGw8ECSSYYCFM3VI6IcQ2KpjGwPEvJSBA3b0Knfv2RlP6R6+Rif3Isr94xA+u OVIOj9bwZeqH2se/gQ3QpyVHj/gCJow= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:47 2025 by rpki-client