$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa File: 8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa (raw, json) Hash identifier: /oJOW77C8jKSqZ+cXTF99q5RxyjADSRNPsRsFns4ToI= Subject key identifier: F6:20:7C:59:DC:D1:BF:02:57:03:16:DA:F2:19:20:C7:B8:D1:CD:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1D48C7F6CCE61E565200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.147.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1d:48:c7:f6:cc:e6:1e:56:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=dc0770b8-9f7d-4f74-ab82-e2e1fc52d9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:96:03:fd:28:cd:6a:b3:2b:2e:54:eb:12:cd: f9:63:17:ae:27:7a:99:17:92:fc:d2:dc:60:64:3a: be:95:c1:83:6d:9f:95:cc:74:27:a4:37:6b:9f:a2: 4f:7f:46:c5:ad:e5:c7:fd:01:0b:98:4c:e6:cd:b2: ae:84:c7:e8:4c:23:ca:4e:50:18:29:a8:d1:ec:69: e3:ad:44:9a:05:5f:95:b7:66:2e:3e:fb:8f:ae:c1: bb:87:ce:f0:de:8e:1c:ea:fd:6a:a6:d2:51:91:e3: ab:d0:cd:2f:93:52:c7:64:d5:27:ce:49:52:17:00: 59:1a:10:d3:7f:0a:94:be:85:35:06:4d:bb:69:82: a7:d1:7c:a1:52:06:97:61:cd:2c:1a:11:5c:c6:ac: b5:9d:dd:be:c6:96:d4:8c:5a:75:7f:5e:9f:45:74: 97:3e:3b:39:38:fe:23:14:27:69:2b:62:6b:45:73: 77:5e:4f:2f:ce:62:b1:97:ec:2c:73:bc:f8:15:05: f9:e4:c5:ca:3a:a7:ee:8a:75:8b:f5:90:06:48:32: a4:b8:53:7b:4e:a4:47:31:0f:db:fb:88:2c:50:a9: 69:fc:41:d9:a6:b6:ee:94:6b:17:81:04:a1:b3:9c: f6:a2:aa:0b:50:aa:7d:fc:e6:8e:b1:a3:a2:fb:8b: 4d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:20:7C:59:DC:D1:BF:02:57:03:16:DA:F2:19:20:C7:B8:D1:CD:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d6e49ae-5f7a-3a21-b943-affd076bcd15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.147.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2c:b3:5e:19:77:78:8a:be:ec:56:cc:21:64:87:af:ff:2b: c1:ff:b6:a6:aa:cd:23:dc:07:ce:2f:3f:7d:e2:f0:b0:f4:87: 7a:46:6e:9f:0c:b8:02:e8:04:48:08:cb:db:e7:72:7a:74:87: f1:06:2f:57:87:0f:30:79:43:f7:6c:ff:4a:d2:37:b9:8c:e1: 29:6f:ce:5a:a9:c7:fa:62:8d:30:32:ee:fc:7a:9e:10:c8:b6: db:63:16:98:fc:bd:1d:8e:18:cc:24:64:13:ab:bc:ef:86:8a: dd:55:57:25:07:52:cf:47:10:15:39:bd:c2:2f:ed:a1:e1:b9: 6c:20:9a:8c:4a:2b:a4:da:b9:1e:d9:4c:24:4b:c6:3c:83:f9: 58:80:41:2f:06:82:70:86:7b:93:2e:48:9c:e3:d9:ce:8d:e7: 55:1d:5f:2a:eb:58:b2:db:c7:a2:5b:d6:0f:1a:a6:19:df:06: ec:3a:dc:c1:35:ba:96:d7:6b:a5:0f:45:7b:d1:fa:02:58:4b: 50:c4:d8:ab:ba:0b:9f:a1:3c:1c:22:40:ab:1c:00:55:6b:2c: b8:ae:71:4a:4d:d8:dc:b6:80:f6:07:a5:3b:bb:ca:e9:eb:ee: d9:3d:e8:1f:31:8b:37:3e:91:7d:30:35:06:4c:d4:23:d0:3e: 2b:59:d3:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB1Ix/bM5h5WUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGMwNzcwYjgtOWY3ZC00Zjc0LWFiODItZTJlMWZjNTJkOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpYD/SjNarMrLlTrEs35YxeuJ3qZF5L80txg ZDq+lcGDbZ+VzHQnpDdrn6JPf0bFreXH/QELmEzmzbKuhMfoTCPKTlAYKajR7Gnj rUSaBV+Vt2YuPvuPrsG7h87w3o4c6v1qptJRkeOr0M0vk1LHZNUnzklSFwBZGhDT fwqUvoU1Bk27aYKn0XyhUgaXYc0sGhFcxqy1nd2+xpbUjFp1f16fRXSXPjs5OP4j FCdpK2JrRXN3Xk8vzmKxl+wsc7z4FQX55MXKOqfuinWL9ZAGSDKkuFN7TqRHMQ/b +4gsUKlp/EHZprbulGsXgQShs5z2oqoLUKp9/OaOsaOi+4tNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYgfFnc0b8CVwMW2vIZIMe40c0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGQ2ZTQ5YWUtNWY3YS0z YTIxLWI5NDMtYWZmZDA3NmJjZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0ss14Zd3iKvuxWzCFkh6//K8H/tqaqzSPcB84vP33i8LD0h3pGbp8M uALoBEgIy9vncnp0h/EGL1eHDzB5Q/ds/0rSN7mM4Slvzlqpx/pijTAy7vx6nhDI tttjFpj8vR2OGMwkZBOrvO+Git1VVyUHUs9HEBU5vcIv7aHhuWwgmoxKK6TauR7Z TCRLxjyD+ViAQS8GgnCGe5MuSJzj2c6N51UdXyrrWLLbx6Jb1g8aphnfBuw63ME1 upbXa6UPRXvR+gJYS1DE2Ku6C5+hPBwiQKscAFVrLLiucUpN2Ny2gPYHpTu7yunr 7tk96B8xizc+kX0wNQZM1CPQPitZ02g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:28 2025 by rpki-client