$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa File: 90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa (raw, json) Hash identifier: UN2mR8GN4r9rzlsD8g74dhiAoJozkZnFTesuUstCsp4= Subject key identifier: AF:0E:25:73:6E:23:36:10:F7:A2:1B:38:36:55:35:BD:9D:C7:45:C5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1A26766B41CE2831F31C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.71.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1a:26:76:6b:41:ce:28:31:f3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e41feec4-2520-4730-9b82-663260b1fe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:67:9b:12:55:b1:10:a5:4e:34:ac:fb:55: ba:f6:e4:88:2e:99:06:fe:0b:b3:26:e1:a4:36:08: bf:80:00:97:b4:a4:cf:f2:92:47:e3:02:19:92:dc: 0b:05:3a:99:db:cb:a3:b5:6c:4d:99:a5:9a:a9:21: 12:8d:5f:f4:7b:26:e7:5d:5b:1c:d1:59:db:97:a0: 83:e6:83:e4:f2:c9:00:a0:43:ee:fd:79:3c:a9:16: 48:2c:e1:aa:ea:e1:ee:78:f6:55:5d:29:cc:5d:72: 87:95:c0:aa:e3:05:fe:72:b0:6a:06:d5:c3:e0:52: a9:b9:72:13:3d:df:30:3e:9c:ff:ef:f4:31:2a:e6: b6:63:62:41:35:77:23:cc:79:a7:ff:5f:28:20:83: de:d4:97:02:8f:89:75:e6:ca:f0:58:01:75:56:a7: b5:69:56:2c:9f:8a:7e:c8:fe:73:95:74:a6:1f:7e: e9:5c:a2:1e:a5:a4:01:b9:c6:37:7c:f9:01:a0:43: 79:93:54:e2:2a:51:13:ce:ba:c0:87:db:43:ac:d2: 0e:e5:92:2d:0e:2e:8a:03:f8:bc:94:dc:c7:30:21: 47:76:b1:4f:97:8c:be:96:a7:1a:28:ac:ed:f5:c0: 6c:63:9d:31:b1:d0:57:b9:38:8a:51:bf:e9:c0:6a: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0E:25:73:6E:23:36:10:F7:A2:1B:38:36:55:35:BD:9D:C7:45:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/90ceb0de-5a59-3d37-b308-5f43c5f9ada7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cf:ed:6e:c1:6b:9d:6a:9f:da:2f:e5:23:6b:4a:ba:44:22: 62:9a:d7:cb:b0:a1:19:77:cc:35:d9:e0:18:b1:91:5d:c9:b8: 4e:17:66:0b:23:89:ee:e6:60:74:49:d8:f3:aa:c5:ba:d4:d4: b2:6a:31:03:6a:41:27:2c:9b:e9:e0:f2:9a:57:c4:3f:e4:f7: 28:2f:e2:d2:39:93:fe:bd:98:da:46:70:62:80:cd:fd:97:5f: ae:41:40:56:ba:ff:3c:6a:ba:81:44:6e:7e:30:71:cf:4b:cc: b3:47:fc:01:47:ae:b3:42:c9:cd:4d:e8:ab:52:ef:54:75:55: 1d:ad:16:0c:f7:e0:9c:34:aa:f2:2b:0c:74:22:2c:02:8b:cd: 59:73:58:70:e2:ed:ea:3d:46:28:2b:6e:2c:fd:29:fc:ef:f0: fa:c4:31:fe:65:1e:a7:c2:d3:13:4a:3e:b9:a0:66:3f:bb:e9: b8:bd:3a:1f:f3:6f:f1:b6:dd:b4:75:a8:07:05:ab:73:0f:43: 33:44:40:8a:11:e3:6c:f5:55:da:e4:d8:91:fa:00:80:bb:2f: f1:50:62:ff:63:80:50:34:57:7c:ff:f6:8c:ce:bf:bc:9e:b4: 7e:0a:27:2a:b6:e7:96:b0:6e:22:75:f8:0b:58:4e:33:3b:d6: 3c:be:7f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBomdmtBzigx8xwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTQxZmVlYzQtMjUyMC00NzMwLTliODItNjYzMjYwYjFmZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLNnmxJVsRClTjSs+1W69uSILpkG/guzJuGk Ngi/gACXtKTP8pJH4wIZktwLBTqZ28ujtWxNmaWaqSESjV/0eybnXVsc0Vnbl6CD 5oPk8skAoEPu/Xk8qRZILOGq6uHuePZVXSnMXXKHlcCq4wX+crBqBtXD4FKpuXIT Pd8wPpz/7/QxKua2Y2JBNXcjzHmn/18oIIPe1JcCj4l15srwWAF1Vqe1aVYsn4p+ yP5zlXSmH37pXKIepaQBucY3fPkBoEN5k1TiKlETzrrAh9tDrNIO5ZItDi6KA/i8 lNzHMCFHdrFPl4y+lqcaKKzt9cBsY50xsdBXuTiKUb/pwGpIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8OJXNuIzYQ96IbODZVNb2dx0XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTBjZWIwZGUtNWE1OS0z ZDM3LWIzMDgtNWY0M2M1ZjlhZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnP7W7Ba51qn9ov5SNrSrpEImKa18uwoRl3zDXZ4BixkV3JuE4XZgsj ie7mYHRJ2POqxbrU1LJqMQNqQScsm+ng8ppXxD/k9ygv4tI5k/69mNpGcGKAzf2X X65BQFa6/zxquoFEbn4wcc9LzLNH/AFHrrNCyc1N6KtS71R1VR2tFgz34Jw0qvIr DHQiLAKLzVlzWHDi7eo9Rigrbiz9Kfzv8PrEMf5lHqfC0xNKPrmgZj+76bi9Oh/z b/G23bR1qAcFq3MPQzNEQIoR42z1Vdrk2JH6AIC7L/FQYv9jgFA0V3z/9ozOv7ye tH4KJyq255awbiJ1+AtYTjM71jy+fx0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:14 2025 by rpki-client