$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9545a4b7-a30b-3913-b98a-21f841bd49da.roa File: 9545a4b7-a30b-3913-b98a-21f841bd49da.roa (raw, json) Hash identifier: iWeTmXoMxf0HFCT2CMdlyZPuZWxvd9iDMBYPeAL52nU= Subject key identifier: 06:A6:9C:0D:E5:0A:24:34:C3:80:03:17:F6:3A:98:40:CE:47:D4:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEFFBA7AFFF865BFC2300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9545a4b7-a30b-3913-b98a-21f841bd49da.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.68.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ef:fb:a7:af:ff:86:5b:fc:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ba325eee-bff6-4918-ae7c-986043ac40a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:6b:cf:6c:e9:93:88:ba:31:3b:ee:df:be: 9f:bf:8e:0c:64:7b:3c:f3:0b:1e:a1:bb:97:51:74: a6:1c:3d:f7:2f:56:e3:d8:e4:8c:d3:e6:68:0b:38: d4:6f:93:c8:7a:ae:44:8b:e6:65:31:be:af:e1:6c: a6:e6:1a:a0:30:56:a1:2a:c4:ba:37:55:ec:24:77: 0f:41:92:8a:f6:8a:d1:40:5d:91:a1:7c:87:38:33: 45:55:bb:a0:0c:44:97:f9:ed:d7:fd:b1:8a:bc:eb: 4e:0d:d6:6a:46:97:c8:c4:70:eb:c1:49:53:53:31: f5:b9:16:86:d1:e5:68:1d:dc:00:db:47:6c:c5:ee: eb:35:f4:26:2c:af:43:53:c1:d0:ac:23:92:7a:30: f0:19:ff:b8:4b:4f:90:ee:c4:f2:f7:8a:bb:34:b5: c5:20:28:f5:cb:43:53:50:59:1b:11:2b:3b:1c:84: 01:d6:f8:a5:53:3f:71:d7:93:e3:0b:a4:f4:ea:5b: 21:69:a1:37:77:01:d8:6b:70:90:8c:d8:ab:06:cb: 53:e0:78:cb:56:f9:94:cc:6b:3d:cf:2b:08:91:7e: d3:03:7f:2d:b5:97:1b:1b:f4:85:cb:3b:03:6f:64: 13:34:ab:e8:c1:98:a7:2c:6e:13:5c:43:a1:bb:49: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A6:9C:0D:E5:0A:24:34:C3:80:03:17:F6:3A:98:40:CE:47:D4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9545a4b7-a30b-3913-b98a-21f841bd49da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f5:df:51:4d:f0:b9:34:6e:89:d9:62:3c:77:51:1c:51:9e: 1e:2d:ce:f4:d4:ca:98:2f:e6:19:f6:91:81:35:d9:73:78:6d: e0:57:ab:35:28:19:cd:d3:7f:f2:f1:d4:fa:72:5a:9c:a2:41: eb:5e:68:ce:26:8a:88:c4:6e:5b:cb:ff:71:d2:cb:73:aa:c7: c2:12:cc:94:59:ca:e9:46:b6:f2:86:b0:86:dd:37:66:3d:57: df:69:9d:0a:15:4a:18:38:fc:27:b3:e9:93:ef:60:a7:8c:2f: b0:1e:e0:d3:ed:82:de:d1:fc:53:12:45:82:bb:ef:bb:53:5f: d4:d3:ab:60:ff:48:80:8c:b0:b9:ca:b2:2a:7f:24:c5:e4:04: 01:14:16:89:c7:48:34:88:ab:fc:56:41:5a:9b:90:e2:e0:1d: 11:66:cf:74:64:53:f2:96:8c:06:99:8e:23:08:6b:65:b5:4d: 60:69:5a:8c:d3:ed:2e:b4:23:15:cb:63:01:25:d3:4b:59:ba: 30:94:de:ef:b3:f3:08:75:ec:92:79:fe:6f:b7:4f:2e:13:e6: 4e:64:07:cf:7c:3b:4a:34:f1:49:70:7a:bc:df:9a:7b:6d:ba: 9e:36:1e:ee:f9:e6:e6:e1:58:be:0e:ca:f7:e6:b3:e2:e4:37: d8:13:1f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+/7p6//hlv8IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YmEzMjVlZWUtYmZmNi00OTE4LWFlN2MtOTg2MDQzYWM0MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0drz2zpk4i6MTvu376fv44MZHs88wseobuX UXSmHD33L1bj2OSM0+ZoCzjUb5PIeq5Ei+ZlMb6v4Wym5hqgMFahKsS6N1XsJHcP QZKK9orRQF2RoXyHODNFVbugDESX+e3X/bGKvOtODdZqRpfIxHDrwUlTUzH1uRaG 0eVoHdwA20dsxe7rNfQmLK9DU8HQrCOSejDwGf+4S0+Q7sTy94q7NLXFICj1y0NT UFkbESs7HIQB1vilUz9x15PjC6T06lshaaE3dwHYa3CQjNirBstT4HjLVvmUzGs9 zysIkX7TA38ttZcbG/SFyzsDb2QTNKvowZinLG4TXEOhu0l5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAamnA3lCiQ0w4ADF/Y6mEDOR9RzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTU0NWE0YjctYTMwYi0z OTEzLWI5OGEtMjFmODQxYmQ0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED131FN8Lk0bonZYjx3URxRnh4tzvTUypgv5hn2kYE12XN4beBXqzUo Gc3Tf/Lx1PpyWpyiQeteaM4miojEblvL/3HSy3Oqx8ISzJRZyulGtvKGsIbdN2Y9 V99pnQoVShg4/Cez6ZPvYKeML7Ae4NPtgt7R/FMSRYK777tTX9TTq2D/SICMsLnK sip/JMXkBAEUFonHSDSIq/xWQVqbkOLgHRFmz3RkU/KWjAaZjiMIa2W1TWBpWozT 7S60IxXLYwEl00tZujCU3u+z8wh17JJ5/m+3Ty4T5k5kB898O0o08Ulwerzfmntt up42Hu755ubhWL4Oyvfms+LkN9gTH80= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:40 2025 by rpki-client