$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa File: 967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa (raw, json) Hash identifier: l/dVZRLbSEsljZ/qfKlKvDh6LLi8B3Vf6pToH8nvd38= Subject key identifier: A2:74:8E:B8:5E:98:35:4B:86:7A:82:91:D7:0D:82:67:F1:8C:9F:20 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC1268A2A259B0B7C4D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.87.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c1:26:8a:2a:25:9b:0b:7c:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=64f4d4d7-5d20-41f5-a690-ec46ce71587c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:8d:b5:b6:f0:f9:e3:78:25:be:d2:da:05: 3f:10:ed:6e:9d:82:40:5b:f7:05:1c:d3:bb:92:53: 70:43:7b:5e:37:ee:94:90:72:2a:42:c0:58:e5:3f: b8:32:9d:fb:b7:d8:72:7c:ec:6c:13:1b:5c:ae:cd: d9:2c:61:85:9c:a8:1e:0d:e6:c2:b8:44:d2:f7:9d: da:fd:8e:14:36:bc:fb:9d:d2:b7:df:89:6d:35:05: e8:27:de:ab:ff:c3:cd:e8:51:b2:1e:c7:80:ff:a7: 76:fc:ed:a1:80:d5:29:89:a6:8b:10:c3:22:1b:b2: de:ba:f1:ef:9a:8a:59:d7:9b:ac:9b:e3:79:91:73: fa:66:64:a8:0f:c3:66:22:5d:64:f4:ab:06:92:f1: 8c:41:1c:3d:23:71:99:ba:d0:0f:96:a5:7a:23:b0: 84:5e:bf:c9:d4:e3:af:54:62:3f:9b:2d:c9:d6:04: 41:05:34:1d:fc:de:9f:7b:23:e9:a6:fe:f4:f7:7d: 5e:3c:80:f4:22:17:8e:92:ed:4c:5c:b7:8f:c9:9d: ab:a6:2e:4f:00:1f:f9:34:f4:e5:c7:7e:d5:98:cd: 94:ef:3d:dc:ff:da:95:b7:1f:f3:dc:b7:8c:e8:55: be:b8:0b:14:14:b8:5d:b2:7a:db:51:20:ad:9b:a5: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:74:8E:B8:5E:98:35:4B:86:7A:82:91:D7:0D:82:67:F1:8C:9F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/967b5852-34ea-3fe2-a1ab-30873dc5bdeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a6:12:e7:5e:8d:fe:ac:7c:0f:d1:29:fc:e0:38:fb:28:a7: 11:86:0a:e5:7b:af:a8:66:72:50:79:7a:98:0e:ed:98:66:88: b3:c6:ec:76:6a:91:77:59:3d:e0:f6:a1:4f:75:f7:1d:11:72: 11:cd:e8:9f:de:b7:df:ff:6a:57:f4:35:f7:c4:fa:34:cb:bb: 3d:0e:c9:b3:74:71:20:03:c5:b3:d1:c7:7e:88:a4:71:90:c4: f0:af:ad:14:7a:a9:fe:81:85:c4:36:a7:c0:23:d0:4d:76:8e: 95:66:07:56:e2:50:12:e3:83:67:46:45:44:8f:1e:c8:0f:d9: 2f:33:0f:a2:ff:3a:de:ed:1c:c6:af:f8:5d:6f:fd:4e:53:e1: 97:33:05:70:4e:8e:ad:89:1d:e9:85:a5:3a:50:cf:d8:ce:58: 64:b1:6e:e3:26:71:e7:1b:0e:c8:de:4d:4a:b4:c0:8d:75:af: 5e:ca:6f:05:7c:32:e4:30:b5:9b:c1:73:b7:41:95:91:46:0e: 82:45:32:d0:23:ba:78:32:75:a0:b9:38:32:41:8d:63:c6:9b: e7:58:de:56:d6:1b:a9:b5:19:48:8f:f6:c7:54:5b:d5:9e:74: 33:5b:48:28:0a:45:9f:d6:73:08:21:99:75:fc:7b:6f:b7:7f: e3:a7:86:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8Emiiolmwt8TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjRmNGQ0ZDctNWQyMC00MWY1LWE2OTAtZWM0NmNlNzE1ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ONtbbw+eN4Jb7S2gU/EO1unYJAW/cFHNO7 klNwQ3teN+6UkHIqQsBY5T+4Mp37t9hyfOxsExtcrs3ZLGGFnKgeDebCuETS953a /Y4UNrz7ndK334ltNQXoJ96r/8PN6FGyHseA/6d2/O2hgNUpiaaLEMMiG7LeuvHv mopZ15usm+N5kXP6ZmSoD8NmIl1k9KsGkvGMQRw9I3GZutAPlqV6I7CEXr/J1OOv VGI/my3J1gRBBTQd/N6feyPppv70931ePID0IheOku1MXLePyZ2rpi5PAB/5NPTl x37VmM2U7z3c/9qVtx/z3LeM6FW+uAsUFLhdsnrbUSCtm6V5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ0jrhemDVLhnqCkdcNgmfxjJ8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY3YjU4NTItMzRlYS0z ZmUyLWExYWItMzA4NzNkYzViZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+mEudejf6sfA/RKfzgOPsopxGGCuV7r6hmclB5epgO7ZhmiLPG7HZq kXdZPeD2oU919x0RchHN6J/et9//alf0NffE+jTLuz0OybN0cSADxbPRx36IpHGQ xPCvrRR6qf6BhcQ2p8Aj0E12jpVmB1biUBLjg2dGRUSPHsgP2S8zD6L/Ot7tHMav +F1v/U5T4ZczBXBOjq2JHemFpTpQz9jOWGSxbuMmcecbDsjeTUq0wI11r17KbwV8 MuQwtZvBc7dBlZFGDoJFMtAjungydaC5ODJBjWPGm+dY3lbWG6m1GUiP9sdUW9We dDNbSCgKRZ/WcwghmXX8e2+3f+OnhmI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:51 2025 by rpki-client