$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96e05e9b-2f17-3b44-86be-9d89f32cde46.roa File: 96e05e9b-2f17-3b44-86be-9d89f32cde46.roa (raw, json) Hash identifier: b7+k6K53NRHDNmNOSjM7BzgYrRIOY2Xh+G1dHfedju4= Subject key identifier: A4:4C:36:71:AF:66:7E:17:F6:0A:F0:C6:B9:C4:BC:EC:79:43:4F:D8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1E0E1EEC40FE4D104300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96e05e9b-2f17-3b44-86be-9d89f32cde46.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.65.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1e:0e:1e:ec:40:fe:4d:10:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2efe889b-528b-41b1-9698-c187f1b20e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:33:6f:a0:4f:e1:b6:aa:3e:b7:9c:79:7e:6d: a5:a4:66:86:b6:40:79:69:68:7b:92:e5:cd:77:a6: 0e:a8:4f:df:f5:20:8c:f0:47:92:05:0a:59:1d:c1: 23:cf:95:a4:d9:2d:85:6b:63:22:83:4e:15:19:eb: 15:37:12:cd:ad:62:01:65:b8:d5:7b:93:a6:ec:ff: a9:ec:f1:8c:91:93:d2:87:4d:fd:89:f0:69:87:72: 6d:3a:4f:20:71:f0:cb:15:9a:65:e3:ff:cc:12:05: f7:0f:b9:09:ab:d8:4a:06:9e:ad:05:2d:23:a0:01: 38:1b:79:2c:f6:f4:f2:44:12:ba:66:37:45:e2:cd: 41:9f:97:fb:41:13:d0:f4:e4:bc:57:89:18:bd:7f: 27:7a:23:5d:e9:b8:dc:8d:7e:0f:65:12:ce:63:cc: db:64:4c:59:76:18:92:fa:f1:b7:6d:8b:a1:8e:05: 9f:8c:b8:b8:7e:97:4b:9f:1f:b4:18:df:61:82:7a: 5e:72:47:9b:0b:58:9f:fb:73:10:1b:fb:6e:24:a6: 6c:2e:3c:a8:80:bb:00:37:28:f7:1f:fd:7a:a0:e2: d7:24:23:2e:0c:65:7e:81:cf:bc:b8:99:64:2e:99: c2:d5:7f:fe:5b:67:0e:fd:31:a5:b5:c7:b7:9b:60: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:36:71:AF:66:7E:17:F6:0A:F0:C6:B9:C4:BC:EC:79:43:4F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/96e05e9b-2f17-3b44-86be-9d89f32cde46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:45:64:07:6a:b2:f7:7c:6a:2f:c7:3b:f2:60:f9:2d:cd:7d: fa:b4:d5:69:6f:2d:8b:d0:1e:f2:ab:f6:33:0f:0e:b6:61:0a: f9:b6:a6:9d:19:01:01:0d:5c:28:66:fd:5c:0b:c4:0b:1f:0e: 49:5b:ed:07:32:e1:ee:d1:92:b7:9c:93:4c:23:7f:79:8e:25: 0f:8a:94:8e:ef:51:22:2e:3a:b9:10:dc:87:c9:a9:c9:9d:23: ac:d4:18:3a:41:d9:ba:7b:02:d1:3c:bc:16:96:78:03:73:41: 94:2e:20:54:82:0a:59:20:e9:39:df:f9:d1:89:96:0f:59:24: 9c:4d:2d:07:83:8a:68:4c:d4:98:97:11:a0:35:de:42:63:08: ea:56:b3:e4:bb:c4:a2:4b:6a:02:00:24:0c:5c:08:80:df:2d: 17:e9:b2:62:f2:ce:de:54:3d:63:58:5c:cc:b9:1d:ef:34:c5: 0a:2f:47:74:79:e2:38:d7:0e:0a:41:d8:8e:61:cf:ef:1e:b7: 9c:82:b6:af:b8:27:4f:6a:1e:28:9b:67:bd:bd:45:c2:85:f8: a0:37:72:2c:19:b6:10:a8:70:ab:bd:fb:03:83:a5:10:ad:b4: 8a:42:cd:dd:00:13:2d:fd:4a:1a:3a:a6:a6:c0:65:13:37:34: ea:44:8a:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB4OHuxA/k0QQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmVmZTg4OWItNTI4Yi00MWIxLTk2OTgtYzE4N2YxYjIwZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDNvoE/htqo+t5x5fm2lpGaGtkB5aWh7kuXN d6YOqE/f9SCM8EeSBQpZHcEjz5Wk2S2Fa2Mig04VGesVNxLNrWIBZbjVe5Om7P+p 7PGMkZPSh039ifBph3JtOk8gcfDLFZpl4//MEgX3D7kJq9hKBp6tBS0joAE4G3ks 9vTyRBK6ZjdF4s1Bn5f7QRPQ9OS8V4kYvX8neiNd6bjcjX4PZRLOY8zbZExZdhiS +vG3bYuhjgWfjLi4fpdLnx+0GN9hgnpeckebC1if+3MQG/tuJKZsLjyogLsANyj3 H/16oOLXJCMuDGV+gc+8uJlkLpnC1X/+W2cO/TGltce3m2AHBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRMNnGvZn4X9grwxrnEvOx5Q0/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTZlMDVlOWItMmYxNy0z YjQ0LTg2YmUtOWQ4OWYzMmNkZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlFZAdqsvd8ai/HO/Jg+S3Nffq01WlvLYvQHvKr9jMPDrZhCvm2pp0Z AQENXChm/VwLxAsfDklb7Qcy4e7Rkreck0wjf3mOJQ+KlI7vUSIuOrkQ3IfJqcmd I6zUGDpB2bp7AtE8vBaWeANzQZQuIFSCClkg6Tnf+dGJlg9ZJJxNLQeDimhM1JiX EaA13kJjCOpWs+S7xKJLagIAJAxcCIDfLRfpsmLyzt5UPWNYXMy5He80xQovR3R5 4jjXDgpB2I5hz+8et5yCtq+4J09qHiibZ729RcKF+KA3ciwZthCocKu9+wODpRCt tIpCzd0AEy39Sho6pqbAZRM3NOpEisw= -----END CERTIFICATE-----Generated at Fri Apr 4 21:03:51 2025 by rpki-client