$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa File: 9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa (raw, json) Hash identifier: 9FXIZV0bBoksxB1fsUfosBZc+0FiA1ukqGRWFMnGz0s= Subject key identifier: 6C:44:3A:97:F8:8A:83:72:ED:DF:84:24:6E:34:ED:A5:FE:77:70:1A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAC95125BE5C8EFAEFBB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.68.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ac:95:12:5b:e5:c8:ef:ae:fb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=bfea121e-e135-474d-9ffa-e83d7cc43daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:c6:e8:f4:11:7a:cc:b5:5e:82:42:c0:88: ae:12:ba:31:d9:62:5f:ad:19:03:af:2e:4b:09:f2: 0e:6f:ff:68:87:ab:42:85:0a:bf:fe:66:b1:98:12: e1:40:3c:76:05:c9:87:24:95:98:5a:72:e3:d4:32: d2:3f:99:5b:79:6b:17:db:f9:8e:03:57:3a:2b:ec: da:3d:dd:98:39:9f:09:4a:fc:96:42:d9:0c:76:84: 0b:66:4e:e3:dc:80:72:27:92:8d:f6:2f:b0:15:a8: 0f:79:4f:0b:6a:98:74:a7:38:20:b5:bc:16:fc:a6: d9:5c:02:ea:86:97:f6:bd:1c:03:3b:a0:8d:2d:b8: 50:de:8d:4e:b2:4a:a1:32:9f:92:22:c0:2b:9f:87: 0d:07:3e:31:db:d9:23:23:05:28:42:f7:eb:c2:87: 8d:5a:31:fa:b9:68:9d:5a:71:dc:12:db:eb:df:66: 16:c3:2b:49:5c:07:85:c8:8d:2e:b0:a9:b9:88:08: 72:e7:07:81:a9:75:72:a9:f9:70:3b:99:2b:46:1d: f4:2e:c1:9c:cd:6e:9e:27:92:f2:ee:93:fc:f1:08: 68:e6:6f:81:92:e1:40:ac:fa:f8:b9:b6:97:97:35: 14:98:37:0b:85:4a:b0:e8:61:45:eb:14:d3:e5:17: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:44:3A:97:F8:8A:83:72:ED:DF:84:24:6E:34:ED:A5:FE:77:70:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9b170b28-cf4d-36a7-ad7a-6146fd12b830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bd:ba:8c:51:c9:90:a4:56:1f:99:8c:cc:1e:bc:df:31:33: 94:b0:55:7c:fd:cc:76:53:c2:9c:01:7e:85:30:08:21:e7:74: 7d:36:68:90:55:22:b1:5c:b1:73:ee:81:dd:3e:82:c2:17:3d: 2e:8a:09:e8:a0:e2:80:51:5b:d6:b4:7e:8c:54:25:5a:2c:6f: ad:dd:6c:3c:39:43:9e:e3:0e:ec:56:22:03:8b:c7:72:7c:b5: ac:69:48:94:e5:2a:ac:36:5f:ee:97:8f:65:80:e4:ce:6d:06: 4d:89:c6:e3:b6:cc:de:ae:84:6e:e5:f2:e3:d8:97:04:2c:f5: 2f:94:c5:a2:dc:6b:8d:49:f3:23:29:1a:2b:c3:23:28:1e:e0: 4c:f2:ad:f4:53:c7:3d:c2:cf:1e:17:68:89:f1:75:39:b8:02: 5b:3c:31:c1:bc:22:3e:95:8b:a7:27:74:90:56:b8:8d:c1:1d: 3d:d9:05:33:5b:1d:b1:72:86:fa:4c:3b:0e:c1:bf:cf:c8:e1: 80:12:6a:79:48:16:13:ad:57:09:99:0b:47:8e:f1:ea:b3:db: a4:ca:b7:53:76:a5:d2:5c:b7:31:a8:7e:0a:25:d2:90:14:c5: 2b:83:5d:01:d7:00:34:1d:07:d3:fb:7f:0d:37:80:cb:84:93: a6:f4:9a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6yVElvlyO+u+7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YmZlYTEyMWUtZTEzNS00NzRkLTlmZmEtZTgzZDdjYzQzZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h/G6PQResy1XoJCwIiuErox2WJfrRkDry5L CfIOb/9oh6tChQq//maxmBLhQDx2BcmHJJWYWnLj1DLSP5lbeWsX2/mOA1c6K+za Pd2YOZ8JSvyWQtkMdoQLZk7j3IByJ5KN9i+wFagPeU8Laph0pzggtbwW/KbZXALq hpf2vRwDO6CNLbhQ3o1OskqhMp+SIsArn4cNBz4x29kjIwUoQvfrwoeNWjH6uWid WnHcEtvr32YWwytJXAeFyI0usKm5iAhy5weBqXVyqflwO5krRh30LsGczW6eJ5Ly 7pP88Qho5m+BkuFArPr4ubaXlzUUmDcLhUqw6GFF6xTT5RcoswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxEOpf4ioNy7d+EJG407aX+d3AaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWIxNzBiMjgtY2Y0ZC0z NmE3LWFkN2EtNjE0NmZkMTJiODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq9uoxRyZCkVh+ZjMwevN8xM5SwVXz9zHZTwpwBfoUwCCHndH02aJBV IrFcsXPugd0+gsIXPS6KCeig4oBRW9a0foxUJVosb63dbDw5Q57jDuxWIgOLx3J8 taxpSJTlKqw2X+6Xj2WA5M5tBk2JxuO2zN6uhG7l8uPYlwQs9S+UxaLca41J8yMp GivDIyge4EzyrfRTxz3Czx4XaInxdTm4Als8McG8Ij6Vi6cndJBWuI3BHT3ZBTNb HbFyhvpMOw7Bv8/I4YASanlIFhOtVwmZC0eO8eqz26TKt1N2pdJctzGofgol0pAU xSuDXQHXADQdB9P7fw03gMuEk6b0moA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:06:58 2025 by rpki-client