$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bed3b6c-bc0a-3c80-abd2-6feba11c7165.roa File: 9bed3b6c-bc0a-3c80-abd2-6feba11c7165.roa (raw, json) Hash identifier: pSVhBtJHWtVoEPHYfQOTHI59/2IVHYp6Z/moJy0HR6g= Subject key identifier: 2B:23:F7:14:55:F2:20:08:3B:48:67:FF:55:35:44:8C:AA:D1:36:D1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAA1681EDE2004DE78300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bed3b6c-bc0a-3c80-abd2-6feba11c7165.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.88.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:aa:16:81:ed:e2:00:4d:e7:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=955f78dc-a704-45f2-ac1b-975251fe0062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:32:f2:a6:7e:3c:d4:04:1b:24:c6:b4:7c: c0:9d:dd:5f:23:6c:7a:9a:5b:75:a3:d7:43:4c:22: 99:5e:79:e4:ac:04:4a:71:94:16:57:bf:9e:dd:e5: 99:81:b6:c2:f1:d6:a2:13:a7:b5:f3:97:06:3a:e5: 68:d2:f6:6f:c5:59:97:ac:64:0b:ca:f0:4d:97:e9: bf:df:61:bd:7b:09:2d:6c:33:92:44:2a:3b:de:57: 03:37:e8:80:a0:96:1a:e5:5f:ea:6b:2a:e0:71:da: 73:83:e1:5b:6d:56:80:ad:be:a0:9c:5e:81:6e:58: ad:69:96:2d:43:e6:67:c3:43:a8:de:f0:61:8d:39: 5e:60:62:5b:c2:3f:cd:60:a7:d2:3d:72:0f:21:42: c8:b3:9f:39:24:e0:f1:6b:40:f8:81:3a:90:e7:dd: a5:cd:21:49:1c:06:a9:11:78:36:98:51:79:80:34: c7:c5:37:d7:f9:3c:e3:ec:4a:df:64:88:95:27:ad: fa:9b:43:75:c6:fd:63:60:59:6a:3a:94:72:df:2f: 9c:2b:36:18:fa:17:66:62:82:f3:ce:b7:e9:c3:6f: 1b:b0:e8:94:8c:b9:ff:c7:2b:e5:89:94:3a:68:55: 19:11:44:ff:37:1d:d3:de:d9:c2:f5:6d:03:ff:21: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:F7:14:55:F2:20:08:3B:48:67:FF:55:35:44:8C:AA:D1:36:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bed3b6c-bc0a-3c80-abd2-6feba11c7165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:42:c1:f6:d7:79:29:30:ea:28:95:98:ce:ba:79:75:8c:83: 32:26:e7:0b:23:6a:0a:f6:7d:4f:56:a3:72:78:d8:04:e9:60: 70:9a:b9:11:ed:1b:e4:f3:d2:70:2e:f4:46:93:5b:eb:93:25: ea:7e:03:a3:c1:2a:04:2a:01:d2:e4:3a:4a:13:73:60:97:c9: 97:7c:48:ae:1c:6e:cf:92:9e:5b:23:47:42:5a:9d:94:51:7e: 69:f5:0d:4b:a0:23:d3:96:22:67:dc:e0:f3:10:b2:3e:42:d8: 1c:68:9e:41:4e:9d:ec:c3:af:87:53:6e:ec:07:89:5b:6e:05: 94:2e:cb:a4:a9:57:53:a4:82:00:b1:2d:07:7a:80:17:f9:c3: 47:c7:d1:f9:cc:96:53:88:60:3c:6f:80:1d:b0:2e:34:73:e2: c3:3b:fe:ef:34:17:79:d5:cb:43:1c:62:b3:98:ed:97:fe:6b: 2a:52:be:a1:e2:b1:61:9e:8e:f5:dc:b4:f6:79:3f:b0:06:05: 6d:25:25:54:7b:c3:5b:fa:9b:c3:de:57:e3:b1:e8:2f:33:59: 45:9a:44:f7:fb:c1:5d:e3:e8:ee:33:4b:5e:be:6f:3c:bd:c9: 50:a0:85:c3:14:a6:56:83:40:6d:23:22:79:8c:85:0d:de:a8: 57:cf:f1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6oWge3iAE3ngwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTU1Zjc4ZGMtYTcwNC00NWYyLWFjMWItOTc1MjUxZmUwMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUUy8qZ+PNQEGyTGtHzAnd1fI2x6mlt1o9dD TCKZXnnkrARKcZQWV7+e3eWZgbbC8daiE6e185cGOuVo0vZvxVmXrGQLyvBNl+m/ 32G9ewktbDOSRCo73lcDN+iAoJYa5V/qayrgcdpzg+FbbVaArb6gnF6BblitaZYt Q+Znw0Oo3vBhjTleYGJbwj/NYKfSPXIPIULIs585JODxa0D4gTqQ592lzSFJHAap EXg2mFF5gDTHxTfX+Tzj7ErfZIiVJ636m0N1xv1jYFlqOpRy3y+cKzYY+hdmYoLz zrfpw28bsOiUjLn/xyvliZQ6aFUZEUT/Nx3T3tnC9W0D/yFzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsj9xRV8iAIO0hn/1U1RIyq0TbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJlZDNiNmMtYmMwYS0z YzgwLWFiZDItNmZlYmExMWM3MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJCwfbXeSkw6iiVmM66eXWMgzIm5wsjagr2fU9Wo3J42ATpYHCauRHt G+Tz0nAu9EaTW+uTJep+A6PBKgQqAdLkOkoTc2CXyZd8SK4cbs+SnlsjR0JanZRR fmn1DUugI9OWImfc4PMQsj5C2BxonkFOnezDr4dTbuwHiVtuBZQuy6SpV1OkggCx LQd6gBf5w0fH0fnMllOIYDxvgB2wLjRz4sM7/u80F3nVy0McYrOY7Zf+aypSvqHi sWGejvXctPZ5P7AGBW0lJVR7w1v6m8PeV+Ox6C8zWUWaRPf7wV3j6O4zS16+bzy9 yVCghcMUplaDQG0jInmMhQ3eqFfP8YA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:36 2025 by rpki-client