$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa File: a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa (raw, json) Hash identifier: GRQQQbRr/PSxce+SpWDXpG3WJl0mJj3NN0kCaKfBy/0= Subject key identifier: 81:5C:CF:BE:D0:D2:69:A9:71:9C:2E:9E:4F:E9:7A:92:F0:46:9E:03 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDE7A17C909BCB4A94E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.139.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:de:7a:17:c9:09:bc:b4:a9:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=cc4928ca-14d6-44fc-a3d5-61c6a8c487ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:84:89:e9:e6:2c:b3:57:1e:ae:55:83:1f: be:73:0d:de:78:a3:f5:fc:99:7b:2b:41:e2:9b:50: d9:25:d3:59:17:d8:55:8e:60:8d:d4:4e:ba:9e:86: e8:bd:b8:ac:15:37:fd:cd:e4:ea:9a:21:ad:ba:52: 5d:57:c5:4e:38:9d:2f:d4:c2:58:c4:bc:c4:80:74: 69:41:8b:96:0b:d4:ce:ab:e6:c6:71:6c:20:17:16: 18:1a:66:1c:1f:11:85:56:97:e6:15:2f:af:51:ab: 2d:df:df:17:b4:bb:00:f2:0a:c3:5b:4a:16:b4:6f: 6d:e6:8c:a0:4a:cd:c8:b1:24:8a:77:9f:e6:d8:c1: 37:f1:67:3d:2d:38:10:55:c7:c3:30:95:51:70:d0: 53:be:e1:cd:a6:c4:cc:39:aa:27:26:8e:7a:1f:ff: 8c:f6:dd:7e:94:17:e6:3e:1d:57:f4:21:f8:ef:e0: ef:56:69:89:b3:26:82:df:3e:1b:45:29:3b:80:77: 06:85:30:35:24:4f:6d:80:05:90:3b:5c:9d:28:6e: c0:5f:55:a5:89:29:58:3b:31:0c:ef:c2:98:51:0e: cc:e9:bc:4f:17:b0:60:1a:84:2a:c8:b0:3f:49:e3: 5b:a4:e3:7a:84:1e:2e:d8:b9:b9:74:b9:45:cd:66: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5C:CF:BE:D0:D2:69:A9:71:9C:2E:9E:4F:E9:7A:92:F0:46:9E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ab:bd:63:23:47:a4:c8:cb:cd:f8:95:23:b7:d2:2a:ca:95: c2:f0:c0:72:ea:00:55:1a:c8:c8:81:70:68:9e:78:99:ba:f9: 57:85:fc:32:1f:ac:e6:39:5e:c7:3e:ff:bf:7a:9e:5c:a8:cc: ab:82:0a:bf:59:69:bb:f6:2d:d1:39:b1:ac:8f:17:26:3c:1a: ca:c8:d4:72:5b:43:90:66:de:fd:78:ed:98:15:aa:b2:1e:50: f7:51:c6:8f:00:c0:16:c9:41:61:b3:29:20:e9:2a:50:8b:e3: f9:6d:26:b4:d8:e0:e3:5b:d7:36:21:9e:74:91:b7:a7:c8:55: 5e:c3:d1:cb:92:ea:ed:da:c1:2a:7f:6b:08:5d:3d:b0:30:99: 7e:6c:a3:78:c7:73:25:46:c2:0c:0c:fd:91:f1:42:ae:d0:f8: af:91:c6:48:1b:07:58:f0:dd:54:4a:40:73:e5:4f:45:0d:f8: d7:26:c7:71:de:23:dd:e7:b4:6e:b0:f6:f5:b6:14:bb:eb:ce: e7:b8:b3:82:f7:86:ab:0b:ea:bb:23:1a:bc:2c:dc:ac:fe:b2: 71:d1:d7:89:76:32:fa:4b:ff:de:09:f2:1c:4d:c3:c7:58:58: d0:cb:d7:45:45:26:90:a1:63:00:f4:74:c8:3a:cb:16:b8:2e: 89:5b:92:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS956F8kJvLSpTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2M0OTI4Y2EtMTRkNi00NGZjLWEzZDUtNjFjNmE4YzQ4N2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaWEienmLLNXHq5Vgx++cw3eeKP1/Jl7K0Hi m1DZJdNZF9hVjmCN1E66nobovbisFTf9zeTqmiGtulJdV8VOOJ0v1MJYxLzEgHRp QYuWC9TOq+bGcWwgFxYYGmYcHxGFVpfmFS+vUast398XtLsA8grDW0oWtG9t5oyg Ss3IsSSKd5/m2ME38Wc9LTgQVcfDMJVRcNBTvuHNpsTMOaonJo56H/+M9t1+lBfm Ph1X9CH47+DvVmmJsyaC3z4bRSk7gHcGhTA1JE9tgAWQO1ydKG7AX1WliSlYOzEM 78KYUQ7M6bxPF7BgGoQqyLA/SeNbpON6hB4u2Lm5dLlFzWbzhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFcz77Q0mmpcZwunk/pepLwRp4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTBhNDQyZTAtY2Y4Zi0z YmM5LWI5ZGYtZWQ4ZjlhM2JkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIouAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIurvWMjR6TIy834lSO30irKlcLwwHLqAFUayMiBcGieeJm6+VeF/DIf rOY5Xsc+/796nlyozKuCCr9Zabv2LdE5sayPFyY8GsrI1HJbQ5Bm3v147ZgVqrIe UPdRxo8AwBbJQWGzKSDpKlCL4/ltJrTY4ONb1zYhnnSRt6fIVV7D0cuS6u3awSp/ awhdPbAwmX5so3jHcyVGwgwM/ZHxQq7Q+K+RxkgbB1jw3VRKQHPlT0UN+Ncmx3He I93ntG6w9vW2FLvrzue4s4L3hqsL6rsjGrws3Kz+snHR14l2MvpL/94J8hxNw8dY WNDL10VFJpChYwD0dMg6yxa4Lolbku4= -----END CERTIFICATE-----Generated at Fri Mar 14 11:03:02 2025 by rpki-client