$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa File: a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa (raw, json) Hash identifier: MDKgZjzpI5jS1x6quxLomSqx+qJZmlXdeyaF9s8QbwE= Subject key identifier: 0D:98:1D:29:2D:CD:E9:88:91:A9:09:99:8A:39:A4:FA:4B:85:6F:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C139AD4221B0D77CEA200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.85.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:13:9a:d4:22:1b:0d:77:ce:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4e850951-a3c0-4f84-8636-cce8952f8572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:b4:03:29:a8:a0:b8:05:ee:5c:f3:b8:2a: 82:10:ac:24:03:4f:7b:16:f5:12:34:23:76:18:99: 20:da:d9:80:b7:e2:2e:4c:b5:a4:49:0f:21:94:e2: 19:d0:e0:aa:53:be:e0:f7:84:4c:84:58:72:7b:94: 4f:80:de:1e:e9:86:3c:ef:79:a1:74:c7:a2:1b:d1: 74:ea:e7:d2:4c:09:68:fb:d3:d2:84:7d:c0:82:ab: 46:99:d6:44:45:af:56:e7:a0:9f:58:2c:59:38:b9: 0a:24:97:af:f3:cf:af:71:31:fe:a7:e2:f2:b3:84: 47:98:f6:d3:f1:a4:0f:1a:dd:96:80:df:f0:b1:5f: 16:12:31:2a:31:6f:68:22:60:19:31:3b:16:4f:79: 29:fb:ca:b8:44:d5:04:f2:f1:a5:9c:b4:40:c0:c2: 1f:c6:f9:e6:87:c8:aa:9b:18:72:76:c7:88:db:23: 1f:f1:25:b9:27:b9:57:c3:4a:07:36:f6:24:7c:bc: 70:53:a9:90:16:99:b3:ae:13:61:bb:fa:50:f6:d7: b1:6e:a1:48:3a:69:4d:0b:ac:dc:33:37:6d:86:b3: 6d:fa:5d:8e:5d:ab:36:c6:d8:c1:68:eb:d9:8b:01: 0a:56:7a:5d:b2:eb:63:12:58:b7:f3:c1:ce:ef:d6: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:98:1D:29:2D:CD:E9:88:91:A9:09:99:8A:39:A4:FA:4B:85:6F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2cfc6a7-0ce1-3816-8880-d450cb4a3efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.85.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:81:c5:ca:9a:59:d8:49:3c:8a:14:95:d7:6d:2f:34:fb:eb: c5:62:18:95:07:9e:7c:48:55:33:17:73:ed:9d:19:be:d6:ab: 23:a4:ad:ac:ce:37:bd:35:d0:e9:e0:0f:53:b6:eb:a1:25:f1: 10:0e:a5:97:70:3a:44:28:61:a6:fd:33:5f:91:04:fc:6b:eb: b2:b5:fd:0b:61:13:eb:61:9f:24:f9:86:b4:97:b3:f5:b6:40: 37:bc:8f:aa:45:e8:15:03:d6:47:44:ef:4c:27:9b:9d:db:f2: ce:e2:b7:b8:76:09:91:24:44:86:e9:87:ae:a7:8d:7b:46:95: 43:56:cb:9f:97:35:82:b9:25:2d:b7:93:ef:6a:a1:80:01:02: c0:24:d4:1c:86:56:a2:7b:cd:c7:53:08:60:00:8c:74:04:cf: 07:a0:f6:b0:e5:7f:8e:ee:49:48:ef:61:41:a0:74:61:12:f9: e4:cf:d5:3e:e0:59:43:d0:19:f7:73:e5:00:73:29:ad:f1:03: 8a:98:06:15:cd:37:11:e7:32:dd:ad:cc:51:9a:d9:29:d3:38: 48:e4:52:46:da:5f:c3:30:df:f9:ba:44:d8:28:0b:68:b5:e2: 5a:f4:ad:10:19:b4:44:13:9a:c9:83:2c:9f:8a:05:07:28:72: dd:1d:75:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBOa1CIbDXfOogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGU4NTA5NTEtYTNjMC00Zjg0LTg2MzYtY2NlODk1MmY4NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uO0AymooLgF7lzzuCqCEKwkA097FvUSNCN2 GJkg2tmAt+IuTLWkSQ8hlOIZ0OCqU77g94RMhFhye5RPgN4e6YY873mhdMeiG9F0 6ufSTAlo+9PShH3AgqtGmdZERa9W56CfWCxZOLkKJJev88+vcTH+p+Lys4RHmPbT 8aQPGt2WgN/wsV8WEjEqMW9oImAZMTsWT3kp+8q4RNUE8vGlnLRAwMIfxvnmh8iq mxhydseI2yMf8SW5J7lXw0oHNvYkfLxwU6mQFpmzrhNhu/pQ9texbqFIOmlNC6zc MzdthrNt+l2OXas2xtjBaOvZiwEKVnpdsutjEli388HO79abyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2YHSktzemIkakJmYo5pPpLhW88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTJjZmM2YTctMGNlMS0z ODE2LTg4ODAtZDQ1MGNiNGEzZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOBxcqaWdhJPIoUlddtLzT768ViGJUHnnxIVTMXc+2dGb7WqyOkrazO N7010OngD1O266El8RAOpZdwOkQoYab9M1+RBPxr67K1/QthE+thnyT5hrSXs/W2 QDe8j6pF6BUD1kdE70wnm53b8s7it7h2CZEkRIbph66njXtGlUNWy5+XNYK5JS23 k+9qoYABAsAk1ByGVqJ7zcdTCGAAjHQEzweg9rDlf47uSUjvYUGgdGES+eTP1T7g WUPQGfdz5QBzKa3xA4qYBhXNNxHnMt2tzFGa2SnTOEjkUkbaX8Mw3/m6RNgoC2i1 4lr0rRAZtEQTmsmDLJ+KBQcoct0dddQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:32 2025 by rpki-client