$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a486cda1-7e40-3dee-be62-17edb85ff519.roa File: a486cda1-7e40-3dee-be62-17edb85ff519.roa (raw, json) Hash identifier: /Nf2W4FRLGTlJfmNlx1V6rDB7JzaEeyoTBeB4MHyviM= Subject key identifier: E6:8C:6D:46:82:24:00:99:B2:41:C9:25:7C:5B:97:07:B3:DF:B9:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB1406BF3C097BA5216C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a486cda1-7e40-3dee-be62-17edb85ff519.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.138.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b1:40:6b:f3:c0:97:ba:52:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=95ab1d5f-750a-4f3d-96c6-11de094d719a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f8:ee:17:c9:00:1b:e8:c2:e4:e0:51:32:87: e0:ed:d0:64:8c:0d:30:31:b3:be:2b:6d:1f:80:c4: fa:49:33:68:c7:21:8c:ba:ff:81:89:91:24:e9:c9: 45:91:b7:0c:e6:7d:99:46:ce:c8:55:34:18:38:ee: 11:6f:a6:90:42:cf:bf:0b:53:01:b4:07:cc:ea:f3: 8d:8f:7d:df:7c:36:4b:2a:65:ea:f1:fd:fc:a6:37: 6a:27:0e:78:cb:d9:20:d1:84:22:af:81:bd:90:43: aa:1d:05:a7:d4:0a:f5:8a:79:5f:ff:ba:23:30:00: bb:6b:43:a0:85:37:33:a5:75:29:5c:a4:c0:59:70: c3:d3:b5:3a:56:a8:cb:56:4e:36:cc:a0:6a:76:4a: 88:d7:c5:4c:b9:2b:61:00:a2:01:70:1e:3c:f0:00: ca:e2:77:e0:f4:dc:d3:f1:9e:95:e6:c5:06:3c:27: 1e:52:06:6f:f6:1f:31:aa:40:06:a0:ff:07:ee:a9: 60:04:3d:5e:4c:10:b8:44:89:ae:00:4e:b7:51:36: 15:e3:12:48:8d:0a:8c:5a:32:15:bf:32:55:a7:e1: 9a:3b:7c:61:eb:4b:f4:95:12:0c:d7:b2:ad:61:10: d1:31:a4:0b:c8:c2:ae:90:fa:2c:a2:1e:cb:8c:88: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8C:6D:46:82:24:00:99:B2:41:C9:25:7C:5B:97:07:B3:DF:B9:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a486cda1-7e40-3dee-be62-17edb85ff519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:9c:3d:5a:4f:49:94:ec:27:ff:fd:2a:dd:99:eb:72:fa:10: 2d:e3:ab:ef:5e:cd:f3:4b:f7:9d:b1:30:da:78:56:68:0d:ec: 59:a2:d7:b8:ef:90:cb:9c:ca:47:e1:32:8c:b2:63:56:f7:b3: d9:db:2e:0d:28:ef:bf:dd:4e:6d:b1:c4:5b:e6:c8:9e:ff:15: 00:cc:34:ff:ba:9b:d0:42:76:a3:ef:0b:dd:1c:3a:48:64:ba: 1f:0e:eb:39:4d:eb:c6:35:54:45:ea:12:5e:38:c3:63:35:ab: 95:64:ec:91:52:9f:b5:26:56:a2:7a:39:d9:25:45:5d:fa:22: 1c:d4:f4:60:e2:f8:b9:bd:fa:1c:b0:40:34:96:aa:d6:e2:e2: 44:03:82:46:13:ec:c7:21:08:a4:3f:54:4b:6d:22:a4:f9:1e: 42:29:b8:4f:5e:7d:20:37:6a:95:54:5b:8f:87:c4:8d:00:c1: 79:89:1e:c1:91:2e:53:68:92:d4:02:d2:8f:41:b6:fa:4c:a0: 0d:ac:32:27:15:37:b2:b8:f3:6a:0e:8c:43:a1:44:37:2e:1a: dc:2f:cc:fc:62:4a:7e:76:03:8c:00:dc:cf:06:11:00:38:37: a4:32:2f:7b:0b:e6:be:1d:0e:db:64:a7:c7:ca:97:94:c8:08: c9:41:05:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7FAa/PAl7pSFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTVhYjFkNWYtNzUwYS00ZjNkLTk2YzYtMTFkZTA5NGQ3MTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PjuF8kAG+jC5OBRMofg7dBkjA0wMbO+K20f gMT6STNoxyGMuv+BiZEk6clFkbcM5n2ZRs7IVTQYOO4Rb6aQQs+/C1MBtAfM6vON j33ffDZLKmXq8f38pjdqJw54y9kg0YQir4G9kEOqHQWn1Ar1inlf/7ojMAC7a0Og hTczpXUpXKTAWXDD07U6VqjLVk42zKBqdkqI18VMuSthAKIBcB488ADK4nfg9NzT 8Z6V5sUGPCceUgZv9h8xqkAGoP8H7qlgBD1eTBC4RImuAE63UTYV4xJIjQqMWjIV vzJVp+GaO3xh60v0lRIM17KtYRDRMaQLyMKukPosoh7LjIgzTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaMbUaCJACZskHJJXxblwez37mvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQ4NmNkYTEtN2U0MC0z ZGVlLWJlNjItMTdlZGI4NWZmNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqcPVpPSZTsJ//9Kt2Z63L6EC3jq+9ezfNL952xMNp4VmgN7Fmi17jv kMucykfhMoyyY1b3s9nbLg0o77/dTm2xxFvmyJ7/FQDMNP+6m9BCdqPvC90cOkhk uh8O6zlN68Y1VEXqEl44w2M1q5Vk7JFSn7UmVqJ6OdklRV36IhzU9GDi+Lm9+hyw QDSWqtbi4kQDgkYT7MchCKQ/VEttIqT5HkIpuE9efSA3apVUW4+HxI0AwXmJHsGR LlNoktQC0o9BtvpMoA2sMicVN7K482oOjEOhRDcuGtwvzPxiSn52A4wA3M8GEQA4 N6QyL3sL5r4dDttkp8fKl5TICMlBBZc= -----END CERTIFICATE-----Generated at Fri Apr 4 18:09:30 2025 by rpki-client