$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa File: a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa (raw, json) Hash identifier: Rl0jamgrOvnWO9OTtdUEfX3QjD6bMu54il6UcWzxreQ= Subject key identifier: F7:A9:67:AD:78:B6:4E:B4:F8:F8:54:05:A5:9F:11:3A:FC:9A:5F:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1B6B35D7C1D2EEC19540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.70.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1b:6b:35:d7:c1:d2:ee:c1:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=55bafd14-ba68-4d0d-9725-e65e79bb246c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:47:83:56:40:f6:c3:d5:70:67:92:34:3f: 85:f5:99:5a:9f:c9:55:a6:f6:0d:ea:79:63:c3:9c: c8:7f:0d:8d:7a:b1:ec:ca:8f:b1:5a:8b:80:26:7a: 0e:62:7c:55:09:8a:93:03:63:f8:1d:f4:57:41:bb: de:2a:02:f5:e7:c5:24:a9:52:d5:28:9a:48:32:e5: c5:8a:3e:01:8f:0f:62:f3:ed:c7:02:58:75:6c:25: de:ac:8d:2b:f8:0e:dd:c6:91:e4:74:20:b2:26:fa: 1a:6a:53:58:29:6b:c2:53:01:fe:d2:d0:bd:c1:a6: b1:e6:99:06:23:8f:aa:59:79:9f:cd:4e:c1:c1:94: 3c:fc:f4:c0:35:7b:a0:ef:ef:e4:fc:49:08:25:3a: f6:09:68:5e:6c:a9:87:7e:29:a5:73:08:2a:e8:2a: cc:1e:a0:76:81:8d:d5:6a:18:06:7e:d6:37:dc:e9: fb:10:c8:28:08:b7:32:77:87:2b:68:b7:52:06:65: 76:6d:d4:ce:50:29:a9:31:6f:13:0b:33:7c:95:96: bf:9e:1d:c1:96:81:db:73:5d:dd:58:72:a1:0c:1b: de:33:f3:b1:71:cf:34:d3:fb:b1:d8:1f:f7:0c:4e: 91:70:4e:14:a0:13:32:56:72:f6:e0:5e:87:e5:85: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A9:67:AD:78:B6:4E:B4:F8:F8:54:05:A5:9F:11:3A:FC:9A:5F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b75554-dd7a-35aa-a9d3-bf44c3512c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5a:26:5f:9a:9a:2f:ea:af:67:86:fa:88:b2:2a:83:45:6b: 88:0f:04:16:86:aa:d7:46:86:35:67:4f:31:3f:98:8a:93:61: 81:0c:ce:f9:11:36:99:60:f8:39:3a:fc:43:6e:9d:9f:24:6e: ad:3e:be:f0:56:06:7e:b9:d6:03:00:37:92:3e:4a:90:a8:70: a4:ae:3d:0b:88:33:85:f8:90:3a:6f:f4:2f:6b:cb:67:55:7f: 15:0d:04:b9:f2:43:e3:8d:80:1e:79:44:23:2e:85:6c:ed:c0: 76:4c:75:ad:1f:e2:f1:6c:e2:a0:72:c2:1a:42:f0:61:5c:0d: 8b:36:70:d2:cc:8c:1e:81:98:11:14:09:bd:77:e8:b9:b3:e0: 35:82:95:e6:37:06:37:b3:20:cc:b5:12:1e:ff:65:35:22:ec: e0:3b:46:97:48:ec:68:9a:72:9c:f2:3c:15:98:70:fe:3c:c8: 17:63:77:f6:3a:23:42:5c:25:0e:7d:9a:68:7d:b1:25:78:f0: 8c:9f:b3:60:c7:05:60:fa:61:13:aa:a4:ae:3e:c9:36:be:da: 53:1e:d2:80:05:80:a5:3a:3b:28:fe:c7:fc:24:4d:35:8c:a2: b4:93:95:5d:17:85:4a:de:13:e1:8f:3b:f5:2f:a7:61:df:f6: dc:a6:71:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBtrNdfB0u7BlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTViYWZkMTQtYmE2OC00ZDBkLTk3MjUtZTY1ZTc5YmIyNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNxHg1ZA9sPVcGeSND+F9Zlan8lVpvYN6nlj w5zIfw2NerHsyo+xWouAJnoOYnxVCYqTA2P4HfRXQbveKgL158UkqVLVKJpIMuXF ij4Bjw9i8+3HAlh1bCXerI0r+A7dxpHkdCCyJvoaalNYKWvCUwH+0tC9waax5pkG I4+qWXmfzU7BwZQ8/PTANXug7+/k/EkIJTr2CWhebKmHfimlcwgq6CrMHqB2gY3V ahgGftY33On7EMgoCLcyd4craLdSBmV2bdTOUCmpMW8TCzN8lZa/nh3BloHbc13d WHKhDBveM/Oxcc800/ux2B/3DE6RcE4UoBMyVnL24F6H5YVKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPepZ614tk60+PhUBaWfETr8ml/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTViNzU1NTQtZGQ3YS0z NWFhLWE5ZDMtYmY0NGMzNTEyYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5aJl+ami/qr2eG+oiyKoNFa4gPBBaGqtdGhjVnTzE/mIqTYYEMzvkR Nplg+Dk6/ENunZ8kbq0+vvBWBn651gMAN5I+SpCocKSuPQuIM4X4kDpv9C9ry2dV fxUNBLnyQ+ONgB55RCMuhWztwHZMda0f4vFs4qBywhpC8GFcDYs2cNLMjB6BmBEU Cb136Lmz4DWCleY3BjezIMy1Eh7/ZTUi7OA7RpdI7GiacpzyPBWYcP48yBdjd/Y6 I0JcJQ59mmh9sSV48Iyfs2DHBWD6YROqpK4+yTa+2lMe0oAFgKU6Oyj+x/wkTTWM orSTlV0XhUreE+GPO/Uvp2Hf9tymcX0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:34 2025 by rpki-client