$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9ce23d3-552a-3c36-98f0-9e2debb838d2.roa File: a9ce23d3-552a-3c36-98f0-9e2debb838d2.roa (raw, json) Hash identifier: Dmaz+ZShxSxsqRqX+q+UPrfnmDwcT3jyiQcN446Gybo= Subject key identifier: 20:2F:4B:C4:DC:0A:B7:BA:75:24:4C:66:0D:2E:0E:82:3F:5A:57:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA5782DD259B2AF2FF900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9ce23d3-552a-3c36-98f0-9e2debb838d2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.99.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a5:78:2d:d2:59:b2:af:2f:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6204fba4-9082-40ee-9f74-e0125352f789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:8c:3d:e0:e0:9a:d0:f4:62:1c:9c:97:f8: 8f:e4:ee:a1:55:71:e8:92:c0:fc:56:7f:27:d1:18: 1a:02:6f:98:5a:31:2a:1b:d3:6a:2d:7c:95:a1:3e: 8a:70:6a:61:8c:13:c3:87:a1:90:af:01:3d:8f:93: 0d:16:79:7c:55:0b:9a:b0:b0:35:84:b4:b4:fa:df: d9:b9:3c:6a:53:7f:09:0b:1e:45:66:90:4b:a4:af: 11:96:c5:c5:e0:2d:02:bc:2f:23:ac:5e:bb:cc:bf: 8e:cb:38:bd:f6:41:84:d8:b9:11:95:11:01:2d:52: 3e:ab:75:d2:a4:33:63:4a:e9:30:25:9b:39:85:da: 70:f2:bf:9e:b9:c0:70:e3:2b:7c:7b:70:f4:7b:a7: 79:7d:c9:27:63:88:6d:ce:28:26:b3:1e:d6:2c:b9: 21:9f:42:59:c6:a3:37:45:20:41:d2:fb:d4:c9:94: de:cb:f5:ac:98:44:ce:dd:32:d9:b7:d1:03:e9:5c: 12:96:ee:b3:63:b2:8c:6f:ee:09:16:a4:5b:ce:ad: 83:77:c0:1f:aa:12:06:33:91:e5:e3:42:9d:63:e3: 2f:53:fe:32:c6:9e:9a:78:02:5f:7d:de:60:1c:b4: 4a:ab:be:56:1e:0a:ea:8c:86:50:a8:1f:7b:77:a3: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2F:4B:C4:DC:0A:B7:BA:75:24:4C:66:0D:2E:0E:82:3F:5A:57:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a9ce23d3-552a-3c36-98f0-9e2debb838d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9a:22:e8:4d:78:7b:85:dc:ef:e0:60:5c:1d:4e:f8:22:84: ef:a0:20:7f:a4:19:77:a8:55:67:4b:c4:98:90:da:09:53:f9: 0e:68:de:57:fa:9a:b3:ce:3e:5f:51:3a:3d:f2:04:27:1e:b0: e6:31:21:38:3e:a6:65:b8:f0:c0:ac:3a:0e:04:76:dd:1e:7f: fe:a2:ac:cf:5c:3f:cf:9d:10:a8:56:95:01:54:1c:ac:d1:ef: 46:57:f0:18:9d:cc:34:2f:48:7b:7c:bd:52:1c:41:1d:20:15: e1:28:19:e9:90:e0:62:e5:f7:99:3a:36:7f:06:e8:17:4d:d2: 07:ac:7f:b1:d4:c4:00:fe:3e:37:35:67:39:87:9a:78:de:81: a6:16:2c:80:7f:d6:f9:13:5c:01:55:5b:56:80:89:da:33:6d: 8f:11:11:11:82:e5:fa:83:4c:aa:3a:88:fa:21:af:08:5d:a6: 23:87:14:73:8b:ee:13:fc:ca:ed:60:46:fc:f9:94:17:19:1a: f8:25:94:46:db:a7:94:30:f7:a0:fa:98:04:7c:ba:fb:c3:52: ca:fd:2c:73:ed:32:e6:6a:44:96:cb:f9:8e:ea:49:78:a8:bb: 51:ad:5a:f9:34:b3:0a:d9:3e:63:91:d3:65:b6:04:e9:db:85: e7:54:90:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6V4LdJZsq8v+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjIwNGZiYTQtOTA4Mi00MGVlLTlmNzQtZTAxMjUzNTJmNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcKMPeDgmtD0Yhycl/iP5O6hVXHoksD8Vn8n 0RgaAm+YWjEqG9NqLXyVoT6KcGphjBPDh6GQrwE9j5MNFnl8VQuasLA1hLS0+t/Z uTxqU38JCx5FZpBLpK8RlsXF4C0CvC8jrF67zL+Oyzi99kGE2LkRlREBLVI+q3XS pDNjSukwJZs5hdpw8r+eucBw4yt8e3D0e6d5fcknY4htzigmsx7WLLkhn0JZxqM3 RSBB0vvUyZTey/WsmETO3TLZt9ED6VwSlu6zY7KMb+4JFqRbzq2Dd8AfqhIGM5Hl 40KdY+MvU/4yxp6aeAJffd5gHLRKq75WHgrqjIZQqB97d6NsoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAvS8TcCre6dSRMZg0uDoI/WleNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTljZTIzZDMtNTUyYS0z YzM2LTk4ZjAtOWUyZGViYjgzOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiaIuhNeHuF3O/gYFwdTvgihO+gIH+kGXeoVWdLxJiQ2glT+Q5o3lf6 mrPOPl9ROj3yBCcesOYxITg+pmW48MCsOg4Edt0ef/6irM9cP8+dEKhWlQFUHKzR 70ZX8BidzDQvSHt8vVIcQR0gFeEoGemQ4GLl95k6Nn8G6BdN0gesf7HUxAD+Pjc1 ZzmHmnjegaYWLIB/1vkTXAFVW1aAidozbY8RERGC5fqDTKo6iPohrwhdpiOHFHOL 7hP8yu1gRvz5lBcZGvgllEbbp5Qw96D6mAR8uvvDUsr9LHPtMuZqRJbL+Y7qSXio u1GtWvk0swrZPmOR02W2BOnbhedUkCA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:42 2025 by rpki-client