$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa File: aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa (raw, json) Hash identifier: fhWBS+eImTKhNFTjioWjZYkvdI/0N8bGBlMHuzgT0oA= Subject key identifier: 42:E7:4D:CA:B3:51:9A:DF:F6:60:31:E0:10:38:D8:56:DC:22:6B:5B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD27262BF29E2E1B50500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.66.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d2:72:62:bf:29:e2:e1:b5:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4f28cc68-d786-4a03-a8a3-58839a0e8354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:e4:c0:b3:ae:5f:cf:17:5b:60:39:01:c5: 29:76:02:3b:e9:72:d4:56:30:42:1e:f0:9a:99:fd: b9:51:26:3e:91:c7:93:a4:59:fc:2d:78:10:c3:9f: 0e:41:28:93:31:b3:df:43:b6:fc:d8:8e:4c:ea:67: 4d:ac:3e:49:12:35:5f:57:3b:af:b1:39:d3:89:4a: df:68:04:11:d4:d6:84:a0:b1:e7:4a:81:37:52:5d: 6a:3b:9b:d8:ed:8f:55:8f:6b:de:67:27:e8:9d:f5: e3:c3:6d:09:05:8d:57:bc:b7:4b:c3:83:04:38:7c: 81:30:0f:d8:d9:27:03:5c:9f:f7:b4:77:f7:cf:15: 7e:29:6f:93:8d:a4:f3:c1:23:36:77:cb:44:4d:3d: 30:45:e3:19:ee:58:e0:a3:43:6f:e5:ff:03:12:f8: 96:12:70:b9:7b:ee:90:a1:42:bf:3e:12:d0:8d:d8: c0:2f:d7:74:5e:2e:04:be:21:90:ee:a4:f7:36:4e: 93:3d:f5:be:eb:7e:ca:fc:ed:49:f6:16:82:12:b3: d8:1c:8f:41:d5:55:30:bf:94:83:90:69:37:f0:ee: 84:07:fb:1f:92:47:df:43:32:4e:d6:da:90:c7:c9: f1:48:18:51:c4:4a:fa:62:b4:07:97:15:2b:c0:13: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:4D:CA:B3:51:9A:DF:F6:60:31:E0:10:38:D8:56:DC:22:6B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa3f728c-2b5f-33cc-a786-f5a9333aca0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e8:82:2a:7e:cb:e2:5e:f4:39:eb:2d:d2:85:a1:b5:e6:86: 3b:ca:f2:3e:aa:7a:b1:e2:55:0f:d2:ec:02:c8:80:1b:6f:74: b3:3e:ea:07:5e:99:22:21:95:c3:77:62:af:65:23:aa:79:4b: 94:33:2c:bd:81:45:74:6c:91:df:4a:bb:5b:c7:2f:22:b0:2d: 32:c1:0c:ee:95:ca:d8:e6:24:98:9b:fc:85:e3:c9:91:cd:42: 1c:72:fa:3f:35:cd:c1:d6:36:61:11:0c:b7:f3:24:57:5c:05: c5:69:e0:15:dc:f8:0c:f9:cd:20:d3:da:a6:d3:92:9b:5a:73: 31:c5:5a:e7:c6:d9:2e:2d:e8:ff:88:73:02:1f:96:c1:9d:f5: d2:cb:b3:ce:83:06:5a:ab:0a:b5:b9:b4:86:20:b7:cf:bf:a0: ed:ad:55:2b:50:15:b8:a2:66:a8:a2:5a:a9:d6:40:bd:5c:5a: 04:41:8c:29:46:73:d4:22:4c:f3:e9:79:ea:4f:31:96:e1:45: f1:01:30:38:5d:97:ce:48:45:cc:ff:da:2d:aa:8c:13:9f:fe: 33:0a:88:69:cb:21:9a:c7:1b:c1:31:ed:67:82:94:55:0e:96: 5c:db:ac:8a:7b:14:ba:d1:bf:53:f0:57:e4:84:0b:a0:74:97: fc:96:f5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9JyYr8p4uG1BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGYyOGNjNjgtZDc4Ni00YTAzLWE4YTMtNTg4MzlhMGU4MzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKbkwLOuX88XW2A5AcUpdgI76XLUVjBCHvCa mf25USY+kceTpFn8LXgQw58OQSiTMbPfQ7b82I5M6mdNrD5JEjVfVzuvsTnTiUrf aAQR1NaEoLHnSoE3Ul1qO5vY7Y9Vj2veZyfonfXjw20JBY1XvLdLw4MEOHyBMA/Y 2ScDXJ/3tHf3zxV+KW+TjaTzwSM2d8tETT0wReMZ7ljgo0Nv5f8DEviWEnC5e+6Q oUK/PhLQjdjAL9d0Xi4EviGQ7qT3Nk6TPfW+637K/O1J9haCErPYHI9B1VUwv5SD kGk38O6EB/sfkkffQzJO1tqQx8nxSBhRxEr6YrQHlxUrwBOLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELnTcqzUZrf9mAx4BA42FbcImtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzZjcyOGMtMmI1Zi0z M2NjLWE3ODYtZjVhOTMzM2FjYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHogip+y+Je9DnrLdKFobXmhjvK8j6qerHiVQ/S7ALIgBtvdLM+6gde mSIhlcN3Yq9lI6p5S5QzLL2BRXRskd9Ku1vHLyKwLTLBDO6VytjmJJib/IXjyZHN Qhxy+j81zcHWNmERDLfzJFdcBcVp4BXc+Az5zSDT2qbTkptaczHFWufG2S4t6P+I cwIflsGd9dLLs86DBlqrCrW5tIYgt8+/oO2tVStQFbiiZqiiWqnWQL1cWgRBjClG c9QiTPPpeepPMZbhRfEBMDhdl85IRcz/2i2qjBOf/jMKiGnLIZrHG8Ex7WeClFUO llzbrIp7FLrRv1PwV+SEC6B0l/yW9ek= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:47 2025 by rpki-client