$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa File: af01f159-d206-33a9-96fa-e15512e82350.roa (raw, json) Hash identifier: nvPFupNQeEKcUYnFMornaqwvcuRzMCc6qQUfzF3jQPk= Subject key identifier: 03:CF:AB:31:33:02:55:9B:1B:EE:30:EB:4C:53:7B:E8:C4:F0:56:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD7A175B3A9528FDFC740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.68.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d7:a1:75:b3:a9:52:8f:df:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=37f6150b-4eb0-4dfc-9631-49c3ae0d2022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:ba:da:33:f3:57:1d:5f:3d:ef:67:78:20: f4:fa:d4:c1:43:31:d8:c4:90:42:f1:3d:4d:9d:f0: 97:30:65:00:7c:8b:28:a4:c5:72:57:1c:c4:c6:32: dc:10:76:6f:20:38:db:ca:41:11:22:56:86:c0:41: 59:21:f6:50:9a:5d:fa:27:5b:69:b8:37:9c:01:ed: d3:1c:5a:4a:eb:a7:ff:86:12:bb:45:ba:e4:95:35: 81:b6:e9:2d:d2:6b:8b:b0:bb:30:5f:8b:4e:92:32: 73:d3:32:9d:c6:70:7c:55:ea:75:e0:c9:c3:84:f9: 8c:c0:19:07:96:bb:9c:58:84:88:ac:b3:ee:1c:2b: 02:8f:49:66:55:a3:14:bc:1d:8e:8d:e6:3d:27:9a: a9:ef:ab:9d:f7:e2:4d:ee:df:f7:d7:81:52:f5:13: d3:fb:b9:6d:d7:6c:70:00:a7:cd:c7:80:72:bb:d6: be:98:b8:fd:54:1a:d4:ee:5f:e7:17:ee:5a:5d:30: 8c:a4:65:78:9e:37:4d:5d:b1:dd:12:2a:43:fa:79: 0d:ab:ad:15:3e:c8:b9:14:f5:f3:9e:aa:08:d9:77: 60:14:f3:c1:3d:c4:70:bd:2e:6a:58:f6:51:b8:4a: 97:da:41:0d:21:30:29:2e:db:d6:0b:14:c8:d1:f4: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:AB:31:33:02:55:9B:1B:EE:30:EB:4C:53:7B:E8:C4:F0:56:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af01f159-d206-33a9-96fa-e15512e82350.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:33:1f:5e:3d:17:ca:09:0a:60:d5:13:64:eb:91:b3:2e:f8: 77:ec:61:27:e0:51:8b:4b:1d:4e:b4:29:db:ae:d5:42:2d:05: 52:03:42:c4:05:4a:4b:e9:ca:2e:36:a9:08:5f:10:87:59:74: b7:1c:f5:e5:58:bd:34:c3:e4:6a:c1:22:1f:af:62:b6:ea:ee: e5:bc:a6:49:83:97:c2:d9:06:c5:f0:e5:64:97:f2:67:b0:bb: fe:4e:c2:6c:91:57:5b:39:b0:7c:83:f4:c0:59:22:1f:1c:bf: af:2d:00:db:87:3e:75:49:24:53:14:13:63:d4:2e:31:63:7a: 29:46:bb:cf:92:ca:ce:f6:46:72:3c:6f:03:3a:d0:3d:3b:69: ee:16:46:2c:df:34:4a:dd:bd:3d:d4:df:71:78:d6:83:c9:dc: f0:02:0c:90:da:e1:57:6f:a2:48:47:bb:40:92:b1:e2:98:1a: f2:6f:fc:4f:43:83:cc:23:24:de:a2:26:1f:f9:27:75:8b:70: a9:3b:2a:8e:8f:7e:f2:d7:39:ae:e4:94:cb:9e:6d:42:3d:36: b1:ac:64:8a:86:c9:7a:ec:0b:7f:c9:8f:9d:eb:ec:91:9a:fc: 65:70:84:cb:58:d1:b9:8a:2f:5b:9d:df:50:58:d6:6a:90:f0: cc:7d:65:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9ehdbOpUo/fx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MzdmNjE1MGItNGViMC00ZGZjLTk2MzEtNDljM2FlMGQyMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc+62jPzVx1fPe9neCD0+tTBQzHYxJBC8T1N nfCXMGUAfIsopMVyVxzExjLcEHZvIDjbykERIlaGwEFZIfZQml36J1tpuDecAe3T HFpK66f/hhK7RbrklTWBtukt0muLsLswX4tOkjJz0zKdxnB8Vep14MnDhPmMwBkH lrucWISIrLPuHCsCj0lmVaMUvB2OjeY9J5qp76ud9+JN7t/314FS9RPT+7lt12xw AKfNx4Byu9a+mLj9VBrU7l/nF+5aXTCMpGV4njdNXbHdEipD+nkNq60VPsi5FPXz nqoI2XdgFPPBPcRwvS5qWPZRuEqX2kENITApLtvWCxTI0fTs6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPPqzEzAlWbG+4w60xTe+jE8FY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWYwMWYxNTktZDIwNi0z M2E5LTk2ZmEtZTE1NTEyZTgyMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgzH149F8oJCmDVE2TrkbMu+HfsYSfgUYtLHU60Kduu1UItBVIDQsQF Skvpyi42qQhfEIdZdLcc9eVYvTTD5GrBIh+vYrbq7uW8pkmDl8LZBsXw5WSX8mew u/5OwmyRV1s5sHyD9MBZIh8cv68tANuHPnVJJFMUE2PULjFjeilGu8+Sys72RnI8 bwM60D07ae4WRizfNErdvT3U33F41oPJ3PACDJDa4VdvokhHu0CSseKYGvJv/E9D g8wjJN6iJh/5J3WLcKk7Ko6PfvLXOa7klMuebUI9NrGsZIqGyXrsC3/Jj53r7JGa /GVwhMtY0bmKL1ud31BY1mqQ8Mx9Zc4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:08 2025 by rpki-client