$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa File: afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa (raw, json) Hash identifier: nUk66SNSBAzabcJ8vsjeRUeWYbQ39N+af3Hx5yQXDwU= Subject key identifier: 6F:47:64:E2:BE:9C:F9:47:F9:81:37:0C:13:EE:BC:0E:96:92:B0:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB5A0639BAED2003670E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.77.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b5:a0:63:9b:ae:d2:00:36:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7b9ee859-590d-40a7-bdb5-83ade84a1e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:9d:70:60:b3:0e:df:41:44:24:3f:f6:80: 26:34:5e:7a:fd:1c:7d:b4:60:63:10:b8:94:ef:f3: 42:0c:1e:5b:09:c7:c6:7e:2d:3a:d2:f8:b8:dd:8d: ae:b7:f5:77:28:34:7d:fb:82:75:e0:df:53:c8:f4: 5a:c3:b4:7d:a6:10:0d:ab:dd:41:cf:d5:f6:3e:f5: de:7e:fa:5f:2f:e4:5a:d7:75:a8:56:12:cc:5e:18: 72:d9:77:56:8d:e5:c2:a8:13:91:29:da:a9:1e:57: 56:29:46:8d:7c:f7:c5:36:57:c6:1b:dd:af:91:c3: 5d:48:55:50:42:18:6f:40:7b:53:21:26:39:e5:e9: cd:4c:fd:17:b6:e5:58:65:3e:0b:e2:32:c5:bd:0e: 31:b0:cb:c1:7c:e7:95:b5:18:1b:1e:41:98:d9:a9: d6:eb:12:f5:66:c9:9e:78:43:dd:5f:60:46:22:00: ce:8d:f1:00:99:20:4d:5f:64:0b:3d:1a:40:31:e4: ad:4a:43:be:4f:dd:3b:4b:4c:f8:be:56:d0:44:b1: c3:47:63:d9:f6:b1:9c:df:80:50:60:de:80:10:4b: 84:cf:02:6f:0b:6a:03:1a:3a:6c:79:31:c0:50:32: 6c:7a:57:c7:d5:94:f7:53:e0:93:1a:54:aa:bf:61: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:47:64:E2:BE:9C:F9:47:F9:81:37:0C:13:EE:BC:0E:96:92:B0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afc4f3c4-4148-3bd0-8aea-70537bfe77d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.77.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5b:54:54:1c:7f:fc:8b:00:19:4b:52:27:79:39:7f:74:d5: da:00:18:99:18:2b:a0:cf:b1:3e:62:0f:eb:e3:c7:c2:3a:a7: 80:c8:08:53:9d:77:79:62:1a:32:f6:ef:f2:3d:17:e6:6e:83: 02:bb:1f:96:00:1a:9b:5f:5a:bb:aa:27:d2:27:df:55:9d:5b: 82:20:9a:1f:dd:79:f6:49:b1:bb:15:87:cf:46:34:64:64:60: 00:95:c0:91:c3:99:0b:9d:5a:14:b7:08:0e:dd:05:d0:50:e0: 59:43:a9:ed:5e:96:d8:2a:04:81:8b:01:6c:dc:5b:13:e0:b7: 1b:55:3d:70:c3:9d:18:df:99:a8:b0:f3:6f:38:a5:09:d9:22: 36:73:18:a7:7c:61:cd:61:46:5a:93:cf:73:ba:06:be:99:5f: f5:6b:65:79:d1:08:59:cb:08:7f:a0:cc:35:e6:41:54:69:b1: 1c:e3:fa:ea:0e:00:a3:76:97:e6:57:df:f6:a9:b8:62:be:d8: 34:d2:a5:4a:ed:44:dc:ae:bf:0d:40:63:cf:8e:2d:10:04:27: 34:ca:d1:5b:1e:40:d2:3a:9f:eb:3f:a9:17:ec:94:7a:e8:20: ce:05:b7:72:55:30:da:d2:23:91:e4:1c:41:ab:ab:e0:b2:0b: d3:0c:d4:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7WgY5uu0gA2cOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk N2I5ZWU4NTktNTkwZC00MGE3LWJkYjUtODNhZGU4NGExZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteadcGCzDt9BRCQ/9oAmNF56/Rx9tGBjELiU 7/NCDB5bCcfGfi060vi43Y2ut/V3KDR9+4J14N9TyPRaw7R9phANq91Bz9X2PvXe fvpfL+Ra13WoVhLMXhhy2XdWjeXCqBORKdqpHldWKUaNfPfFNlfGG92vkcNdSFVQ QhhvQHtTISY55enNTP0XtuVYZT4L4jLFvQ4xsMvBfOeVtRgbHkGY2anW6xL1Zsme eEPdX2BGIgDOjfEAmSBNX2QLPRpAMeStSkO+T907S0z4vlbQRLHDR2PZ9rGc34BQ YN6AEEuEzwJvC2oDGjpseTHAUDJselfH1ZT3U+CTGlSqv2FgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9HZOK+nPlH+YE3DBPuvA6WkrCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZjNGYzYzQtNDE0OC0z YmQwLThhZWEtNzA1MzdiZmU3N2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFbVFQcf/yLABlLUid5OX901doAGJkYK6DPsT5iD+vjx8I6p4DICFOd d3liGjL27/I9F+ZugwK7H5YAGptfWruqJ9In31WdW4Igmh/defZJsbsVh89GNGRk YACVwJHDmQudWhS3CA7dBdBQ4FlDqe1eltgqBIGLAWzcWxPgtxtVPXDDnRjfmaiw 8284pQnZIjZzGKd8Yc1hRlqTz3O6Br6ZX/VrZXnRCFnLCH+gzDXmQVRpsRzj+uoO AKN2l+ZX3/apuGK+2DTSpUrtRNyuvw1AY8+OLRAEJzTK0VseQNI6n+s/qRfslHro IM4Ft3JVMNrSI5HkHEGrq+CyC9MM1Fs= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:54 2025 by rpki-client