$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa File: b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa (raw, json) Hash identifier: TUxsGDH1gJ4jH9SZTNugmTW1+V8ZayHyULB8j/lC3PA= Subject key identifier: 4E:95:D2:D6:74:D2:B3:B8:75:63:8B:BD:82:F2:B7:E7:AF:E6:B3:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5817AC58170BE02E4E6D3E5 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.120.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7a:c5:81:70:be:02:e4:e6:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a0060e8d-6ba9-4e12-b967-076347df4e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:ab:2f:6c:79:8a:07:18:5c:ce:91:64:a8: ef:f4:ff:f5:2d:52:32:bc:96:3d:74:1e:a6:e3:be: d8:80:80:d0:57:b1:e2:de:3d:e9:1e:05:62:67:71: 45:5c:1e:e6:b6:82:f1:b0:e4:6d:16:5d:e2:88:eb: 50:01:b2:7a:f4:2b:14:4b:6c:98:74:fd:c2:80:d0: c7:c2:98:98:8b:e1:29:9e:5f:46:fc:a9:2b:c4:a6: eb:74:79:0e:b2:0d:38:13:5a:f6:d1:0c:33:c6:51: 60:57:37:3a:34:57:11:44:c9:55:0b:94:55:57:09: c0:2d:57:b4:3c:f4:e8:ad:53:ef:ed:47:74:32:5b: 35:8a:22:ec:a5:aa:f5:74:3b:8e:5a:d4:9c:83:3d: 53:ef:52:49:88:9d:70:da:e6:e0:f6:9a:bc:6a:04: a5:25:b8:13:54:bb:23:f1:ac:bd:86:3b:c0:87:1d: 88:af:86:2b:e0:13:97:93:ca:51:0d:28:9a:c8:c0: f0:98:a9:b1:2c:ef:32:45:59:28:1b:31:d7:c5:e7: e7:ab:54:29:cd:46:bc:f2:43:2b:5f:71:07:c8:6f: d3:1f:c5:f9:22:b8:5a:ab:be:ac:f9:e0:ed:32:99: 2a:31:05:65:38:fa:6c:01:ba:a0:ed:ee:6d:de:ae: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:D2:D6:74:D2:B3:B8:75:63:8B:BD:82:F2:B7:E7:AF:E6:B3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b39385ed-2b52-39e5-9e7e-d4bfa56a6be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.120.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1d:56:f1:5e:76:5a:cb:21:ff:0a:c9:d2:e6:b2:66:24:6a: 3a:77:11:25:f5:c4:84:cf:ed:10:67:3d:d8:18:3b:34:19:2c: 70:61:9c:e2:d7:cb:4d:98:60:6c:e5:08:1c:65:b3:2c:3b:4e: 02:c5:64:de:b9:5c:cf:b9:48:b7:c8:6e:d6:6c:de:be:7e:cb: 34:58:ab:b4:8b:95:04:c3:a3:ce:7f:7b:d8:6e:b9:74:94:63: c7:30:cb:36:13:2a:c0:e6:c0:5f:d3:41:6a:06:ef:55:b5:d6: 68:91:17:1b:81:d2:b2:f8:7c:cd:af:c8:87:a5:9e:f1:54:c8: 73:57:21:8b:a4:0a:c7:a0:ef:86:8c:e4:72:50:db:2b:ae:af: d1:7c:78:1a:c5:1c:aa:dc:b7:d4:a1:8c:d4:ed:88:f2:ab:e6: 27:4d:0c:3f:7c:c5:a1:12:11:5a:cd:b4:2e:b7:34:4d:f0:97: 9e:13:02:66:2b:cf:e3:4b:22:44:17:0d:bb:71:da:60:31:00: a0:35:6a:b1:2f:af:9e:6f:ca:d8:bd:db:d8:a9:d5:28:75:7f: eb:fa:c4:f8:7f:d9:ce:a1:7b:a4:81:1b:5a:f0:6a:25:d9:1b: 39:9e:67:1a:bc:97:7b:0c:35:1a:b4:2b:75:be:34:06:e6:64: 88:34:40:ff -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjFgXrFgXC+AuTm0+UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTAwNjBlOGQtNmJhOS00ZTEyLWI5NjctMDc2MzQ3ZGY0ZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgySrL2x5igcYXM6RZKjv9P/1LVIyvJY9dB6m 477YgIDQV7Hi3j3pHgViZ3FFXB7mtoLxsORtFl3iiOtQAbJ69CsUS2yYdP3CgNDH wpiYi+Epnl9G/KkrxKbrdHkOsg04E1r20QwzxlFgVzc6NFcRRMlVC5RVVwnALVe0 PPTorVPv7Ud0Mls1iiLspar1dDuOWtScgz1T71JJiJ1w2ubg9pq8agSlJbgTVLsj 8ay9hjvAhx2Ir4Yr4BOXk8pRDSiayMDwmKmxLO8yRVkoGzHXxefnq1QpzUa88kMr X3EHyG/TH8X5Irhaq76s+eDtMpkqMQVlOPpsAbqg7e5t3q67ZQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE6V0tZ00rO4dWOLvYLyt+ev5rNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjM5Mzg1ZWQtMmI1Mi0z OWU1LTllN2UtZDRiZmE1NmE2YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIngwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMh1W8V52Wssh/wrJ0uayZiRqOncRJfXEhM/tEGc92Bg7NBkscGGc4tfL TZhgbOUIHGWzLDtOAsVk3rlcz7lIt8hu1mzevn7LNFirtIuVBMOjzn972G65dJRj xzDLNhMqwObAX9NBagbvVbXWaJEXG4HSsvh8za/Ih6We8VTIc1chi6QKx6Dvhozk clDbK66v0Xx4GsUcqty31KGM1O2I8qvmJ00MP3zFoRIRWs20Lrc0TfCXnhMCZivP 40siRBcNu3HaYDEAoDVqsS+vnm/K2L3b2KnVKHV/6/rE+H/ZzqF7pIEbWvBqJdkb OZ5nGryXeww1GrQrdb40BuZkiDRA/w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:59 2025 by rpki-client