$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b62335c5-36d6-37a3-85d0-8e0ada5b5e3a.roa File: b62335c5-36d6-37a3-85d0-8e0ada5b5e3a.roa (raw, json) Hash identifier: pUOu/g8psuQczgeZIS8zyWq3QeBdlWsGSLNvkdeVUcw= Subject key identifier: F0:93:77:96:ED:03:A0:50:96:C6:4E:CC:FF:57:97:99:F6:55:0E:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5816CDEA3E16A24E8411740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b62335c5-36d6-37a3-85d0-8e0ada5b5e3a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.101.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6c:de:a3:e1:6a:24:e8:41:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1dd3ef40-7d00-4c8a-8ddb-4f1eb3e7d9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:17:4d:17:32:c3:bd:4b:5b:57:2f:7b:55: 7a:5c:43:98:eb:35:50:4e:3d:44:2b:c7:4c:ac:36: 22:e6:73:2c:0b:c6:1c:fb:f9:ab:23:c5:a9:0f:ff: 2e:a9:bc:e4:41:c4:88:bb:14:85:0f:c5:40:db:22: 5b:a8:81:78:82:a8:c1:7f:bb:c4:63:74:cc:2a:57: 8b:11:43:fe:2f:d9:69:f7:2d:70:a6:2a:a0:bc:de: d1:af:d4:88:6a:97:fe:4e:9d:df:9a:84:14:aa:1e: d3:9c:58:45:76:b3:c8:88:68:18:81:db:41:06:d7: fe:1f:15:0d:05:ba:32:81:3f:6e:16:32:68:3d:37: 30:46:4e:87:c3:a7:7f:78:aa:db:70:85:77:e9:f0: a9:0a:77:39:cd:46:57:3f:ff:5c:7a:ac:df:31:d3: 34:78:d8:70:69:c5:9d:49:68:97:95:82:ec:f9:54: f8:53:2a:37:32:f6:3e:16:7b:05:85:48:07:17:8c: 24:48:2c:5e:79:d8:21:68:20:b4:77:ad:e5:a2:75: f1:47:50:11:87:7e:92:c7:9f:63:00:17:0c:02:5f: fc:47:7d:57:36:97:8e:62:d4:61:e2:b0:d4:74:4f: bb:35:32:21:a9:7e:a7:d0:56:71:b7:7e:e7:96:f5: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:93:77:96:ED:03:A0:50:96:C6:4E:CC:FF:57:97:99:F6:55:0E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b62335c5-36d6-37a3-85d0-8e0ada5b5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6e:4d:6e:0d:f6:2c:9a:b5:f4:6a:d3:4e:de:1c:7b:91:b5: a9:63:e9:6c:71:9c:46:54:50:7f:f4:7a:30:5f:76:8c:b6:a4: 8c:ca:b4:0b:38:56:73:ea:66:6b:ca:d8:9c:30:07:09:f4:c1: 7e:30:56:93:79:99:48:1d:23:ea:ee:f0:23:7d:36:a5:8e:34: c6:c6:63:40:a2:28:53:b5:a6:30:63:44:0d:db:28:a9:58:ee: 0d:7d:77:be:9b:ff:95:a2:68:ed:11:7e:e9:47:fa:6a:a1:c6: 04:31:06:6d:d3:77:18:dc:15:c1:f5:e7:2f:42:de:ad:f4:d0: 00:a4:b5:d4:01:51:4a:9b:ea:56:ee:35:e6:a5:5d:a7:d5:81: a1:a2:a7:11:9f:f3:bc:86:bf:91:38:6c:65:d3:cd:68:1e:d6: c3:15:81:2f:8e:ea:cf:38:88:82:fb:87:d0:7f:53:33:79:f8: 61:ea:1e:69:57:39:2c:e4:64:0f:61:4b:bf:6f:d4:3d:1d:22: 21:48:f2:ab:11:ef:8b:61:d6:48:59:67:6c:06:1d:72:d5:c2: 96:85:2b:ae:e3:5a:51:8c:bf:29:bd:66:10:5d:fb:8d:4c:9a: 16:a3:3e:94:e1:92:4b:d7:e8:f7:91:8a:90:d6:c9:85:a7:45: 02:74:30:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWzeo+FqJOhBF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWRkM2VmNDAtN2QwMC00YzhhLThkZGItNGYxZWIzZTdkOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTcXTRcyw71LW1cve1V6XEOY6zVQTj1EK8dM rDYi5nMsC8Yc+/mrI8WpD/8uqbzkQcSIuxSFD8VA2yJbqIF4gqjBf7vEY3TMKleL EUP+L9lp9y1wpiqgvN7Rr9SIapf+Tp3fmoQUqh7TnFhFdrPIiGgYgdtBBtf+HxUN BboygT9uFjJoPTcwRk6Hw6d/eKrbcIV36fCpCnc5zUZXP/9ceqzfMdM0eNhwacWd SWiXlYLs+VT4Uyo3MvY+FnsFhUgHF4wkSCxeedghaCC0d63lonXxR1ARh36Sx59j ABcMAl/8R31XNpeOYtRh4rDUdE+7NTIhqX6n0FZxt37nlvVqcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCTd5btA6BQlsZOzP9Xl5n2VQ4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjYyMzM1YzUtMzZkNi0z N2EzLTg1ZDAtOGUwYWRhNWI1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFuTW4N9iyatfRq007eHHuRtalj6WxxnEZUUH/0ejBfdoy2pIzKtAs4 VnPqZmvK2JwwBwn0wX4wVpN5mUgdI+ru8CN9NqWONMbGY0CiKFO1pjBjRA3bKKlY 7g19d76b/5WiaO0RfulH+mqhxgQxBm3TdxjcFcH15y9C3q300ACktdQBUUqb6lbu NealXafVgaGipxGf87yGv5E4bGXTzWge1sMVgS+O6s84iIL7h9B/UzN5+GHqHmlX OSzkZA9hS79v1D0dIiFI8qsR74th1khZZ2wGHXLVwpaFK67jWlGMvym9ZhBd+41M mhajPpThkkvX6PeRipDWyYWnRQJ0MMQ= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:35 2025 by rpki-client