$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc079b21-63f3-3137-b3a6-ae2fed759916.roa File: bc079b21-63f3-3137-b3a6-ae2fed759916.roa (raw, json) Hash identifier: Rcz2DA0RNRUcgk07QmnNxrrjDtWzYj2/m1JSIat39XY= Subject key identifier: 9B:E8:65:E7:B9:B1:D0:28:5C:50:36:3A:55:06:76:8A:8E:51:BB:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C2087D255210F3892A4A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc079b21-63f3-3137-b3a6-ae2fed759916.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.132.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:20:87:d2:55:21:0f:38:92:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=125c8f39-a016-4d1d-8126-a4abcb0a220e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:57:f4:78:97:09:38:d2:68:02:06:bc:64: 47:52:d8:60:88:04:ef:84:60:02:a4:08:4d:d7:4c: 65:f3:07:39:ae:6b:85:54:51:b0:25:d6:af:07:1b: e5:e5:d7:3a:73:f3:ce:29:3d:17:7c:a5:2c:53:1f: 72:be:9e:99:40:d6:b3:72:33:2c:ca:b0:51:d5:2d: 6c:64:ec:4b:4e:ec:1e:6e:9b:e7:12:96:3b:ae:0d: f8:0d:a0:10:ab:d3:18:b9:f8:4e:14:ec:17:08:60: 90:2b:60:b1:26:1e:82:fe:74:87:61:5c:49:24:35: 09:1c:50:36:ac:07:a9:f9:6a:59:1c:f7:32:8e:77: 86:12:05:0a:ab:55:bf:ff:0d:29:c3:49:98:6f:e7: ad:96:ba:c2:ec:db:a8:cb:e9:52:ea:be:a8:d5:03: 3f:b0:ab:55:e6:79:ee:6e:1a:d2:c9:cd:d3:5e:c6: 01:43:a2:e9:f5:7c:e9:50:16:c5:72:e3:d8:8b:23: 2b:a4:0f:89:27:47:56:7a:5b:bb:42:49:9e:42:bf: 16:79:2e:25:ff:f8:b7:50:98:6b:e5:74:44:16:9e: 65:35:86:e7:59:85:ae:76:46:06:7f:53:fd:bb:d1: 26:78:d0:28:09:95:d2:3a:f8:e1:a8:fd:d1:74:23: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E8:65:E7:B9:B1:D0:28:5C:50:36:3A:55:06:76:8A:8E:51:BB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc079b21-63f3-3137-b3a6-ae2fed759916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f9:d5:02:48:ee:70:d3:72:2c:b3:44:01:3f:f2:12:e9:d2: 66:e8:c2:4f:61:38:97:f5:8c:18:78:a4:76:0a:f7:63:04:e0: 2a:bf:87:63:be:34:7e:54:ca:5e:bc:8a:fd:0e:3a:ce:f3:50: cc:a5:27:52:ba:d5:76:46:f9:c7:f7:a4:6d:ce:a0:d7:98:2a: 0f:88:c4:bc:fc:94:c9:89:46:23:3b:d1:76:df:9b:ca:42:04: 85:74:a0:41:fa:5f:7c:e1:94:50:bc:61:f1:32:04:82:14:70: fa:a6:02:47:cd:7e:0a:92:80:cf:9b:97:d8:af:b6:d2:69:ab: 89:bd:c7:94:6d:7a:46:77:b6:4f:b5:dd:e5:25:8d:14:6d:7a: 73:d8:fb:84:55:38:17:d2:0f:53:bb:10:51:89:b1:10:47:b7: a0:64:71:85:31:7a:7e:19:97:60:e1:bd:38:fb:a6:ec:42:b9: 34:a8:b3:99:05:58:4f:f1:60:2c:5c:37:02:b7:ea:c9:07:b6: d5:a5:82:61:c9:f2:c6:04:0d:c6:6a:40:21:32:18:86:8d:d0: c5:51:e6:75:33:bc:82:a8:e4:1e:41:4d:c8:ac:f2:9b:62:ad: 46:24:b5:fb:a2:be:92:14:5e:19:ec:8f:f7:8e:b6:ff:dc:0c: 2c:8a:85:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCCH0lUhDziSpKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTI1YzhmMzktYTAxNi00ZDFkLTgxMjYtYTRhYmNiMGEyMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4hX9HiXCTjSaAIGvGRHUthgiATvhGACpAhN 10xl8wc5rmuFVFGwJdavBxvl5dc6c/POKT0XfKUsUx9yvp6ZQNazcjMsyrBR1S1s ZOxLTuwebpvnEpY7rg34DaAQq9MYufhOFOwXCGCQK2CxJh6C/nSHYVxJJDUJHFA2 rAep+WpZHPcyjneGEgUKq1W//w0pw0mYb+etlrrC7Nuoy+lS6r6o1QM/sKtV5nnu bhrSyc3TXsYBQ6Lp9XzpUBbFcuPYiyMrpA+JJ0dWelu7QkmeQr8WeS4l//i3UJhr 5XREFp5lNYbnWYWudkYGf1P9u9EmeNAoCZXSOvjhqP3RdCMZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvoZee5sdAoXFA2OlUGdoqOUbtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMwNzliMjEtNjNmMy0z MTM3LWIzYTYtYWUyZmVkNzU5OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj51QJI7nDTciyzRAE/8hLp0mbowk9hOJf1jBh4pHYK92ME4Cq/h2O+ NH5Uyl68iv0OOs7zUMylJ1K61XZG+cf3pG3OoNeYKg+IxLz8lMmJRiM70Xbfm8pC BIV0oEH6X3zhlFC8YfEyBIIUcPqmAkfNfgqSgM+bl9ivttJpq4m9x5RtekZ3tk+1 3eUljRRtenPY+4RVOBfSD1O7EFGJsRBHt6BkcYUxen4Zl2DhvTj7puxCuTSos5kF WE/xYCxcNwK36skHttWlgmHJ8sYEDcZqQCEyGIaN0MVR5nUzvIKo5B5BTcis8pti rUYktfuivpIUXhnsj/eOtv/cDCyKhSI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:58 2025 by rpki-client