$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa File: bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa (raw, json) Hash identifier: RrDUE5NtfmwYmsBxfM/LfBkexy3diX7iphM53GnB/NY= Subject key identifier: BC:23:68:86:5D:46:0F:BB:5A:CC:E5:9C:4C:EC:8F:39:0D:82:7F:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C027A5AADA10F7E494580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.98.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:02:7a:5a:ad:a1:0f:7e:49:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6f860973-a435-4e1e-82e4-5c60750ac5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:33:93:92:2e:a7:53:dc:64:c7:46:f3:67: c4:75:d5:26:a5:d3:75:fd:92:12:12:92:79:7d:81: 8a:1c:68:11:34:e2:d1:66:e6:58:33:0c:f1:2d:f4: 51:43:4e:54:51:b2:ab:92:9d:76:3c:8b:70:e2:0a: 55:21:31:6b:b8:81:c6:0c:39:fe:9c:3a:38:65:39: c3:bd:fd:b9:2d:41:dd:46:c5:96:86:de:72:1d:2f: de:68:32:ff:80:9c:7a:c4:17:45:46:3b:9d:ea:d4: c2:c2:6e:1f:74:d3:88:80:ba:22:7d:d5:2f:6c:c6: f9:08:e2:15:39:ce:65:3c:62:ef:3d:77:fc:96:9e: bf:68:4d:f3:f7:01:ae:f6:cc:69:f2:e0:24:38:a4: 54:b4:7d:64:7e:b4:b4:63:95:b5:81:c5:0f:d7:72: 54:22:4b:cd:13:9b:29:f6:b9:d4:99:64:e9:e5:d8: 82:c8:b6:bd:af:30:f9:b3:38:fc:59:d1:d5:e3:bc: ad:4d:86:84:f7:66:36:ba:04:23:f0:14:be:2f:c6: 01:7c:d8:89:22:9e:04:67:f1:c1:50:58:97:f5:84: d3:fd:74:42:3e:a7:95:2b:3e:c0:57:dc:cd:5b:39: 2f:fb:0a:00:be:b5:76:4d:4a:a3:62:14:6d:a0:f0: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:23:68:86:5D:46:0F:BB:5A:CC:E5:9C:4C:EC:8F:39:0D:82:7F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3a2dd4-dfc0-34f3-8fd4-fa63ae412108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f4:00:1f:03:08:6e:7c:f3:33:58:8a:df:7b:9f:e5:0d:19: 94:a8:c7:09:74:83:69:49:59:d9:e8:d6:fd:2e:56:cb:f3:8a: 69:8c:6c:35:08:72:73:0f:9f:62:ce:37:a6:9c:17:f0:33:0f: de:70:5f:28:a3:b2:ef:5f:ec:e1:44:e7:08:f6:12:8c:f0:12: c6:97:97:3a:06:a6:92:0b:9d:32:98:87:eb:45:23:cb:83:29: 12:0c:ed:ac:cb:b0:0a:1d:9f:60:6b:8d:93:06:43:ee:e4:e0: bf:93:25:09:5e:e2:32:89:c0:30:cf:9c:f3:2f:0a:fb:c1:d3: c8:a1:93:90:15:05:da:5f:46:97:f1:55:7e:0d:1c:f1:8b:e5: 72:a3:6d:0f:63:3a:3e:41:a9:0a:2e:cf:45:2d:4b:01:59:a6: ee:50:00:22:8f:04:a0:b4:df:ec:c1:70:e1:0b:62:c3:84:cd: f6:6d:d8:7b:ca:7d:26:c2:ef:0b:b8:bd:2d:91:1d:d3:22:a2: a8:b2:54:3f:1d:d7:e4:b2:39:2c:e5:9a:01:6a:4a:ee:fc:97: 9a:c2:58:6e:33:71:e3:fc:59:b2:c6:e1:22:2f:bc:45:eb:78: 8d:37:0e:e3:26:e3:88:51:45:db:3a:43:a1:52:8f:17:5c:7b: e9:b5:c8:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAJ6Wq2hD35JRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NmY4NjA5NzMtYTQzNS00ZTFlLTgyZTQtNWM2MDc1MGFjNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8zk5Iup1PcZMdG82fEddUmpdN1/ZISEpJ5 fYGKHGgRNOLRZuZYMwzxLfRRQ05UUbKrkp12PItw4gpVITFruIHGDDn+nDo4ZTnD vf25LUHdRsWWht5yHS/eaDL/gJx6xBdFRjud6tTCwm4fdNOIgLoifdUvbMb5COIV Oc5lPGLvPXf8lp6/aE3z9wGu9sxp8uAkOKRUtH1kfrS0Y5W1gcUP13JUIkvNE5sp 9rnUmWTp5diCyLa9rzD5szj8WdHV47ytTYaE92Y2ugQj8BS+L8YBfNiJIp4EZ/HB UFiX9YTT/XRCPqeVKz7AV9zNWzkv+woAvrV2TUqjYhRtoPAfywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwjaIZdRg+7WszlnEzsjzkNgn/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzYTJkZDQtZGZjMC0z NGYzLThmZDQtZmE2M2FlNDEyMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv0AB8DCG588zNYit97n+UNGZSoxwl0g2lJWdno1v0uVsvzimmMbDUI cnMPn2LON6acF/AzD95wXyijsu9f7OFE5wj2EozwEsaXlzoGppILnTKYh+tFI8uD KRIM7azLsAodn2BrjZMGQ+7k4L+TJQle4jKJwDDPnPMvCvvB08ihk5AVBdpfRpfx VX4NHPGL5XKjbQ9jOj5BqQouz0UtSwFZpu5QACKPBKC03+zBcOELYsOEzfZt2HvK fSbC7wu4vS2RHdMioqiyVD8d1+SyOSzlmgFqSu78l5rCWG4zceP8WbLG4SIvvEXr eI03DuMm44hRRds6Q6FSjxdce+m1yHw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:46 2025 by rpki-client