$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa File: bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa (raw, json) Hash identifier: 3GPlwIGfZvu2lOTAXBVCwLVasUJGGpZPZ62jAtiRJsE= Subject key identifier: 68:90:B3:FC:4F:01:53:DF:0A:1D:61:A3:DA:58:F3:86:88:7C:8F:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC4D9908302F77D023F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.91.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c4:d9:90:83:02:f7:7d:02:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=dc3f35c3-a7c0-47da-8b9d-efb2c74f54d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:a9:59:4b:cb:63:f9:e7:d4:2e:20:f2:ca: 50:9f:08:31:06:e7:8c:48:92:be:f1:24:c5:7f:7b: e6:17:3a:fb:d9:25:81:e8:a7:d1:9d:a8:73:27:83: 81:1e:da:f2:01:bd:df:d1:03:be:a7:67:95:3a:01: 00:2c:22:a7:f6:f7:c6:cd:57:db:3d:3e:10:51:24: 18:f9:c9:a9:54:16:5e:6f:46:b1:f8:42:00:4c:11: 2d:10:c5:06:6a:50:05:f7:e4:03:35:85:2d:d4:cc: 55:4f:19:4c:ac:a5:03:cf:1d:cb:22:6d:27:a9:ad: 38:57:71:35:49:37:02:1d:22:b6:29:74:e6:b8:00: 94:bb:17:49:9b:d1:8b:40:b3:e5:8d:fb:2e:95:9d: d9:da:9c:97:97:88:3c:d8:2c:48:96:a0:7b:08:42: d1:e0:61:96:f1:b0:e1:7e:72:37:9f:14:64:96:7a: 93:b8:82:64:fd:6d:88:d5:fc:b0:ed:a0:7e:62:97: dd:4d:a0:b0:fd:75:d8:51:0a:36:b3:f3:53:ef:f3: 52:78:52:7a:8d:75:d8:64:09:43:4e:a6:28:8e:37: 0e:80:58:44:27:ac:7d:7d:05:6c:90:9a:78:82:8d: 8b:13:8a:dd:88:f7:58:06:bc:76:82:11:24:2c:77: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:90:B3:FC:4F:01:53:DF:0A:1D:61:A3:DA:58:F3:86:88:7C:8F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf5e5c4a-5df7-3f6b-b566-531bd5cacddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.91.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:cf:fe:9d:98:cd:1d:07:ce:4b:cb:60:a3:e5:5d:d0:61:c8: c9:5c:a4:3b:a5:86:5c:3a:83:a2:79:bf:1a:1d:18:90:7b:5b: e8:9d:15:9d:40:1a:a1:1f:18:4f:70:47:3d:94:37:46:5d:60: 51:b7:63:2d:9b:57:7e:7f:ab:68:14:1f:69:cc:f6:e4:5e:4a: a3:9d:66:71:e4:c5:7f:56:e6:df:50:2e:75:c1:4f:36:d5:02: 81:e1:bf:b5:e1:4d:b1:c8:17:94:2c:55:30:6f:0a:68:6d:de: 20:f8:94:00:10:6f:4b:f4:27:11:20:68:d7:a0:f4:3b:c0:42: 1b:9c:7a:8b:57:32:61:b1:fd:4a:cc:fe:73:fa:8e:87:0d:e9: 25:18:b5:5c:2e:a5:51:62:83:d8:19:11:53:f9:07:4c:7c:82: ab:a3:1c:3b:36:3a:c5:27:a7:91:23:28:61:12:a9:aa:97:31: 9e:b6:f1:3d:24:74:58:95:15:71:f8:87:70:f7:e0:c7:f9:3d: 76:86:25:f5:95:52:58:bb:e3:56:5a:37:99:3d:69:68:4b:81: 9e:bc:7f:27:4f:54:82:67:7d:63:38:ee:de:78:38:8d:3d:81: 1a:c3:14:05:c6:0d:f4:6d:33:cd:33:56:46:a2:ce:25:55:d5: 0a:ed:9c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8TZkIMC930CP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGMzZjM1YzMtYTdjMC00N2RhLThiOWQtZWZiMmM3NGY1NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKCpWUvLY/nn1C4g8spQnwgxBueMSJK+8STF f3vmFzr72SWB6KfRnahzJ4OBHtryAb3f0QO+p2eVOgEALCKn9vfGzVfbPT4QUSQY +cmpVBZeb0ax+EIATBEtEMUGalAF9+QDNYUt1MxVTxlMrKUDzx3LIm0nqa04V3E1 STcCHSK2KXTmuACUuxdJm9GLQLPljfsulZ3Z2pyXl4g82CxIlqB7CELR4GGW8bDh fnI3nxRklnqTuIJk/W2I1fyw7aB+YpfdTaCw/XXYUQo2s/NT7/NSeFJ6jXXYZAlD TqYojjcOgFhEJ6x9fQVskJp4go2LE4rdiPdYBrx2ghEkLHf+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiQs/xPAVPfCh1ho9pY84aIfI8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY1ZTVjNGEtNWRmNy0z ZjZiLWI1NjYtNTMxYmQ1Y2FjZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIltwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETP/p2YzR0HzkvLYKPlXdBhyMlcpDulhlw6g6J5vxodGJB7W+idFZ1A GqEfGE9wRz2UN0ZdYFG3Yy2bV35/q2gUH2nM9uReSqOdZnHkxX9W5t9QLnXBTzbV AoHhv7XhTbHIF5QsVTBvCmht3iD4lAAQb0v0JxEgaNeg9DvAQhuceotXMmGx/UrM /nP6jocN6SUYtVwupVFig9gZEVP5B0x8gqujHDs2OsUnp5EjKGESqaqXMZ628T0k dFiVFXH4h3D34Mf5PXaGJfWVUli741ZaN5k9aWhLgZ68fydPVIJnfWM47t54OI09 gRrDFAXGDfRtM80zVkaiziVV1QrtnC8= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:32 2025 by rpki-client