$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa File: bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa (raw, json) Hash identifier: cITwkeVwz3Aw/sSxil08xwCw/WiLrVNvCGbCcT0XXok= Subject key identifier: 47:43:31:39:7C:BD:95:D6:F9:4D:E8:76:1A:87:D0:4D:EE:B9:C2:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAEBF1B9D82727DE15480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.98.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ae:bf:1b:9d:82:72:7d:e1:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=76eb84a7-d477-4f48-a732-9c2eb7d4e57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f4:f3:54:3f:39:32:5d:91:93:fc:e9:c5:ec: 22:5d:cb:6f:e8:d1:1e:14:52:f4:94:71:a4:b5:0c: f5:90:05:f1:75:0b:21:26:a8:5a:bd:80:51:5e:76: b8:5f:32:0d:d5:da:f6:5f:a9:7f:14:17:6b:a2:18: 64:d5:8d:d2:e7:54:e4:d8:1f:87:51:2a:21:1c:1a: 36:83:ef:68:43:78:fa:b2:e1:af:67:aa:03:2a:ad: f9:e9:6c:db:9f:91:69:c2:61:6d:b2:23:a7:6b:77: e9:9b:e9:cb:a3:e6:65:36:5e:99:35:99:98:de:76: 09:71:1f:6d:d6:f4:43:e5:4a:0d:32:cd:30:29:ef: 44:db:42:60:72:cf:ea:23:cc:00:89:51:ff:00:40: 95:fb:69:22:b7:f2:34:06:06:90:3d:18:a6:0c:be: 6c:27:73:b7:6f:5d:81:b3:be:5c:3e:35:bc:cf:7e: a2:62:60:2c:5a:3e:69:0f:15:00:db:cf:0c:b5:40: e3:7b:f2:5f:7b:ae:ff:b8:ba:62:ea:a6:43:a9:8f: 59:7a:d7:22:94:b0:a1:4a:bb:be:06:bc:8a:9c:09: 19:35:98:09:03:c3:c9:c2:85:d7:4e:22:ce:0d:a6: 9b:24:1f:a4:1e:9d:ea:65:e9:56:09:05:9d:93:06: 35:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:43:31:39:7C:BD:95:D6:F9:4D:E8:76:1A:87:D0:4D:EE:B9:C2:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bff1c659-6b2c-34fa-96f6-095bbc78e22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8e:12:e6:d8:e6:24:b0:12:67:e4:91:68:e6:4c:c6:a1:55: 57:5b:c4:ae:2e:5b:50:da:b5:65:d0:7b:70:0f:b7:88:aa:10: ee:7a:6e:46:e0:06:5a:52:45:03:f5:df:6b:12:12:99:e4:03: 92:93:f5:69:f7:21:ba:39:d2:ab:cc:36:a4:8a:f8:8f:6b:33: d2:f4:05:97:83:86:c3:15:91:02:5d:17:82:03:cb:f9:ff:b4: aa:e9:10:92:43:ea:d9:15:24:90:cf:04:25:2c:98:32:ce:13: 20:0d:6e:88:7f:89:30:70:24:ef:e4:7b:87:b3:79:c7:5e:b3: 14:93:4b:e4:4d:12:70:42:2c:eb:eb:14:8d:87:28:f1:e3:a1: f2:7e:e6:8c:1f:26:32:4e:92:00:18:bc:97:7c:10:52:dd:b7: c0:a0:8c:4b:a3:5b:5f:f3:dc:9a:d4:5d:32:e3:58:f9:38:15: 45:c5:2c:90:f2:2a:01:15:9b:fe:5b:72:26:43:2b:40:3f:73: 88:78:82:dc:23:51:09:2d:26:3c:ad:e9:5c:b4:91:9f:d9:7a: 32:f4:d6:24:ac:e5:81:06:8d:49:84:10:b5:03:85:2d:b2:b4: 45:b5:75:45:ef:43:d4:1f:23:db:c6:78:63:74:1e:d6:e1:05: c5:b2:22:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS66/G52Ccn3hVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzZlYjg0YTctZDQ3Ny00ZjQ4LWE3MzItOWMyZWI3ZDRlNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPTzVD85Ml2Rk/zpxewiXctv6NEeFFL0lHGk tQz1kAXxdQshJqhavYBRXna4XzIN1dr2X6l/FBdrohhk1Y3S51Tk2B+HUSohHBo2 g+9oQ3j6suGvZ6oDKq356Wzbn5FpwmFtsiOna3fpm+nLo+ZlNl6ZNZmY3nYJcR9t 1vRD5UoNMs0wKe9E20Jgcs/qI8wAiVH/AECV+2kit/I0BgaQPRimDL5sJ3O3b12B s75cPjW8z36iYmAsWj5pDxUA288MtUDje/Jfe67/uLpi6qZDqY9ZetcilLChSru+ BryKnAkZNZgJA8PJwoXXTiLODaabJB+kHp3qZelWCQWdkwY19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdDMTl8vZXW+U3odhqH0E3uucJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmMWM2NTktNmIyYy0z NGZhLTk2ZjYtMDk1YmJjNzhlMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCOEubY5iSwEmfkkWjmTMahVVdbxK4uW1DatWXQe3APt4iqEO56bkbg BlpSRQP132sSEpnkA5KT9Wn3Ibo50qvMNqSK+I9rM9L0BZeDhsMVkQJdF4IDy/n/ tKrpEJJD6tkVJJDPBCUsmDLOEyANboh/iTBwJO/ke4ezecdesxSTS+RNEnBCLOvr FI2HKPHjofJ+5owfJjJOkgAYvJd8EFLdt8CgjEujW1/z3JrUXTLjWPk4FUXFLJDy KgEVm/5bciZDK0A/c4h4gtwjUQktJjyt6Vy0kZ/ZejL01iSs5YEGjUmEELUDhS2y tEW1dUXvQ9QfI9vGeGN0HtbhBcWyIoU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:14 2025 by rpki-client