$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0545bbf-989a-3be9-9195-3800e6fd6d50.roa File: c0545bbf-989a-3be9-9195-3800e6fd6d50.roa (raw, json) Hash identifier: ZBSlIb7oJQvoHWOX0cKtGQjlkd8+OKSnw3nfWrYHaa0= Subject key identifier: C7:BD:B1:3E:61:81:DD:58:6E:F2:05:0F:23:F7:27:90:AA:D6:CE:A7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAC17D8C8FBEF25C2A900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0545bbf-989a-3be9-9195-3800e6fd6d50.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.78.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ac:17:d8:c8:fb:ef:25:c2:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f25843f0-a39b-4720-98ca-7285295e0c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:09:2c:82:7f:3d:8d:fe:dd:4c:f2:0b:31: c9:f2:d5:1d:fd:f9:86:c4:0d:8b:49:0d:f5:53:11: a0:9c:b0:19:42:26:99:f3:b4:e1:87:08:c2:85:dc: 61:05:cf:e2:32:af:35:5d:04:fd:4b:0a:a5:e0:9c: 52:4b:d6:c6:4f:bd:ed:72:b3:18:cf:1d:f6:f2:f9: 19:1d:93:86:f9:8d:86:7e:f3:43:cf:ea:d4:a7:70: af:36:05:74:1b:3c:ba:69:97:f9:ad:b1:27:cf:49: ab:51:20:4d:bc:40:ee:dc:65:bb:bb:e2:0d:23:e0: 6a:86:4b:e9:71:bf:50:9a:d3:d2:99:ad:2d:f7:d4: 17:61:78:a8:4b:36:df:11:25:06:cd:0f:38:f5:87: 42:5c:40:0c:9c:d3:77:46:f5:ba:0d:e5:72:10:80: ed:a5:d7:f0:79:d3:50:25:12:8f:2f:1d:9c:72:7a: a4:38:e0:5a:71:4c:c3:0e:d1:f5:28:72:44:4c:93: 08:c8:1a:5c:b2:80:28:79:b5:ef:26:6e:57:62:5a: 39:f3:f1:15:d2:79:ae:43:2e:d4:8d:56:70:97:55: 68:e4:0f:b8:6a:6c:a8:b7:e2:83:a6:6d:94:6b:cc: 4d:b2:f3:e2:3b:85:82:fa:59:35:53:47:de:33:83: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BD:B1:3E:61:81:DD:58:6E:F2:05:0F:23:F7:27:90:AA:D6:CE:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0545bbf-989a-3be9-9195-3800e6fd6d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5e:95:97:c1:2f:ad:0b:dd:78:55:2d:72:f8:ff:30:bd:c0: ad:ab:f2:0e:5c:3d:e6:95:02:4b:03:30:0c:28:21:17:44:90: f1:61:96:7e:ea:95:2b:9a:98:6e:05:db:7a:32:a5:af:74:14: 24:5f:2f:80:89:e4:62:c8:91:ef:8b:14:53:18:5f:a7:af:5c: 54:33:cd:ad:30:83:01:6d:df:a5:17:01:a1:2c:74:fe:1c:d4: 04:e3:6f:c6:6e:b3:e3:d3:2b:d5:52:7c:12:53:e4:53:b5:d2: d6:d9:6a:a7:f5:10:71:50:2b:47:1e:f6:d0:cf:8f:2f:5e:f2: 45:39:bf:59:d6:c5:dd:44:b0:f0:93:d3:e1:11:b1:64:7b:65: 7d:6b:37:6a:8d:7d:eb:05:c4:56:96:20:4c:4b:07:45:32:98: 73:bf:ce:12:13:4d:5c:40:24:bd:01:46:e1:f4:02:42:9f:03: 70:72:ca:bc:49:26:ef:6d:b3:b9:1a:4d:de:ac:c3:50:c2:1f: 4c:99:d8:6d:e1:88:5a:5d:d1:32:bb:66:81:56:4e:06:b2:7b: 14:2e:55:ab:11:42:ba:5e:fa:6a:ec:1c:ef:81:23:8d:43:f6: 48:f2:1e:51:9a:87:a8:75:93:55:56:a3:ad:38:39:bd:dc:27: 95:05:ab:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6wX2Mj77yXCqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZjI1ODQzZjAtYTM5Yi00NzIwLTk4Y2EtNzI4NTI5NWUwYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iUJLIJ/PY3+3UzyCzHJ8tUd/fmGxA2LSQ31 UxGgnLAZQiaZ87ThhwjChdxhBc/iMq81XQT9Swql4JxSS9bGT73tcrMYzx328vkZ HZOG+Y2GfvNDz+rUp3CvNgV0Gzy6aZf5rbEnz0mrUSBNvEDu3GW7u+INI+Bqhkvp cb9QmtPSma0t99QXYXioSzbfESUGzQ849YdCXEAMnNN3RvW6DeVyEIDtpdfwedNQ JRKPLx2ccnqkOOBacUzDDtH1KHJETJMIyBpcsoAoebXvJm5XYlo58/EV0nmuQy7U jVZwl1Vo5A+4amyot+KDpm2Ua8xNsvPiO4WC+lk1U0feM4NUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe9sT5hgd1YbvIFDyP3J5Cq1s6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA1NDViYmYtOTg5YS0z YmU5LTkxOTUtMzgwMGU2ZmQ2ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpelZfBL60L3XhVLXL4/zC9wK2r8g5cPeaVAksDMAwoIRdEkPFhln7q lSuamG4F23oypa90FCRfL4CJ5GLIke+LFFMYX6evXFQzza0wgwFt36UXAaEsdP4c 1ATjb8Zus+PTK9VSfBJT5FO10tbZaqf1EHFQK0ce9tDPjy9e8kU5v1nWxd1EsPCT 0+ERsWR7ZX1rN2qNfesFxFaWIExLB0UymHO/zhITTVxAJL0BRuH0AkKfA3ByyrxJ Ju9ts7kaTd6sw1DCH0yZ2G3hiFpd0TK7ZoFWTgayexQuVasRQrpe+mrsHO+BI41D 9kjyHlGah6h1k1VWo604Ob3cJ5UFq5o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:11 2025 by rpki-client