$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa File: c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa (raw, json) Hash identifier: gFQDV4ScQt/mFKaM9x9JB9bQssqqSuSKayic8TuxI/Y= Subject key identifier: BF:4F:70:E4:F2:97:EF:CD:F2:A3:9F:C2:58:BC:13:70:6E:63:58:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C15741B1DAB2B953A7480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.99.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:15:74:1b:1d:ab:2b:95:3a:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e4922198-2d99-4557-8546-77f9633caf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:d8:0f:b2:f7:f1:68:fc:02:54:cd:63:ab: bd:3c:3b:d1:67:9e:cd:0e:68:b8:58:fb:70:ac:ac: 15:d5:2a:4f:ed:28:4d:ac:17:91:a8:01:6f:b0:57: 90:44:67:57:3e:bb:30:40:a3:27:85:5c:dc:f1:9f: ae:98:67:a4:3f:20:07:13:c5:fc:fd:d6:f0:ea:46: 38:3a:2b:16:5e:18:3f:3f:f6:c3:55:2b:ea:80:3f: ae:ff:d9:06:c4:7b:0c:b3:3c:3b:db:a9:ff:a0:43: 20:cc:b1:28:51:44:52:8c:80:b2:a1:27:cf:77:93: 86:47:ec:93:df:bb:5b:a5:07:2f:d4:83:38:cd:78: 10:f2:71:64:eb:22:60:1c:a3:d9:99:1e:a6:3e:ab: 5e:96:f8:80:c3:f3:ff:da:72:d6:99:61:a0:31:7d: 0c:b6:f5:9a:89:d6:57:7b:35:8b:de:7d:3c:18:bb: 55:6c:62:80:af:65:e4:08:b8:47:cc:d0:53:71:a3: 97:5d:a4:c1:ea:c2:b5:68:8c:27:27:97:f5:6f:64: 6f:4f:ce:ac:35:b6:93:da:c4:7c:aa:cd:c4:28:27: 63:14:1d:1b:53:32:9c:29:af:75:e7:f7:b1:60:ff: 7a:8a:93:51:26:2d:a0:46:f3:18:79:87:07:de:d7: 83:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4F:70:E4:F2:97:EF:CD:F2:A3:9F:C2:58:BC:13:70:6E:63:58:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4cea166-a15d-3a0a-94b9-4aa5d2f4c6dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:50:2e:90:90:4b:19:32:99:30:aa:ea:9c:f2:dc:a5:81:25: c5:3a:4e:89:ac:54:e8:31:ac:f9:8e:0e:c4:ab:9d:51:f4:1b: e8:ba:50:6f:b2:9b:28:14:48:fb:7d:ba:b0:46:24:9b:80:3e: 5d:f5:f6:a0:c8:7a:c1:4f:5b:bd:51:47:27:15:cc:46:a2:81: 12:91:9f:d0:d7:dd:f8:97:28:54:f6:59:01:ad:af:11:7c:2e: 78:07:d4:76:79:2f:42:f0:fd:4a:9c:0b:e2:3c:58:6b:e0:de: 9a:25:52:c7:9a:a1:6f:78:20:7f:b4:7e:d3:17:6b:e2:8e:a9: 29:49:14:22:f3:4c:8c:2d:af:c2:16:de:c8:2b:e0:4b:c5:08: 3e:1e:37:8b:59:9e:24:33:59:97:4a:91:7b:d6:b6:96:e9:ba: 6f:26:03:63:59:97:b0:79:78:f8:be:47:dd:d2:99:77:59:4f: 1d:9a:f7:26:8f:d5:dc:a6:c9:dc:00:ea:91:00:b8:db:1e:59: a1:81:78:88:49:1c:0d:c8:c7:44:06:38:ff:fe:1a:a8:54:6c: a4:d5:a2:97:f9:cf:0e:46:69:1a:08:ab:ab:79:f6:07:f2:28: 25:4a:7f:37:ce:3e:ef:13:33:68:31:5d:ca:a4:dd:b0:4c:85: 04:66:0b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBV0Gx2rK5U6dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTQ5MjIxOTgtMmQ5OS00NTU3LTg1NDYtNzdmOTYzM2NhZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlozYD7L38Wj8AlTNY6u9PDvRZ57NDmi4WPtw rKwV1SpP7ShNrBeRqAFvsFeQRGdXPrswQKMnhVzc8Z+umGekPyAHE8X8/dbw6kY4 OisWXhg/P/bDVSvqgD+u/9kGxHsMszw726n/oEMgzLEoUURSjICyoSfPd5OGR+yT 37tbpQcv1IM4zXgQ8nFk6yJgHKPZmR6mPqtelviAw/P/2nLWmWGgMX0MtvWaidZX ezWL3n08GLtVbGKAr2XkCLhHzNBTcaOXXaTB6sK1aIwnJ5f1b2RvT86sNbaT2sR8 qs3EKCdjFB0bUzKcKa915/exYP96ipNRJi2gRvMYeYcH3teDVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9PcOTyl+/N8qOfwli8E3BuY1j3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzRjZWExNjYtYTE1ZC0z YTBhLTk0YjktNGFhNWQyZjRjNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZQLpCQSxkymTCq6pzy3KWBJcU6TomsVOgxrPmODsSrnVH0G+i6UG+y mygUSPt9urBGJJuAPl319qDIesFPW71RRycVzEaigRKRn9DX3fiXKFT2WQGtrxF8 LngH1HZ5L0Lw/UqcC+I8WGvg3polUseaoW94IH+0ftMXa+KOqSlJFCLzTIwtr8IW 3sgr4EvFCD4eN4tZniQzWZdKkXvWtpbpum8mA2NZl7B5ePi+R93SmXdZTx2a9yaP 1dymydwA6pEAuNseWaGBeIhJHA3Ix0QGOP/+GqhUbKTVopf5zw5GaRoIq6t59gfy KCVKfzfOPu8TM2gxXcqk3bBMhQRmCxM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:33 2025 by rpki-client