$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c700c903-f5e7-3271-9da8-0172521ad906.roa File: c700c903-f5e7-3271-9da8-0172521ad906.roa (raw, json) Hash identifier: 6zJ10zryqUHugwkMGnE0PFAsO/j5FQopnyeJDYGZa6I= Subject key identifier: D6:E6:61:06:37:CB:28:F9:E7:F3:55:78:60:55:86:59:70:F2:C5:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC220694E69C3E5844DE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c700c903-f5e7-3271-9da8-0172521ad906.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.135.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c2:20:69:4e:69:c3:e5:84:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5d7e447b-78f4-4d1f-8b27-a14911abfa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:00:9e:22:c1:e2:8f:f4:2f:22:cc:70:0c: 14:cc:1a:2a:94:e8:c4:ee:50:38:24:76:08:ad:d5: 61:39:67:4f:95:2e:c7:de:b3:ec:76:84:d0:06:8f: 88:94:0a:1d:b6:f0:81:d4:e2:bb:cf:f6:59:d9:0c: 05:07:d6:48:6a:89:de:bd:dc:44:ba:da:f4:03:9a: 3c:c4:36:e0:35:47:32:92:d2:a6:d1:78:2e:3b:ed: c1:04:a8:3d:02:92:e8:39:d2:a6:96:a8:00:00:0a: 25:d6:9f:a8:22:9c:28:9c:34:49:17:48:32:c9:cb: 0b:c2:dc:94:0e:8b:36:72:bb:b1:dc:ae:6c:4c:56: 7f:b0:29:8d:f1:a0:6c:47:10:c0:c7:c0:00:3c:a8: 88:05:b2:1e:51:5d:d3:a5:89:0e:d6:28:01:53:f1: 12:4d:d6:04:cd:42:90:81:de:81:4f:8d:b1:83:c0: f9:a8:81:0c:de:a4:36:1a:ce:5b:f1:8d:23:1c:15: cc:d0:ce:f8:c0:24:0b:37:ab:f8:2a:e3:ae:67:b1: c4:4f:58:3f:67:7d:dc:1f:a9:58:54:c4:9e:6c:bc: 21:d1:08:dc:11:c9:e4:15:c1:02:c3:9f:30:43:4d: c2:2c:e6:20:a6:10:b0:18:10:bd:a1:23:14:31:3d: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E6:61:06:37:CB:28:F9:E7:F3:55:78:60:55:86:59:70:F2:C5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c700c903-f5e7-3271-9da8-0172521ad906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.135.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c4:cc:50:14:3e:35:61:a1:62:1e:83:c8:3e:ac:25:c5:f1: 6d:7c:f2:bf:c4:f2:1b:e9:94:f4:ac:1c:a0:c7:92:7b:2b:41: b5:ca:72:56:c9:4e:c0:30:5b:9f:df:be:f3:42:a1:91:13:fd: 2c:56:c8:e4:b0:2f:a9:eb:50:31:91:51:27:06:ee:67:31:34: b4:fb:af:43:70:2f:d3:ae:b0:1d:97:25:21:9d:a4:3f:d4:5d: 05:e1:98:29:13:e5:a6:0d:a2:c2:cd:fe:98:7a:bb:16:f6:c1: c4:f8:5c:f9:ed:71:74:5b:73:55:7b:18:4e:ca:17:4e:16:23: f7:29:52:c0:ba:1d:b4:19:92:16:74:a7:d7:c7:ba:a9:dc:78: 41:f8:69:4c:47:c3:ff:0f:4f:3e:a4:4f:3e:d7:90:59:a9:12: 9b:b2:63:54:6c:a7:46:46:f4:f6:21:e7:e1:27:c7:57:86:de: 3d:c4:ec:dc:fe:eb:de:0a:33:cc:b0:41:2f:ee:bb:09:89:5c: 1e:9c:d3:7f:11:bf:3c:1a:31:6d:8a:7a:cc:28:97:de:f4:8d: 89:d0:8a:be:a7:f0:0f:6f:42:84:b3:52:5e:5c:eb:4e:d3:eb: 59:98:8d:9b:2c:0f:0a:90:88:ee:6c:8b:78:f0:1d:52:0f:de: 57:8c:94:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8IgaU5pw+WETeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWQ3ZTQ0N2ItNzhmNC00ZDFmLThiMjctYTE0OTExYWJmYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMUAniLB4o/0LyLMcAwUzBoqlOjE7lA4JHYI rdVhOWdPlS7H3rPsdoTQBo+IlAodtvCB1OK7z/ZZ2QwFB9ZIaonevdxEutr0A5o8 xDbgNUcyktKm0XguO+3BBKg9ApLoOdKmlqgAAAol1p+oIpwonDRJF0gyycsLwtyU Dos2crux3K5sTFZ/sCmN8aBsRxDAx8AAPKiIBbIeUV3TpYkO1igBU/ESTdYEzUKQ gd6BT42xg8D5qIEM3qQ2Gs5b8Y0jHBXM0M74wCQLN6v4KuOuZ7HET1g/Z33cH6lY VMSebLwh0QjcEcnkFcECw58wQ03CLOYgphCwGBC9oSMUMT33JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbmYQY3yyj55/NVeGBVhllw8sVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzcwMGM5MDMtZjVlNy0z MjcxLTlkYTgtMDE3MjUyMWFkOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXEzFAUPjVhoWIeg8g+rCXF8W188r/E8hvplPSsHKDHknsrQbXKclbJ TsAwW5/fvvNCoZET/SxWyOSwL6nrUDGRUScG7mcxNLT7r0NwL9OusB2XJSGdpD/U XQXhmCkT5aYNosLN/ph6uxb2wcT4XPntcXRbc1V7GE7KF04WI/cpUsC6HbQZkhZ0 p9fHuqnceEH4aUxHw/8PTz6kTz7XkFmpEpuyY1Rsp0ZG9PYh5+Enx1eG3j3E7Nz+ 694KM8ywQS/uuwmJXB6c038RvzwaMW2Keswol970jYnQir6n8A9vQoSzUl5c607T 61mYjZssDwqQiO5si3jwHVIP3leMlCk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:59 2025 by rpki-client