$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa File: c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa (raw, json) Hash identifier: BE0WHI5DlT+ou2MOAWVCqR70xoYmpJQlvqiuo4tnEdk= Subject key identifier: 76:62:43:20:65:41:E4:A5:F9:0F:89:6F:4C:14:51:EE:8F:26:7D:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C21E836EE23ACC4427480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.65.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:21:e8:36:ee:23:ac:c4:42:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2c9e1d38-316d-42a4-ab44-9c8064e3f8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:ab:3c:79:98:2f:97:fe:fe:3b:c1:a1:66: 12:95:ac:2e:78:5c:ad:52:77:bf:3a:49:24:f8:ff: 66:52:7b:80:3f:a9:68:ee:be:3a:01:2d:e6:d2:a8: 45:90:63:1f:45:32:95:c7:87:3d:16:2c:d2:fb:68: 90:4a:ee:bf:fb:bd:4f:a8:6b:f8:3d:bb:f6:ec:ec: 13:ec:1b:eb:2c:c8:a4:9a:c8:71:cc:eb:27:39:ca: 41:0d:83:d1:6b:38:c7:69:d9:5a:89:7e:78:1b:fd: dc:b8:0c:f8:40:c6:1f:2d:f0:07:2d:bd:56:84:4d: 98:81:e6:fa:29:b9:eb:7e:4b:eb:94:2e:90:5c:03: e6:a0:52:bb:2a:b3:32:4e:81:bd:7e:0d:bf:dd:3e: 8c:ba:25:c5:a5:52:66:7c:09:27:f4:dd:d8:e2:c6: 75:3f:7d:a5:48:ec:e1:2c:65:12:16:f7:a5:db:f9: 98:91:45:04:83:f8:c6:22:0a:ea:78:fe:4c:1c:d2: 2a:a6:27:57:57:ec:6e:35:a9:5e:c0:ac:03:72:e7: 45:a4:90:bf:db:0e:1c:7a:e4:c6:e1:a9:54:55:55: ca:af:f6:9c:e9:fd:5d:c7:80:5c:ed:82:0a:89:8f: f9:8c:c0:19:71:b3:60:97:bc:fd:e5:2a:42:1e:e5: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:43:20:65:41:E4:A5:F9:0F:89:6F:4C:14:51:EE:8F:26:7D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c980a15f-6aec-37f6-bf27-ee68f1fa7c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b0:14:eb:20:d3:c9:a9:17:5f:2a:8d:08:8d:b4:09:2f:75: d3:c2:cb:3c:74:56:69:d3:ce:a7:96:91:44:c3:04:02:c3:f5: 86:c5:07:4d:8b:3c:55:6b:ec:8d:12:b7:d5:a7:9e:86:c2:82: 72:68:ac:0a:cc:bc:e4:93:6c:ff:d0:04:75:5d:7c:53:5c:1c: 37:e1:87:94:2d:80:e4:3f:97:03:a0:aa:01:08:90:a6:41:d5: 6d:21:c8:5f:76:f7:dc:ce:d7:b2:a6:ec:51:8f:9a:cf:b5:04: 74:f6:2d:eb:c2:3d:1a:09:79:ed:87:cb:12:78:67:1f:41:e0: 39:44:d2:b4:9c:4d:49:2f:4d:ac:37:2b:56:7a:42:b6:24:e2: 0a:91:29:cb:f4:08:6d:67:19:88:82:9f:76:bb:18:93:ad:20: ec:4b:2f:a1:01:44:5c:f0:3f:ba:c4:0e:73:58:76:03:fc:7f: be:8f:d9:bf:44:db:13:fd:b5:c9:80:d7:a6:02:b3:1e:c2:78: ca:83:d4:16:6f:a0:e1:64:ba:a5:d4:68:cf:dd:b7:37:81:5c: c3:7d:4f:7d:5e:d6:11:2f:4f:0a:35:03:82:34:e8:ea:a7:97: c2:c3:03:38:eb:8a:34:80:e1:01:d1:5e:84:c9:0f:ec:c7:57: 98:82:05:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCHoNu4jrMRCdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmM5ZTFkMzgtMzE2ZC00MmE0LWFiNDQtOWM4MDY0ZTNmOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3SrPHmYL5f+/jvBoWYSlawueFytUne/Okkk +P9mUnuAP6lo7r46AS3m0qhFkGMfRTKVx4c9FizS+2iQSu6/+71PqGv4Pbv27OwT 7BvrLMikmshxzOsnOcpBDYPRazjHadlaiX54G/3cuAz4QMYfLfAHLb1WhE2Ygeb6 KbnrfkvrlC6QXAPmoFK7KrMyToG9fg2/3T6MuiXFpVJmfAkn9N3Y4sZ1P32lSOzh LGUSFvel2/mYkUUEg/jGIgrqeP5MHNIqpidXV+xuNalewKwDcudFpJC/2w4ceuTG 4alUVVXKr/ac6f1dx4Bc7YIKiY/5jMAZcbNgl7z95SpCHuUvPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZiQyBlQeSl+Q+Jb0wUUe6PJn3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk4MGExNWYtNmFlYy0z N2Y2LWJmMjctZWU2OGYxZmE3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASwFOsg08mpF18qjQiNtAkvddPCyzx0VmnTzqeWkUTDBALD9YbFB02L PFVr7I0St9WnnobCgnJorArMvOSTbP/QBHVdfFNcHDfhh5QtgOQ/lwOgqgEIkKZB 1W0hyF9299zO17Km7FGPms+1BHT2LevCPRoJee2HyxJ4Zx9B4DlE0rScTUkvTaw3 K1Z6QrYk4gqRKcv0CG1nGYiCn3a7GJOtIOxLL6EBRFzwP7rEDnNYdgP8f76P2b9E 2xP9tcmA16YCsx7CeMqD1BZvoOFkuqXUaM/dtzeBXMN9T31e1hEvTwo1A4I06Oqn l8LDAzjrijSA4QHRXoTJD+zHV5iCBbg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:33 2025 by rpki-client