$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9f546e5-42a5-3c02-a91a-9ca229c255d1.roa File: c9f546e5-42a5-3c02-a91a-9ca229c255d1.roa (raw, json) Hash identifier: fBnc7NXmw7vHoIyT2ynTFK0ogk2zCna7QKzyXswR73o= Subject key identifier: B8:63:90:E6:27:39:66:39:F7:00:08:4B:E8:9C:7B:75:0E:1F:5A:8A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581757224C05C97FA68A480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9f546e5-42a5-3c02-a91a-9ca229c255d1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.118.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:75:72:24:c0:5c:97:fa:68:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f5cc43cc-f3f1-4e3e-bf82-9ffb1206036a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:4d:ba:6f:a6:2b:97:9e:ec:13:bf:b7:2d: ec:8f:15:da:1a:65:b2:09:90:83:84:e7:c2:46:47: df:f4:b2:93:fe:d7:51:1e:a4:bb:c6:86:90:04:7c: 18:f3:4d:8d:d9:30:b0:9f:81:dd:d8:ad:99:8e:75: 74:cf:4e:49:f3:b0:3d:51:fa:22:04:89:e8:81:9a: 53:0f:2d:4d:d2:28:b8:de:c1:68:e7:56:74:b7:fe: 8b:47:35:04:a3:ec:2f:bb:e8:1f:82:02:c9:c2:b3: fd:1f:02:e2:71:9b:2f:5b:2f:8d:8d:58:e1:ea:50: c4:64:23:77:62:3b:fa:c7:8b:50:20:1c:9e:b9:0b: 4d:d7:ad:00:fc:bd:43:5c:bb:d2:6e:5e:14:ba:cc: ae:42:09:6a:1d:68:52:2e:ec:4f:b0:32:08:e8:ba: 73:83:49:58:4b:ed:15:64:c7:50:c8:00:df:8f:1d: 94:8e:0f:c1:6d:ed:ac:c3:07:ec:e8:f1:56:d1:73: e0:85:4e:78:4c:0a:00:8f:c0:6e:93:54:c8:4b:02: 77:9a:71:96:34:c1:91:dd:a8:83:a8:91:82:42:ca: e5:91:79:5d:56:d1:82:89:1c:79:e1:ef:c4:93:8e: a3:5a:6a:da:2c:42:c9:bb:d1:c0:b0:e1:35:64:12: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:90:E6:27:39:66:39:F7:00:08:4B:E8:9C:7B:75:0E:1F:5A:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c9f546e5-42a5-3c02-a91a-9ca229c255d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:89:a9:58:48:97:8c:ca:e7:30:c4:6e:e8:89:46:9e:bf:eb: 65:52:12:5f:62:d8:ed:66:42:49:09:af:11:e6:4f:86:5b:3a: d0:66:0f:6a:30:3f:5b:dd:06:f4:e2:99:01:a3:d0:ca:41:d1: a5:dd:4a:c0:79:5a:3d:df:3f:ba:16:b0:01:2b:b0:33:5e:a9: e9:12:bb:91:e1:c0:48:8d:c3:a0:b7:a1:dc:cf:8a:2d:96:36: b5:71:aa:8f:36:43:fa:6f:38:1a:60:51:3d:d6:29:60:07:f7: 49:21:72:5c:a6:2f:0c:4e:b9:06:9a:9c:39:ff:33:3a:bc:98: a8:ef:45:3f:4b:e8:b9:2b:9c:b4:a8:6a:f5:2f:fb:28:df:34: a1:db:4c:65:b7:33:46:84:40:59:c0:17:81:7f:36:85:aa:89: 34:1d:ec:31:93:1b:38:0c:1f:43:98:9a:0c:be:93:24:d3:f6: 27:a0:d5:1a:0b:33:4a:b0:4e:97:df:cb:eb:c8:4f:c1:4d:8f: 05:9b:50:45:cf:6b:30:e1:f8:cb:42:c5:77:37:bd:87:73:6e: c5:10:16:87:6d:0b:7d:94:d2:31:d9:3d:4c:a6:b7:38:e0:31: 9e:49:93:40:a3:7d:1a:1f:8e:b0:d8:fb:df:aa:61:b2:d3:9f: 3a:66:a1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXVyJMBcl/popIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjVjYzQzY2MtZjNmMS00ZTNlLWJmODItOWZmYjEyMDYwMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6FNum+mK5ee7BO/ty3sjxXaGmWyCZCDhOfC Rkff9LKT/tdRHqS7xoaQBHwY802N2TCwn4Hd2K2ZjnV0z05J87A9UfoiBInogZpT Dy1N0ii43sFo51Z0t/6LRzUEo+wvu+gfggLJwrP9HwLicZsvWy+NjVjh6lDEZCN3 Yjv6x4tQIByeuQtN160A/L1DXLvSbl4UusyuQglqHWhSLuxPsDII6Lpzg0lYS+0V ZMdQyADfjx2Ujg/Bbe2swwfs6PFW0XPghU54TAoAj8Buk1TISwJ3mnGWNMGR3aiD qJGCQsrlkXldVtGCiRx54e/Ek46jWmraLELJu9HAsOE1ZBKlZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhjkOYnOWY59wAIS+ice3UOH1qKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzlmNTQ2ZTUtNDJhNS0z YzAyLWE5MWEtOWNhMjI5YzI1NWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmJqVhIl4zK5zDEbuiJRp6/62VSEl9i2O1mQkkJrxHmT4ZbOtBmD2ow P1vdBvTimQGj0MpB0aXdSsB5Wj3fP7oWsAErsDNeqekSu5HhwEiNw6C3odzPii2W NrVxqo82Q/pvOBpgUT3WKWAH90khclymLwxOuQaanDn/Mzq8mKjvRT9L6LkrnLSo avUv+yjfNKHbTGW3M0aEQFnAF4F/NoWqiTQd7DGTGzgMH0OYmgy+kyTT9ieg1RoL M0qwTpffy+vIT8FNjwWbUEXPazDh+MtCxXc3vYdzbsUQFodtC32U0jHZPUymtzjg MZ5Jk0CjfRofjrDY+9+qYbLTnzpmoZE= -----END CERTIFICATE-----Generated at Fri Apr 4 20:59:59 2025 by rpki-client