$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa File: ca68969c-6bab-3a18-b3f8-70281e402c94.roa (raw, json) Hash identifier: 6jnRaOJ/xmlADNzCMuLNztGNVdbJido4jkXuvvbnngU= Subject key identifier: F8:5E:9E:FF:3E:B4:B9:C5:35:B7:97:54:76:56:5C:A5:05:1A:7B:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC48F539455207F06C980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.65.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c4:8f:53:94:55:20:7f:06:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9c485e2c-61a7-405a-b736-03f6fb681c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:e5:2e:7b:5d:49:dc:10:86:17:4f:14:6b: 49:d9:ec:7e:10:7e:4b:09:7a:06:9c:6c:9c:83:21: c7:0b:94:8a:32:24:a5:ee:f8:29:8a:d0:e2:0d:0e: 16:bb:af:b0:2e:7c:17:a6:d0:5d:04:e2:c6:57:f4: dc:18:e4:4f:61:0e:8e:72:09:60:f2:0b:20:9f:9e: b2:bd:83:44:f1:ae:74:23:15:3a:b8:5a:c8:b4:5b: 68:1a:a0:08:13:c0:2b:d4:48:2b:5a:5c:08:7f:06: f4:47:77:10:e4:da:88:2a:f3:bb:49:81:36:da:17: 88:45:28:88:57:10:ed:53:ba:b5:20:36:a8:cf:de: 84:da:b1:49:ad:43:d9:bd:fe:3a:a2:76:0e:08:1c: fc:0f:57:75:f9:0e:8b:a8:8e:9a:f9:9c:74:59:31: 87:db:5e:0e:e4:41:93:60:36:f3:dd:15:71:d6:04: 17:3b:4f:ef:3a:f2:01:93:0f:8b:5c:f1:b2:50:95: 9a:34:c2:70:0f:64:84:ba:35:2d:26:b7:d4:c6:70: 43:80:95:20:90:57:63:d6:2f:31:62:95:ca:5d:0f: 7e:c2:ad:71:3e:31:5f:bc:73:57:7c:bf:49:cc:80: fc:ce:43:9f:93:48:7b:65:90:c8:0c:aa:b4:c2:89: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5E:9E:FF:3E:B4:B9:C5:35:B7:97:54:76:56:5C:A5:05:1A:7B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b5:84:37:b6:59:56:3c:16:6d:d3:39:0d:e3:ed:1c:bd:a1: 25:9e:73:1e:13:fc:81:20:94:7b:e5:19:8b:fd:22:45:5b:3a: 1f:86:80:0f:e5:c7:fc:27:08:c7:48:cd:32:8e:14:ac:45:a4: 72:79:e1:44:8f:4f:42:e4:85:12:e2:f9:8e:41:22:83:73:98: 96:c5:4c:f7:e7:d9:94:04:ed:4a:a3:dc:f7:99:d5:13:dc:cc: 77:38:72:50:f5:26:8d:36:aa:17:92:ce:31:ea:58:a4:1d:ed: 5a:cd:08:5c:3e:e2:b5:20:53:d2:47:27:bd:df:4a:7e:4c:49: 4c:ef:c3:cd:4c:d5:b3:67:5a:b8:6b:6d:88:6e:0d:53:81:76: 5d:7c:bf:1f:29:66:fb:86:d2:f0:17:f5:16:16:50:fb:bc:af: 4a:4d:d7:f5:11:fe:bf:96:f0:f9:62:01:c2:90:8f:da:10:90: 64:6f:42:bf:4e:32:b8:74:13:0b:ef:fd:5e:e5:94:0e:91:ae: 1f:23:4b:0d:96:94:30:f8:fc:9e:cd:63:5c:0b:d4:76:77:c5: 3f:90:d2:6a:5b:c8:8c:d4:c1:55:c5:43:c9:6b:c8:0a:e8:14: 5e:34:5d:01:75:fd:24:de:51:97:df:92:b8:bd:89:a2:05:45: c4:4a:79:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8SPU5RVIH8GyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWM0ODVlMmMtNjFhNy00MDVhLWI3MzYtMDNmNmZiNjgxYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/vlLntdSdwQhhdPFGtJ2ex+EH5LCXoGnGyc gyHHC5SKMiSl7vgpitDiDQ4Wu6+wLnwXptBdBOLGV/TcGORPYQ6Ocglg8gsgn56y vYNE8a50IxU6uFrItFtoGqAIE8Ar1EgrWlwIfwb0R3cQ5NqIKvO7SYE22heIRSiI VxDtU7q1IDaoz96E2rFJrUPZvf46onYOCBz8D1d1+Q6LqI6a+Zx0WTGH214O5EGT YDbz3RVx1gQXO0/vOvIBkw+LXPGyUJWaNMJwD2SEujUtJrfUxnBDgJUgkFdj1i8x YpXKXQ9+wq1xPjFfvHNXfL9JzID8zkOfk0h7ZZDIDKq0wonE5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhenv8+tLnFNbeXVHZWXKUFGnvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E2ODk2OWMtNmJhYi0z YTE4LWIzZjgtNzAyODFlNDAyYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu1hDe2WVY8Fm3TOQ3j7Ry9oSWecx4T/IEglHvlGYv9IkVbOh+GgA/l x/wnCMdIzTKOFKxFpHJ54USPT0LkhRLi+Y5BIoNzmJbFTPfn2ZQE7Uqj3PeZ1RPc zHc4clD1Jo02qheSzjHqWKQd7VrNCFw+4rUgU9JHJ73fSn5MSUzvw81M1bNnWrhr bYhuDVOBdl18vx8pZvuG0vAX9RYWUPu8r0pN1/UR/r+W8PliAcKQj9oQkGRvQr9O Mrh0Ewvv/V7llA6Rrh8jSw2WlDD4/J7NY1wL1HZ3xT+Q0mpbyIzUwVXFQ8lryAro FF40XQF1/STeUZffkri9iaIFRcRKee0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:37 2025 by rpki-client