$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa File: cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa (raw, json) Hash identifier: fKXZj+mndor2RHULURS6aIC/QlfQd3GxuHzhl24VC4M= Subject key identifier: B8:C5:C3:6C:E4:09:5E:CF:D1:24:17:E7:8D:CA:C0:12:E4:5E:8A:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58207F8D1CFAA2E959DC600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.104.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:07:f8:d1:cf:aa:2e:95:9d:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=221933e8-8759-44e6-b5b1-155d7f6ff4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a5:13:25:e6:1d:91:24:b7:f0:fe:4f:e1:49: c5:5d:92:53:50:42:4a:38:25:71:9a:89:89:d5:c7: 64:92:f1:3d:6e:92:0f:a2:a0:1f:9a:f5:2a:32:4a: 95:9c:78:5f:2d:2d:c9:ad:1b:f8:28:9f:42:6b:91: 3f:09:1a:c4:0d:24:f0:84:7c:97:5c:fa:ec:50:08: 5a:23:41:2c:06:5e:3b:6b:cd:75:a9:06:cf:38:02: d2:61:80:a3:d5:23:34:4e:23:d2:09:82:98:01:70: 57:e2:65:0e:33:f4:66:d7:5e:8c:4e:d7:bd:eb:fc: 9e:f6:b7:cc:02:be:10:93:f1:2c:c9:be:63:e1:b7: d4:15:e8:97:66:a7:d0:26:0f:47:f4:5e:77:67:28: 6a:64:5b:19:b0:6b:ee:33:52:b1:21:83:00:1b:97: a1:28:e3:79:f8:24:16:91:a4:17:f0:b0:06:fe:6d: 54:14:8c:15:1d:37:78:8e:9d:45:c7:bc:8c:43:0f: 57:47:b3:eb:c5:0b:a8:29:ec:30:cc:ea:0d:f5:0d: ee:0e:64:89:1a:bf:6d:5f:7e:58:8d:db:8a:2b:d4: bd:1a:af:20:f3:14:33:38:d3:2b:bb:b4:f4:34:bd: bb:47:b3:05:ff:94:fb:f1:39:4a:a8:1f:d1:8c:05: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C5:C3:6C:E4:09:5E:CF:D1:24:17:E7:8D:CA:C0:12:E4:5E:8A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb4389c6-f1fd-3f9e-b80d-c998eb795fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.104.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:70:31:43:ef:95:b9:4e:9b:ac:5a:9f:72:13:1f:88:dc:c5: e8:25:6b:42:1c:6a:d4:82:76:f3:d5:9b:3a:79:42:95:80:04: 23:49:29:ea:80:f9:07:5b:bc:8a:55:a4:74:2a:d0:d4:f5:ca: d5:9a:1f:e6:67:8f:65:3f:92:df:76:b4:2d:04:6c:90:62:b5: b1:cc:09:13:90:3e:af:0e:01:22:4b:71:7c:3b:e9:dd:1a:c3: ac:11:31:5f:02:00:79:ed:ab:28:f2:64:cb:fb:9b:0a:dc:3d: 94:b5:ad:88:e5:40:e5:19:1d:17:4a:46:a3:31:fa:c5:41:46: f5:8a:fa:9c:37:de:6d:bb:a0:f3:76:99:19:85:70:53:67:a9: 83:70:a8:94:ad:1e:dc:d5:3e:14:a6:74:05:9f:21:f5:ec:3c: 85:a9:6b:35:a3:69:4d:a8:dd:c9:82:f7:ef:33:fc:16:a5:7b: 9e:5c:f8:9a:c4:5a:f3:c8:f0:77:e6:84:47:34:46:a9:dd:12: 85:6e:48:35:de:3d:77:e9:c9:34:22:9e:10:9e:20:ec:cb:de: 51:50:62:db:1f:61:d7:1c:ab:4f:40:b1:a0:6c:99:94:56:c9: 30:ed:bd:8a:e9:ab:ea:49:17:d8:79:de:88:1b:f6:61:72:f3: 95:f7:89:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggf40c+qLpWdxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjIxOTMzZTgtODc1OS00NGU2LWI1YjEtMTU1ZDdmNmZmNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqUTJeYdkSS38P5P4UnFXZJTUEJKOCVxmomJ 1cdkkvE9bpIPoqAfmvUqMkqVnHhfLS3JrRv4KJ9Ca5E/CRrEDSTwhHyXXPrsUAha I0EsBl47a811qQbPOALSYYCj1SM0TiPSCYKYAXBX4mUOM/Rm116MTte96/ye9rfM Ar4Qk/Esyb5j4bfUFeiXZqfQJg9H9F53ZyhqZFsZsGvuM1KxIYMAG5ehKON5+CQW kaQX8LAG/m1UFIwVHTd4jp1Fx7yMQw9XR7PrxQuoKewwzOoN9Q3uDmSJGr9tX35Y jduKK9S9Gq8g8xQzONMru7T0NL27R7MF/5T78TlKqB/RjAWkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjFw2zkCV7P0SQX543KwBLkXoruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I0Mzg5YzYtZjFmZC0z ZjllLWI4MGQtYzk5OGViNzk1ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1wMUPvlblOm6xan3ITH4jcxegla0IcatSCdvPVmzp5QpWABCNJKeqA +QdbvIpVpHQq0NT1ytWaH+Znj2U/kt92tC0EbJBitbHMCROQPq8OASJLcXw76d0a w6wRMV8CAHntqyjyZMv7mwrcPZS1rYjlQOUZHRdKRqMx+sVBRvWK+pw33m27oPN2 mRmFcFNnqYNwqJStHtzVPhSmdAWfIfXsPIWpazWjaU2o3cmC9+8z/Bale55c+JrE WvPI8HfmhEc0RqndEoVuSDXePXfpyTQinhCeIOzL3lFQYtsfYdccq09AsaBsmZRW yTDtvYrpq+pJF9h53ogb9mFy85X3ibg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:18 2025 by rpki-client