$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa File: cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa (raw, json) Hash identifier: SdLzIzt71W/3ZFX7dvrvYA/+9A3q/Lg0B9a+n6bJA1M= Subject key identifier: D8:C0:7D:7D:18:52:59:E8:2A:4A:74:A3:73:3F:CB:80:70:6E:97:8B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA45E482E6D521290DF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.87.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a4:5e:48:2e:6d:52:12:90:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4068be56-da36-40eb-88d7-24c3c1d0c1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:b7:c0:8f:05:cd:bc:08:0a:80:a2:2a:15: a6:93:f4:18:bb:e1:06:43:c1:2e:df:9b:ec:04:c0: 95:51:f4:27:a9:cc:b3:fb:60:a4:b3:ff:2c:50:8c: 26:08:e3:f9:17:a1:ee:1e:59:47:8d:01:0f:7d:1b: 3e:7c:67:3d:ae:28:3e:27:2e:e6:9a:04:2e:f4:1c: 20:87:4d:3f:35:f7:91:c2:45:57:7c:90:ae:64:47: 8f:56:10:7c:91:a0:08:d7:71:b4:66:c0:c0:91:db: d9:e6:d6:8a:5b:46:ac:48:ab:f8:2e:5e:d8:f3:81: 8f:c7:f9:b3:e8:b6:77:14:04:33:0f:a0:fa:ea:6b: 39:64:2e:e5:8f:7e:b3:4b:ba:20:8e:96:24:e4:ff: cd:57:ea:67:e8:8a:8b:b1:ed:df:92:47:e0:10:26: ba:00:08:09:b5:52:85:04:2e:09:e4:b4:9d:89:5c: b5:b7:56:ab:ab:92:f6:a5:16:31:8d:d3:f9:97:bd: 2c:26:51:ed:e2:6d:7f:88:a3:67:23:46:65:d1:fb: da:0f:36:3b:54:d8:ad:b0:21:07:f2:54:24:a4:27: 01:bc:12:1d:c8:f2:97:46:89:fa:4e:78:65:04:21: 4a:a5:0e:d0:22:00:67:4b:21:77:1c:b9:3a:22:bc: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:7D:7D:18:52:59:E8:2A:4A:74:A3:73:3F:CB:80:70:6E:97:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cf1decfb-5a34-303e-a621-9ec61bb81d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:75:22:95:85:01:b8:06:7f:e3:bf:86:ec:b0:0d:2d:c4:70: 4c:66:f9:a3:1b:be:f1:79:74:cf:50:13:27:93:f8:7e:18:51: 22:c7:9d:27:c9:74:29:ba:04:eb:b9:22:e4:ef:ba:1b:f5:d8: 6d:53:7a:94:8f:cc:82:e8:1e:1b:80:c4:c8:f2:ff:a1:88:fa: 66:e0:08:b0:df:55:f5:04:c5:47:e0:39:05:40:78:f9:db:8f: b1:6f:4f:e2:10:9d:89:b1:76:43:62:af:01:d3:a6:a9:a1:17: 27:fd:4f:37:cf:46:bf:b1:46:5b:b7:29:50:08:c4:3a:54:81: d9:08:2f:9e:e1:51:86:05:bf:da:d9:36:7b:d9:33:cb:28:1a: eb:3f:e7:67:60:14:30:fc:6c:99:19:7e:62:89:02:97:72:70: d4:d7:b5:03:b7:d9:78:c6:56:d7:d3:76:91:17:fe:8a:69:0f: 21:9f:56:03:6b:fe:91:2b:f9:ed:53:f3:62:b7:f1:3f:8e:f0: d6:52:03:8f:9a:e3:fd:7d:ec:65:e8:69:fd:54:fa:d6:3e:1e: 61:86:45:cd:cb:55:c6:97:84:21:8d:57:85:2f:71:57:55:29: e3:9a:3a:ce:df:4a:0b:1e:9b:c4:94:09:64:b7:b2:b7:2a:38: b9:6d:92:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6ReSC5tUhKQ30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDA2OGJlNTYtZGEzNi00MGViLTg4ZDctMjRjM2MxZDBjMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY63wI8FzbwICoCiKhWmk/QYu+EGQ8Eu35vs BMCVUfQnqcyz+2Cks/8sUIwmCOP5F6HuHllHjQEPfRs+fGc9rig+Jy7mmgQu9Bwg h00/NfeRwkVXfJCuZEePVhB8kaAI13G0ZsDAkdvZ5taKW0asSKv4Ll7Y84GPx/mz 6LZ3FAQzD6D66ms5ZC7lj36zS7ogjpYk5P/NV+pn6IqLse3fkkfgECa6AAgJtVKF BC4J5LSdiVy1t1arq5L2pRYxjdP5l70sJlHt4m1/iKNnI0Zl0fvaDzY7VNitsCEH 8lQkpCcBvBIdyPKXRon6TnhlBCFKpQ7QIgBnSyF3HLk6Irz9RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjAfX0YUlnoKkp0o3M/y4BwbpeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2YxZGVjZmItNWEzNC0z MDNlLWE2MjEtOWVjNjFiYjgxZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIldAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA91IpWFAbgGf+O/huywDS3EcExm+aMbvvF5dM9QEyeT+H4YUSLHnSfJ dCm6BOu5IuTvuhv12G1TepSPzILoHhuAxMjy/6GI+mbgCLDfVfUExUfgOQVAePnb j7FvT+IQnYmxdkNirwHTpqmhFyf9TzfPRr+xRlu3KVAIxDpUgdkIL57hUYYFv9rZ NnvZM8soGus/52dgFDD8bJkZfmKJApdycNTXtQO32XjGVtfTdpEX/oppDyGfVgNr /pEr+e1T82K38T+O8NZSA4+a4/197GXoaf1U+tY+HmGGRc3LVcaXhCGNV4UvcVdV KeOaOs7fSgsem8SUCWS3srcqOLltkok= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:56 2025 by rpki-client