$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d04eca6d-63a0-3962-bc79-233542d8511a.roa File: d04eca6d-63a0-3962-bc79-233542d8511a.roa (raw, json) Hash identifier: CtXTLBM7dNlXRx0w1B7r/6Wkxq8oBQi7TOZ8g5W3F/c= Subject key identifier: 83:D1:DB:85:65:5E:B6:C8:32:88:A9:71:63:7C:73:AA:13:72:59:12 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0719C5F4E1229CB21000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d04eca6d-63a0-3962-bc79-233542d8511a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.67.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:07:19:c5:f4:e1:22:9c:b2:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7179863b-3487-44bd-97f1-5f9a1ade0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:21:9d:bb:d5:3f:89:26:ee:97:fe:60:c0:d7: 92:b8:bd:7d:fd:fc:12:8b:f3:2f:86:2b:de:ad:94: 79:13:4a:73:85:27:74:ac:2f:4e:cd:ea:40:05:35: c6:68:c9:e1:1b:9a:ee:10:57:47:3b:02:da:9e:b5: e6:f7:39:4a:43:67:ed:12:20:6e:17:57:77:34:91: 72:1a:0a:1d:cf:c4:c5:cc:a3:f4:fa:d1:94:92:0e: a5:90:ee:87:62:d1:bf:5a:d2:16:ad:57:74:9d:f6: e8:bd:3a:fe:f9:f0:57:bb:b5:75:2f:41:8a:9e:13: ce:53:fb:c3:2c:4f:21:ef:fa:7d:d8:88:0a:28:6b: df:69:63:3b:1b:91:cb:e9:58:47:9f:95:31:65:ea: 38:2b:65:92:38:0d:a0:1a:9e:7f:1b:60:74:b2:5f: a5:55:df:5b:e7:60:2d:78:da:fb:fa:c6:ac:ed:46: b1:80:a5:83:72:12:54:0d:47:37:1e:bf:7f:62:f1: 5e:94:47:74:58:23:16:43:7f:31:96:04:79:8f:11: cd:52:58:2e:c2:3d:d6:1d:4d:65:9a:50:52:df:36: 30:23:0d:1c:36:1c:74:3c:ba:2c:27:d2:46:56:83: 72:11:88:9c:d3:55:85:86:81:18:db:f9:49:4c:d6: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D1:DB:85:65:5E:B6:C8:32:88:A9:71:63:7C:73:AA:13:72:59:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d04eca6d-63a0-3962-bc79-233542d8511a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0f:41:02:14:fa:9d:86:86:2d:d8:e0:4a:84:24:7f:90:8a: 9c:cb:3f:f7:27:df:6d:d5:a4:0a:45:86:b1:1e:6b:03:ae:67: f6:13:50:cd:63:0b:fd:17:e2:ae:1c:13:fc:52:b3:46:55:4f: b5:e8:56:d7:fd:06:bc:e1:ac:6c:92:60:be:3b:ac:cf:0d:48: 7e:c4:ec:9a:e0:76:6e:86:5e:63:c5:24:85:45:8e:15:9b:9a: da:d7:d6:b5:21:81:c8:e7:64:ae:e0:57:64:36:17:3d:de:c2: 05:99:87:c4:2d:4c:a3:58:9a:4d:2d:fb:c1:26:ae:d6:c5:59: 0e:9c:28:bf:a6:f1:13:d1:13:55:30:5b:d5:23:da:a9:8b:3b: 55:18:88:b6:79:ac:21:82:56:ef:07:6e:ba:6b:45:75:ca:66: 81:9e:34:27:b4:8f:27:33:09:34:fc:66:b3:13:bb:fc:40:9f: bd:f1:3b:e7:cb:ae:44:13:72:ad:8b:f0:69:ac:b9:51:67:14: d3:92:c3:3a:90:4d:90:04:c5:3a:42:48:4f:10:46:68:0f:d5: 2b:6f:87:88:4a:04:9e:a7:b3:ff:12:33:8f:c8:61:89:a4:53: 9a:77:2e:27:5a:49:46:35:4d:d2:8c:48:5d:74:63:d7:d8:57: ed:ad:4e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAcZxfThIpyyEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzE3OTg2M2ItMzQ4Ny00NGJkLTk3ZjEtNWY5YTFhZGUwNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCGdu9U/iSbul/5gwNeSuL19/fwSi/Mvhive rZR5E0pzhSd0rC9OzepABTXGaMnhG5ruEFdHOwLanrXm9zlKQ2ftEiBuF1d3NJFy Ggodz8TFzKP0+tGUkg6lkO6HYtG/WtIWrVd0nfbovTr++fBXu7V1L0GKnhPOU/vD LE8h7/p92IgKKGvfaWM7G5HL6VhHn5UxZeo4K2WSOA2gGp5/G2B0sl+lVd9b52At eNr7+sas7UaxgKWDchJUDUc3Hr9/YvFelEd0WCMWQ38xlgR5jxHNUlguwj3WHU1l mlBS3zYwIw0cNhx0PLosJ9JGVoNyEYic01WFhoEY2/lJTNYw7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPR24VlXrbIMoipcWN8c6oTclkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDA0ZWNhNmQtNjNhMC0z OTYyLWJjNzktMjMzNTQyZDg1MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsPQQIU+p2Ghi3Y4EqEJH+QipzLP/cn323VpApFhrEeawOuZ/YTUM1j C/0X4q4cE/xSs0ZVT7XoVtf9BrzhrGySYL47rM8NSH7E7Jrgdm6GXmPFJIVFjhWb mtrX1rUhgcjnZK7gV2Q2Fz3ewgWZh8QtTKNYmk0t+8EmrtbFWQ6cKL+m8RPRE1Uw W9Uj2qmLO1UYiLZ5rCGCVu8HbrprRXXKZoGeNCe0jyczCTT8ZrMTu/xAn73xO+fL rkQTcq2L8GmsuVFnFNOSwzqQTZAExTpCSE8QRmgP1Stvh4hKBJ6ns/8SM4/IYYmk U5p3LidaSUY1TdKMSF10Y9fYV+2tTpA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:06 2025 by rpki-client