$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa File: d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa (raw, json) Hash identifier: iZSLOmrOxTfjLerKVvDEup7sxV2+AtoJdqzEhAlX0qU= Subject key identifier: BD:7B:8D:93:20:87:A9:BC:EC:D8:CB:DA:41:30:B7:40:10:10:31:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C023EB13A81EB12583520 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.67.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:02:3e:b1:3a:81:eb:12:58:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5f65e803-bfe8-4f1a-93bf-dd00ad4753ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:32:06:5b:ca:c9:9a:83:62:37:eb:33:99: 64:15:56:5b:cd:2a:21:c9:f6:30:bb:26:6b:92:17: 03:f2:9b:3f:09:2b:62:ce:fc:b2:10:e7:8b:83:03: 75:0f:b7:f0:fc:30:db:fa:e2:67:6c:40:a3:43:1b: b4:8e:a8:51:42:e3:92:12:2f:b6:87:24:f3:1b:e4: 36:82:78:e6:3d:e0:e0:c7:f9:81:59:87:c4:9d:c4: c4:74:4b:b9:be:b1:be:2a:c7:d8:a7:e9:29:0c:46: f6:9a:86:83:ec:a1:51:e5:6b:1c:fa:12:21:7e:97: 31:00:4c:3d:56:83:18:90:bb:9d:da:1a:63:03:fe: 02:a1:25:f4:27:64:01:db:ea:40:8b:ba:b7:35:e8: a9:6b:0f:c1:c3:23:38:d6:ff:cf:96:90:fa:e5:3c: 60:f5:42:e6:63:d5:46:72:71:a7:4c:bb:2f:94:0c: 18:07:4f:f8:ae:79:d4:db:75:ef:72:4d:92:3d:3a: 9d:86:cf:91:08:d4:a4:f1:75:04:5d:ed:7e:35:6e: be:16:95:94:ba:66:26:91:de:d8:bd:ff:74:9f:15: 09:97:61:54:e2:8e:a1:30:1d:7e:c6:ac:d9:2c:2f: e5:28:6b:1e:52:95:ff:0b:b5:64:05:64:16:14:f5: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7B:8D:93:20:87:A9:BC:EC:D8:CB:DA:41:30:B7:40:10:10:31:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1810a98-22c1-345e-bdfb-5d2ab4cfb304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:85:b0:35:6f:b7:df:61:13:3b:e2:dd:91:7e:74:f8:2b:48: 61:ef:36:06:57:18:4b:29:c1:19:92:17:02:37:c8:9a:cf:3d: ee:5d:ac:0d:22:a8:5c:63:70:95:0a:64:93:e7:8c:7a:f9:1b: 44:02:57:4f:f9:66:5e:e5:24:dc:e3:1a:f9:24:40:ad:bc:f2: 99:f1:00:e8:b6:05:91:f7:04:ef:f0:fb:ae:bb:78:04:2d:bb: e8:03:ca:e1:dd:3f:74:05:13:80:42:4a:4e:15:67:1d:61:c0: d5:86:0f:f0:53:03:f2:2e:c4:05:a4:99:a1:d4:1e:74:2f:ee: dd:f0:37:04:4e:2d:16:cf:36:da:bf:75:e8:98:45:03:8e:19: e6:47:d6:f3:8b:dc:41:4a:cc:c9:a6:87:a3:49:6e:4a:fc:77: 02:ec:a9:5f:66:e8:25:87:0e:f5:5f:fb:0d:7a:e4:26:90:a5: d6:7e:ed:4d:ec:ee:a2:ae:d5:10:36:35:48:f2:2d:ca:db:12: 2f:a0:3f:0b:ae:8c:e0:eb:8f:65:89:94:26:3a:4f:26:38:a7: 62:99:4b:4c:51:2d:eb:92:bc:45:d4:d6:fb:69:93:f4:6f:a5: d5:e0:e7:03:d9:80:78:83:fd:ca:33:98:6f:46:94:62:da:38: c2:70:07:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAI+sTqB6xJYNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWY2NWU4MDMtYmZlOC00ZjFhLTkzYmYtZGQwMGFkNDc1M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5UyBlvKyZqDYjfrM5lkFVZbzSohyfYwuyZr khcD8ps/CStizvyyEOeLgwN1D7fw/DDb+uJnbECjQxu0jqhRQuOSEi+2hyTzG+Q2 gnjmPeDgx/mBWYfEncTEdEu5vrG+KsfYp+kpDEb2moaD7KFR5Wsc+hIhfpcxAEw9 VoMYkLud2hpjA/4CoSX0J2QB2+pAi7q3Neipaw/BwyM41v/PlpD65Txg9ULmY9VG cnGnTLsvlAwYB0/4rnnU23Xvck2SPTqdhs+RCNSk8XUEXe1+NW6+FpWUumYmkd7Y vf90nxUJl2FU4o6hMB1+xqzZLC/lKGseUpX/C7VkBWQWFPUIWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL17jZMgh6m87NjL2kEwt0AQEDGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDE4MTBhOTgtMjJjMS0z NDVlLWJkZmItNWQyYWI0Y2ZiMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaFsDVvt99hEzvi3ZF+dPgrSGHvNgZXGEspwRmSFwI3yJrPPe5drA0i qFxjcJUKZJPnjHr5G0QCV0/5Zl7lJNzjGvkkQK288pnxAOi2BZH3BO/w+667eAQt u+gDyuHdP3QFE4BCSk4VZx1hwNWGD/BTA/IuxAWkmaHUHnQv7t3wNwROLRbPNtq/ deiYRQOOGeZH1vOL3EFKzMmmh6NJbkr8dwLsqV9m6CWHDvVf+w165CaQpdZ+7U3s 7qKu1RA2NUjyLcrbEi+gPwuujODrj2WJlCY6TyY4p2KZS0xRLeuSvEXU1vtpk/Rv pdXg5wPZgHiD/cozmG9GlGLaOMJwB5U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:29 2025 by rpki-client