$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa File: d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa (raw, json) Hash identifier: lC1aCsIhs241biu80v7jNEJY6ApyCJztVVH30qLih5A= Subject key identifier: 40:4A:B9:A7:1F:61:AF:0C:D7:EA:A0:31:2E:AA:1A:5F:23:AB:3F:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDA11FC2403FC101E5800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.99.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:da:11:fc:24:03:fc:10:1e:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=822a9a96-19b4-4827-b173-f6c3550fa8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:db:af:b8:8d:fe:42:cc:f0:3c:3a:da:ef: e6:09:68:32:7c:fb:6a:fa:9d:d4:e9:80:ce:b4:1d: 01:73:c9:70:d9:83:da:a1:19:d2:52:a0:ca:b0:f5: 30:6e:2b:81:24:67:4d:20:c1:16:03:27:4d:fe:6e: 60:bc:b4:5f:bf:4e:df:21:e3:94:a4:3f:72:b5:44: 16:66:74:d2:93:4c:19:22:41:86:36:15:fb:4c:79: 71:d3:5d:1f:a6:e4:2c:72:23:7a:b3:02:c7:cd:00: d8:81:9a:ff:29:46:a7:71:a5:fb:c9:a3:d4:7b:4d: 70:ae:bb:b7:31:b8:f1:b3:46:e4:41:33:bd:15:e3: de:16:04:c7:25:b0:5e:38:82:93:29:35:14:1f:47: 92:1c:66:dc:9a:83:ba:2a:2c:fe:af:b4:bf:ce:94: 5d:b5:9e:36:4d:39:06:5f:32:69:37:3b:8c:f6:1a: 74:fc:e0:d4:f8:05:eb:fd:01:6b:47:be:77:5c:73: f6:04:ea:7e:94:92:f1:d5:b4:d5:5d:14:85:7b:53: a8:1a:d4:70:7b:37:55:59:1d:60:58:6b:3c:e4:fb: 1d:90:c6:c2:3d:af:78:bb:54:09:ef:da:bc:79:89: 4c:98:d4:51:b8:35:84:93:54:eb:fc:7b:f5:a8:23: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4A:B9:A7:1F:61:AF:0C:D7:EA:A0:31:2E:AA:1A:5F:23:AB:3F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1bdaf05-985a-355c-8b3c-5ad693a9cac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4a:85:7a:e6:29:8a:d6:72:be:52:a5:47:fa:55:0d:46:08: 57:4e:d4:f5:7e:0e:ee:0d:88:89:72:18:fe:61:dd:19:38:7e: 71:e0:f8:f3:52:06:ab:d1:70:67:e3:d4:6b:ac:41:79:01:c2: 77:9f:a0:69:cf:dc:b2:60:55:67:43:0a:7b:70:d9:01:07:3b: 01:39:b1:10:1d:7d:fa:60:9d:7a:4b:6b:43:8f:3e:c8:4e:fd: ad:9c:05:30:18:b6:d3:9d:ec:f2:9d:35:b3:e7:90:43:32:84: 0a:34:c1:1e:9a:81:43:61:02:dd:90:d9:13:62:44:e8:6d:eb: 28:67:8b:f2:6f:64:f2:6e:07:77:67:4a:dd:e0:f3:d0:83:2b: e2:f0:1c:e8:11:d3:53:b4:66:c7:67:2a:ca:c5:b0:91:1b:f8: 39:20:35:03:21:e7:c2:f1:39:b8:e9:a8:20:44:d4:fd:46:fb: fc:84:4c:f2:d3:82:96:67:7d:ed:98:eb:dc:a4:59:fd:20:13: c0:38:5c:b5:c0:27:88:1c:62:78:e3:3d:75:ae:a6:ab:eb:b8: ed:52:02:40:a0:60:88:4e:66:8b:b4:f6:2c:d7:b8:30:85:c9: a5:b7:3f:fb:35:1a:b9:b4:6f:2f:34:e5:ba:34:47:d3:9d:24: 2c:c2:30:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9oR/CQD/BAeWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODIyYTlhOTYtMTliNC00ODI3LWIxNzMtZjZjMzU1MGZhOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWjbr7iN/kLM8Dw62u/mCWgyfPtq+p3U6YDO tB0Bc8lw2YPaoRnSUqDKsPUwbiuBJGdNIMEWAydN/m5gvLRfv07fIeOUpD9ytUQW ZnTSk0wZIkGGNhX7THlx010fpuQsciN6swLHzQDYgZr/KUancaX7yaPUe01wrru3 Mbjxs0bkQTO9FePeFgTHJbBeOIKTKTUUH0eSHGbcmoO6Kiz+r7S/zpRdtZ42TTkG XzJpNzuM9hp0/ODU+AXr/QFrR753XHP2BOp+lJLx1bTVXRSFe1OoGtRwezdVWR1g WGs85PsdkMbCPa94u1QJ79q8eYlMmNRRuDWEk1Tr/Hv1qCMpOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBKuacfYa8M1+qgMS6qGl8jqz9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFiZGFmMDUtOTg1YS0z NTVjLThiM2MtNWFkNjkzYTljYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDImNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExKhXrmKYrWcr5SpUf6VQ1GCFdO1PV+Du4NiIlyGP5h3Rk4fnHg+PNS BqvRcGfj1GusQXkBwnefoGnP3LJgVWdDCntw2QEHOwE5sRAdffpgnXpLa0OPPshO /a2cBTAYttOd7PKdNbPnkEMyhAo0wR6agUNhAt2Q2RNiROht6yhni/JvZPJuB3dn St3g89CDK+LwHOgR01O0ZsdnKsrFsJEb+DkgNQMh58LxObjpqCBE1P1G+/yETPLT gpZnfe2Y69ykWf0gE8A4XLXAJ4gcYnjjPXWupqvruO1SAkCgYIhOZou09izXuDCF yaW3P/s1Grm0by805bo0R9OdJCzCMMo= -----END CERTIFICATE-----Generated at Fri Mar 14 08:43:00 2025 by rpki-client