$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d260a877-52ff-3894-9012-c3ab514886e3.roa File: d260a877-52ff-3894-9012-c3ab514886e3.roa (raw, json) Hash identifier: yQxOwAi/M5TfeTYOOI3YYqlXfowWpRY/c2KN04S/UMg= Subject key identifier: 33:D9:B1:69:C8:9A:2B:CB:4A:74:AD:72:94:56:D3:D7:7A:8F:F6:5A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDAEBE484555E99106D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d260a877-52ff-3894-9012-c3ab514886e3.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.64.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:da:eb:e4:84:55:5e:99:10:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6f30d8e3-2bf4-407f-a1ce-62ff8baa184a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:1d:74:03:fd:d7:53:17:5a:63:7c:32:a6: 73:c9:73:97:d9:8b:74:9b:5a:b2:49:07:e0:63:ba: 37:c4:e4:cd:8f:0d:4a:65:1b:ed:73:28:4b:0c:b3: 0b:3a:b5:d6:07:91:2a:22:ba:c9:23:cd:26:41:74: 1e:d1:15:29:e4:c2:e0:e2:d4:63:c8:ac:f3:4c:53: fe:13:e4:f2:f8:75:96:83:58:0c:ca:45:46:c5:d1: 3b:8d:2f:b8:85:56:ff:86:5d:fb:a8:c5:4c:18:65: f6:e3:7b:b2:67:36:cc:c6:14:c0:97:c2:95:0d:f4: 5f:3e:56:23:95:34:07:b1:02:47:01:74:d6:46:2b: 57:7a:d3:51:c9:52:6f:1a:fa:ce:94:bb:18:2e:58: 63:0c:93:39:98:27:77:e5:6c:ea:2c:62:46:25:24: 34:21:e0:11:9a:5f:9f:27:a8:7c:43:4d:1c:4e:20: d5:64:d4:93:93:b2:ea:8c:bf:8a:21:48:e9:86:9f: 11:f6:f3:16:0e:f3:66:d4:3e:13:68:af:85:55:c2: b8:6b:06:26:55:b1:f5:ff:a1:46:54:e9:2c:f9:23: ac:01:79:aa:e8:3c:34:e9:67:34:47:85:ff:54:8e: ca:4c:44:3a:be:78:6d:ad:f5:5c:68:c7:0c:62:f6: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D9:B1:69:C8:9A:2B:CB:4A:74:AD:72:94:56:D3:D7:7A:8F:F6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d260a877-52ff-3894-9012-c3ab514886e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b0:d4:38:a5:78:8e:c0:61:e7:18:f2:c2:04:43:f4:97:c1: 43:06:e1:ad:d1:06:10:d8:da:f9:e1:df:41:fe:bb:4e:44:40: e6:65:fb:01:08:21:ee:95:c0:27:ff:d3:62:a5:2a:c3:e1:85: a9:60:ad:86:67:d3:85:2c:a5:c8:27:fd:ed:00:b7:e8:dc:03: 77:e7:c5:5e:eb:be:d3:3b:d3:02:c1:6b:6e:c6:49:bb:a4:10: 7e:7a:18:0f:b2:da:11:c6:19:1a:33:1e:c0:1a:37:41:8b:1e: 98:23:cc:eb:88:cb:59:ee:ac:09:ea:81:b8:6b:a3:88:5d:d3: 26:77:70:7f:80:00:82:76:43:b3:2c:71:75:04:25:c5:95:9f: 74:bf:9c:5a:f3:e1:10:f5:1c:af:a8:5a:02:82:e4:ca:96:2c: e3:02:c7:6a:89:8e:45:6f:ec:4c:0e:42:7b:25:d0:ee:cd:99: 5a:a2:d3:03:4b:5a:80:05:00:8e:a1:38:7b:21:bc:21:40:5c: 3d:cd:bf:6a:77:a3:be:42:bb:86:66:da:9d:af:e3:52:6b:a7: 7b:4d:31:5c:e3:e4:89:d4:57:e7:24:67:d8:03:74:c4:7e:97: ac:1c:f8:b4:b0:1e:dd:96:ca:a7:fb:62:2b:56:b9:d3:9e:ef: 63:4e:6f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9rr5IRVXpkQbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NmYzMGQ4ZTMtMmJmNC00MDdmLWExY2UtNjJmZjhiYWExODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA8ddAP911MXWmN8MqZzyXOX2Yt0m1qySQfg Y7o3xOTNjw1KZRvtcyhLDLMLOrXWB5EqIrrJI80mQXQe0RUp5MLg4tRjyKzzTFP+ E+Ty+HWWg1gMykVGxdE7jS+4hVb/hl37qMVMGGX243uyZzbMxhTAl8KVDfRfPlYj lTQHsQJHAXTWRitXetNRyVJvGvrOlLsYLlhjDJM5mCd35WzqLGJGJSQ0IeARml+f J6h8Q00cTiDVZNSTk7LqjL+KIUjphp8R9vMWDvNm1D4TaK+FVcK4awYmVbH1/6FG VOks+SOsAXmq6Dw06Wc0R4X/VI7KTEQ6vnhtrfVcaMcMYvYYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPZsWnImivLSnStcpRW09d6j/ZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDI2MGE4NzctNTJmZi0z ODk0LTkwMTItYzNhYjUxNDg4NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIkCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2w1DileI7AYecY8sIEQ/SXwUMG4a3RBhDY2vnh30H+u05EQOZl+wEI Ie6VwCf/02KlKsPhhalgrYZn04Uspcgn/e0At+jcA3fnxV7rvtM70wLBa27GSbuk EH56GA+y2hHGGRozHsAaN0GLHpgjzOuIy1nurAnqgbhro4hd0yZ3cH+AAIJ2Q7Ms cXUEJcWVn3S/nFrz4RD1HK+oWgKC5MqWLOMCx2qJjkVv7EwOQnsl0O7NmVqi0wNL WoAFAI6hOHshvCFAXD3Nv2p3o75Cu4Zm2p2v41Jrp3tNMVzj5InUV+ckZ9gDdMR+ l6wc+LSwHt2Wyqf7YitWudOe72NObxs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:46 2025 by rpki-client