$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa File: d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa (raw, json) Hash identifier: ggvQKbdbhviggc6/DRh/wlYs/+e9DMsBzordmMQR99U= Subject key identifier: 56:B2:2B:06:09:52:57:ED:97:F7:96:61:F3:16:20:72:BC:12:D6:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58223097420766C36E7E700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:23:09:74:20:76:6c:36:e7:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=86c3bff2-6271-41e6-92c8-9970eba10a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:01:c1:ff:95:69:f5:14:3e:5d:58:f2:31: e1:69:00:06:2f:96:cc:48:c4:4f:91:24:12:03:a8: 58:92:7e:f4:38:4d:a9:de:3b:9a:70:67:22:a5:88: 07:b9:16:d2:76:09:01:20:c4:60:19:24:95:28:61: 5c:23:07:11:46:dc:33:24:64:a3:b1:d9:2b:65:ec: 68:c0:b4:79:be:ad:38:8a:fe:92:b2:fd:1e:73:65: 39:d4:6c:9e:e9:eb:c9:f0:ae:13:af:08:5b:25:14: 11:1f:28:bc:aa:72:a3:0a:45:44:ee:1d:ff:5f:ca: 3e:9f:f2:16:4a:8e:d0:2b:df:30:59:25:38:62:5d: 5d:a3:e1:7c:64:4a:de:67:39:dd:87:d4:5e:08:f0: 46:ff:32:0c:07:ba:10:74:b4:e3:a8:86:58:3d:38: 6b:d0:bd:c8:65:d6:c0:fd:2d:06:29:97:c1:e4:19: f2:9c:fd:59:c2:1f:36:4e:4f:6e:22:4f:39:49:f8: 21:fc:9d:70:5e:be:8a:11:13:e7:be:89:b1:62:a4: 99:6d:81:a6:34:fd:f0:8b:31:9d:13:59:46:89:88: a9:4f:93:ab:5a:a4:ce:0e:dc:c0:40:92:9f:3e:62: 85:97:1c:4a:09:4c:4f:f4:18:b5:fd:9b:a8:4b:6c: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:2B:06:09:52:57:ED:97:F7:96:61:F3:16:20:72:BC:12:D6:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2a125a9-25bf-3937-bdc9-7aaa460ffe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:be:28:79:74:55:5b:b0:bd:4d:84:35:60:5e:41:6f:95:07: 72:c7:b3:51:87:7a:65:5e:8d:53:2d:88:e7:cd:78:45:b2:41: ed:bd:10:be:7d:64:a5:5d:4d:b7:77:1c:13:c8:07:ea:73:9e: ef:9c:96:0e:71:16:97:61:32:8e:a7:b1:99:94:c3:bd:6c:90: 4e:86:8a:c6:b8:61:3a:2f:84:0c:d8:fe:19:6f:15:0a:05:4e: 4e:21:91:05:1e:23:f9:a8:bb:03:fe:ba:fa:8d:1c:f5:05:10: bd:ed:6c:3e:30:a1:2b:51:c9:c8:b0:94:51:87:2a:35:6b:1b: 71:1f:7d:48:e7:fd:cb:e5:2d:82:db:d5:e2:fa:8b:65:89:17: 7e:0f:bc:38:16:28:8d:e0:af:5b:30:77:bd:25:85:07:39:6e: 31:b6:ea:14:83:e0:63:eb:85:d9:46:91:92:c2:7a:c6:0a:61: b7:5e:24:34:46:16:cb:2b:09:b7:3d:7e:f2:6f:52:91:d5:ee: 4a:02:ba:2b:39:c1:38:00:e7:4d:0b:e9:0c:d7:df:cb:cb:25: 55:9b:db:f7:cf:37:9b:5d:38:6c:7a:15:f6:68:f4:37:1c:54: 5a:97:44:48:02:2e:6c:26:21:48:a0:69:b7:be:ae:4b:f6:11: 44:26:30:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiMJdCB2bDbn5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODZjM2JmZjItNjI3MS00MWU2LTkyYzgtOTk3MGViYTEwYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvcBwf+VafUUPl1Y8jHhaQAGL5bMSMRPkSQS A6hYkn70OE2p3juacGcipYgHuRbSdgkBIMRgGSSVKGFcIwcRRtwzJGSjsdkrZexo wLR5vq04iv6Ssv0ec2U51Gye6evJ8K4TrwhbJRQRHyi8qnKjCkVE7h3/X8o+n/IW So7QK98wWSU4Yl1do+F8ZEreZzndh9ReCPBG/zIMB7oQdLTjqIZYPThr0L3IZdbA /S0GKZfB5BnynP1Zwh82Tk9uIk85Sfgh/J1wXr6KERPnvomxYqSZbYGmNP3wizGd E1lGiYipT5OrWqTODtzAQJKfPmKFlxxKCUxP9Bi1/ZuoS2zstQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFayKwYJUlftl/eWYfMWIHK8Etb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJhMTI1YTktMjViZi0z OTM3LWJkYzktN2FhYTQ2MGZmZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu+KHl0VVuwvU2ENWBeQW+VB3LHs1GHemVejVMtiOfNeEWyQe29EL59 ZKVdTbd3HBPIB+pznu+clg5xFpdhMo6nsZmUw71skE6Gisa4YTovhAzY/hlvFQoF Tk4hkQUeI/mouwP+uvqNHPUFEL3tbD4woStRyciwlFGHKjVrG3EffUjn/cvlLYLb 1eL6i2WJF34PvDgWKI3gr1swd70lhQc5bjG26hSD4GPrhdlGkZLCesYKYbdeJDRG FssrCbc9fvJvUpHV7koCuis5wTgA500L6QzX38vLJVWb2/fPN5tdOGx6FfZo9Dcc VFqXREgCLmwmIUigabe+rkv2EUQmMIw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:23 2025 by rpki-client