$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa File: d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa (raw, json) Hash identifier: SLbT4oqg/gik4Z716bHExERqozmS9DcwzGQg3r0ogUE= Subject key identifier: B9:F2:A6:24:1F:E8:95:D3:B3:88:76:2A:45:7E:2E:0F:76:18:D5:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEA20BB3F5A28359E2580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.134.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ea:20:bb:3f:5a:28:35:9e:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=aa2710f9-33f9-4922-8320-f8be55f100df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:c5:2a:84:ff:c3:d3:f7:ac:ac:0e:06:cb: 5d:d5:ca:bd:b3:fd:ab:7a:95:82:18:4b:84:f3:88: b7:de:56:b9:2b:a5:33:c4:f8:39:8d:cf:f7:0d:09: 80:df:b8:8f:01:78:13:99:eb:96:a9:64:d5:33:33: 57:77:93:db:d7:90:72:8b:6c:ce:9b:57:19:28:04: 00:fb:0d:bc:3d:1a:ae:f8:01:34:90:59:8b:4f:63: 49:42:3b:e1:7a:8d:2a:23:ba:60:e1:d5:fd:59:35: fe:dc:5a:78:4b:7f:57:24:f3:9e:2b:0a:49:54:44: 28:e2:a2:4f:5b:cf:40:62:1b:9c:43:c0:8c:d1:fa: 24:7a:36:29:53:ee:c9:56:95:87:fc:f8:6d:13:2a: 65:ce:3b:e1:05:e5:15:fa:2a:8d:07:fb:22:46:a7: b6:a7:25:0e:a3:b4:91:33:b6:fd:4f:01:5c:fe:9c: e4:6d:06:7f:cb:64:c1:91:18:57:eb:fe:59:bf:42: 88:a5:8b:05:7f:e7:98:6e:ef:75:45:e7:8f:ac:e6: 76:4e:fe:72:7d:b7:ea:c8:b3:9f:7d:43:b5:c2:ac: b2:4c:98:92:94:50:f6:27:97:a4:ea:68:7d:09:37: 84:49:21:93:72:9c:0c:a5:60:13:b1:a3:08:08:57: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:A6:24:1F:E8:95:D3:B3:88:76:2A:45:7E:2E:0F:76:18:D5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2d2db9a-892e-33cc-80a5-e5babb3d52b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2e:27:be:d1:88:10:e4:ff:ec:42:b7:41:8e:9a:fc:7a:64: 91:c7:de:b0:fb:4d:af:39:db:dd:34:7a:3f:30:a6:22:cc:e5: 06:ce:dc:a7:ec:ec:82:1b:96:33:1e:21:a6:fb:49:fa:a4:04: 8f:7d:02:d0:d7:d5:16:af:15:07:02:d4:b5:e1:1b:9a:76:47: 91:6f:63:6e:58:3e:b3:bd:75:2f:21:09:ad:e0:a4:d3:27:21: 9e:72:ac:ba:fb:6d:ad:f2:dc:85:31:d4:ea:1c:07:15:64:47: 6b:1b:31:8f:19:ba:e0:ce:c1:5f:53:67:65:8f:78:61:93:28: 1f:c7:b2:c2:4b:eb:48:22:ee:f9:32:f2:50:d2:92:aa:cb:f3: 45:58:96:32:37:98:25:53:5b:90:6e:94:3b:e8:0c:c9:28:ca: f7:62:a6:d0:79:6e:3c:b5:d6:f4:51:8a:62:23:f1:96:25:51: ee:1e:cc:65:c0:2c:ca:72:de:df:a1:5c:c2:47:95:1d:86:1f: 18:7f:d8:d5:4a:c1:fa:da:2f:f7:9f:78:54:07:88:17:72:c0: 43:2f:dd:96:72:de:18:70:9b:94:72:2f:8a:ca:cd:31:8f:62: 06:e9:c4:dd:c4:ac:e6:a5:c4:92:15:22:ff:c3:f3:ce:1f:90: ea:77:d8:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+oguz9aKDWeJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWEyNzEwZjktMzNmOS00OTIyLTgzMjAtZjhiZTU1ZjEwMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIrFKoT/w9P3rKwOBstd1cq9s/2repWCGEuE 84i33la5K6UzxPg5jc/3DQmA37iPAXgTmeuWqWTVMzNXd5Pb15Byi2zOm1cZKAQA +w28PRqu+AE0kFmLT2NJQjvheo0qI7pg4dX9WTX+3Fp4S39XJPOeKwpJVEQo4qJP W89AYhucQ8CM0fokejYpU+7JVpWH/PhtEyplzjvhBeUV+iqNB/siRqe2pyUOo7SR M7b9TwFc/pzkbQZ/y2TBkRhX6/5Zv0KIpYsFf+eYbu91ReePrOZ2Tv5yfbfqyLOf fUO1wqyyTJiSlFD2J5ek6mh9CTeESSGTcpwMpWATsaMICFee0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnypiQf6JXTs4h2KkV+Lg92GNUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJkMmRiOWEtODkyZS0z M2NjLTgwYTUtZTViYWJiM2Q1MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsuJ77RiBDk/+xCt0GOmvx6ZJHH3rD7Ta852900ej8wpiLM5QbO3Kfs 7IIbljMeIab7SfqkBI99AtDX1RavFQcC1LXhG5p2R5FvY25YPrO9dS8hCa3gpNMn IZ5yrLr7ba3y3IUx1OocBxVkR2sbMY8ZuuDOwV9TZ2WPeGGTKB/HssJL60gi7vky 8lDSkqrL80VYljI3mCVTW5BulDvoDMkoyvdiptB5bjy11vRRimIj8ZYlUe4ezGXA LMpy3t+hXMJHlR2GHxh/2NVKwfraL/efeFQHiBdywEMv3ZZy3hhwm5RyL4rKzTGP YgbpxN3ErOalxJIVIv/D884fkOp32Es= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:33 2025 by rpki-client