$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa File: d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa (raw, json) Hash identifier: ELCa3T8G2FCGLHikE07wQ3kxcyhfX5G3FI+0vi15zzw= Subject key identifier: B7:DC:9C:F0:DB:A1:F9:89:42:84:B1:BD:CD:AA:FC:F6:CF:30:3C:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAEDF18113FC8FD6D33C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.123.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ae:df:18:11:3f:c8:fd:6d:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5ffc4c7a-c86b-4ff7-956f-0efcc1fb3673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:62:ef:13:b3:60:7c:9b:b6:6d:a0:ef:f8: ca:a8:01:ce:9e:d7:f0:42:6a:9c:0a:29:a4:ec:10: 1e:0b:58:7c:28:63:21:ab:e4:05:34:f5:bd:c7:53: c5:2c:88:01:5f:cc:5d:fa:26:95:0a:36:13:a4:55: 02:80:bb:b0:3d:53:75:b8:7d:60:ac:78:88:bd:09: bb:be:f3:3e:0d:90:66:a2:22:00:d2:36:d9:a0:5c: 6f:cf:07:40:b1:c2:68:6b:83:2c:6f:75:91:96:ee: bf:73:cb:cc:f4:bf:14:ab:36:29:7e:2f:9a:c7:07: 8b:26:13:1c:1a:6c:d7:f2:01:48:f6:60:4e:d3:fe: 39:54:59:76:59:af:e9:2a:70:f8:de:8a:1a:3f:b5: 16:ab:3f:40:9d:55:24:52:75:57:45:6f:56:d6:af: c0:db:fe:2b:2e:38:11:92:73:f6:3e:3a:1a:8e:bc: 55:d5:74:2d:37:58:24:4c:dc:de:af:89:9e:f3:6b: b1:2f:ba:22:4d:95:56:84:9c:d7:73:0d:72:74:66: ad:c9:ff:c3:c5:b1:5e:2c:0b:26:7b:26:59:f8:1e: 49:45:06:98:39:d5:6a:01:69:81:4c:08:c9:54:ac: 07:1d:85:7b:3d:e1:16:48:7b:de:5c:5c:e0:7f:06: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DC:9C:F0:DB:A1:F9:89:42:84:B1:BD:CD:AA:FC:F6:CF:30:3C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d34fff41-9b1f-30a3-baab-7eddabca8e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:de:a0:e6:80:e2:f9:1d:10:9f:c5:48:bf:8e:13:7f:85:41: b5:10:b7:ac:83:53:99:ab:dd:d8:fd:a2:96:32:c0:7c:49:d9: cc:e2:68:3b:8f:26:22:c1:29:8c:fa:15:54:7a:c0:cb:e7:ef: ea:af:04:fd:c4:28:77:62:86:c5:06:3a:f7:f3:39:9b:cc:41: 16:c4:fb:be:66:f9:b1:f6:1e:f4:88:63:47:44:2c:b6:5e:13: a3:93:90:b8:a4:c2:34:1a:13:46:fd:ea:2b:fe:87:80:aa:03: 0c:e3:01:6a:72:d4:2e:20:56:a6:51:2f:e8:75:1c:3c:d1:d4: 0a:30:38:5a:d7:60:cd:52:2c:c0:51:94:85:b7:18:47:3e:cf: b1:ec:6a:56:a8:87:64:bd:4d:fd:77:77:52:ec:40:71:d5:b2: 25:48:04:5a:45:3e:7b:81:3c:da:8e:d7:c1:6e:ed:8c:2a:9e: 25:9a:f8:30:eb:5b:de:c8:4d:e3:4c:06:78:96:17:58:5e:bf: f3:d4:60:e7:9d:f2:c8:41:f2:9a:18:38:d7:fb:26:4f:ce:cf: a7:66:bc:4c:3a:38:a2:48:e1:ef:1b:7f:58:15:6a:98:32:e0: 5d:a9:1e:09:e1:2f:58:26:98:11:d9:de:a0:e3:01:8e:73:25: 8d:d8:6f:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS67fGBE/yP1tM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWZmYzRjN2EtYzg2Yi00ZmY3LTk1NmYtMGVmY2MxZmIzNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKRi7xOzYHybtm2g7/jKqAHOntfwQmqcCimk 7BAeC1h8KGMhq+QFNPW9x1PFLIgBX8xd+iaVCjYTpFUCgLuwPVN1uH1grHiIvQm7 vvM+DZBmoiIA0jbZoFxvzwdAscJoa4Msb3WRlu6/c8vM9L8UqzYpfi+axweLJhMc GmzX8gFI9mBO0/45VFl2Wa/pKnD43ooaP7UWqz9AnVUkUnVXRW9W1q/A2/4rLjgR knP2PjoajrxV1XQtN1gkTNzer4me82uxL7oiTZVWhJzXcw1ydGatyf/DxbFeLAsm eyZZ+B5JRQaYOdVqAWmBTAjJVKwHHYV7PeEWSHveXFzgfwYnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfcnPDbofmJQoSxvc2q/PbPMDxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM0ZmZmNDEtOWIxZi0z MGEzLWJhYWItN2VkZGFiY2E4ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIntQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfeoOaA4vkdEJ/FSL+OE3+FQbUQt6yDU5mr3dj9opYywHxJ2cziaDuP JiLBKYz6FVR6wMvn7+qvBP3EKHdihsUGOvfzOZvMQRbE+75m+bH2HvSIY0dELLZe E6OTkLikwjQaE0b96iv+h4CqAwzjAWpy1C4gVqZRL+h1HDzR1AowOFrXYM1SLMBR lIW3GEc+z7Hsalaoh2S9Tf13d1LsQHHVsiVIBFpFPnuBPNqO18Fu7YwqniWa+DDr W97ITeNMBniWF1hev/PUYOed8shB8poYONf7Jk/Oz6dmvEw6OKJI4e8bf1gVapgy 4F2pHgnhL1gmmBHZ3qDjAY5zJY3YbwI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:20 2025 by rpki-client