$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa File: d45e4854-2481-3de3-ae93-5079464c2fae.roa (raw, json) Hash identifier: VC1YCLm6p9j31pURASyAiTY0Dc2hG6Iny9Upw/j4l70= Subject key identifier: F6:BD:FD:FD:0C:71:50:C8:97:E8:38:2B:F8:A8:12:0E:71:B1:D0:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC72C3CED6CA699AFA880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.71.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c7:2c:3c:ed:6c:a6:99:af:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=83e0b814-180e-4d1f-8422-4e3be1b5b835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:5f:33:87:07:33:23:2f:9a:f2:33:8d:7d: d3:8c:bf:98:13:b2:1b:8e:93:eb:75:8b:b2:88:55: 5e:1f:5d:6d:e9:da:e3:f9:8b:db:20:ba:c8:6b:fe: 9b:fb:a6:5f:96:10:df:ac:d2:7c:55:b2:0a:67:96: 91:c5:9b:32:07:34:ed:88:a8:06:99:ac:c5:5b:45: 8b:0c:9e:64:ef:55:0f:f6:be:23:3b:5d:81:f3:25: 04:2e:8f:8f:11:14:16:c4:0a:6d:6b:9a:35:96:5e: e9:76:35:29:9d:22:1c:a7:85:71:94:bf:8f:cd:24: 94:0b:86:6b:e8:2f:f7:7a:ec:3c:94:63:a1:04:2e: d3:f1:36:ee:01:a1:21:03:b1:89:55:e8:72:16:0f: 1f:97:5f:90:92:68:d5:26:e8:41:05:71:08:ff:8f: ef:8f:0c:16:70:7e:fe:7f:a0:0d:33:98:fc:55:ce: b3:fa:12:73:39:57:9a:cb:74:f9:94:87:ba:8a:e1: 97:18:94:9b:01:e7:2c:7f:70:75:a0:fb:51:14:18: d1:21:cb:5e:4c:05:8a:a3:f9:7e:d2:d1:da:96:55: 0a:97:f4:78:1f:c1:61:62:d1:1c:09:d5:4e:ef:fd: 1e:ca:53:95:cf:b3:78:76:25:70:ab:15:4c:6c:4b: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:FD:FD:0C:71:50:C8:97:E8:38:2B:F8:A8:12:0E:71:B1:D0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:8e:fb:fa:6c:d1:7c:ec:38:c4:8e:63:bc:8a:1e:54:4a:25: eb:71:45:af:fb:37:cc:19:32:61:56:7d:51:d1:ca:ad:a6:e8: 64:8c:60:b5:bc:2c:24:de:75:9f:c9:76:5b:61:8d:7f:0a:b7: 66:c5:61:63:8f:df:8c:be:eb:5f:50:01:75:01:1e:63:8e:f3: 5a:aa:01:c4:0c:3c:1b:c7:dc:80:a6:1b:f9:d7:50:f5:1a:65: 7c:b8:2b:4e:86:9f:09:da:0c:ef:85:c6:04:48:b8:56:1c:36: 6e:1b:bf:ca:e1:08:dd:f2:2c:40:93:78:1f:e4:e0:6a:ff:45: 12:05:28:8c:36:8e:b6:df:aa:90:91:c8:bd:19:63:d9:6f:17: 4e:13:81:cb:89:88:cf:3b:45:50:90:69:b5:7b:87:31:26:22: 01:4d:0b:83:d3:30:7a:74:e3:11:0b:ba:a0:f6:e6:10:26:0f: 6c:92:75:70:b1:a9:e2:99:7c:35:8b:8d:48:2b:52:f0:79:f9: 16:e6:1b:cb:6f:a9:54:88:20:1a:95:43:b5:f9:3d:68:c1:53: b1:ac:f2:3a:85:1e:39:be:51:d0:cf:61:68:5b:59:dc:7a:0b: 93:7c:7d:ac:ef:39:ba:a1:4e:1a:bd:3b:5f:b9:be:c2:33:e6: 7b:ef:a1:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8csPO1sppmvqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODNlMGI4MTQtMTgwZS00ZDFmLTg0MjItNGUzYmUxYjViODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjVfM4cHMyMvmvIzjX3TjL+YE7IbjpPrdYuy iFVeH11t6drj+YvbILrIa/6b+6ZflhDfrNJ8VbIKZ5aRxZsyBzTtiKgGmazFW0WL DJ5k71UP9r4jO12B8yUELo+PERQWxApta5o1ll7pdjUpnSIcp4VxlL+PzSSUC4Zr 6C/3euw8lGOhBC7T8TbuAaEhA7GJVehyFg8fl1+QkmjVJuhBBXEI/4/vjwwWcH7+ f6ANM5j8Vc6z+hJzOVeay3T5lIe6iuGXGJSbAecsf3B1oPtRFBjRIcteTAWKo/l+ 0tHallUKl/R4H8FhYtEcCdVO7/0eylOVz7N4diVwqxVMbEu08QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa9/f0McVDIl+g4K/ioEg5xsdAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQ1ZTQ4NTQtMjQ4MS0z ZGUzLWFlOTMtNTA3OTQ2NGMyZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGO+/ps0XzsOMSOY7yKHlRKJetxRa/7N8wZMmFWfVHRyq2m6GSMYLW8 LCTedZ/JdlthjX8Kt2bFYWOP34y+619QAXUBHmOO81qqAcQMPBvH3ICmG/nXUPUa ZXy4K06GnwnaDO+FxgRIuFYcNm4bv8rhCN3yLECTeB/k4Gr/RRIFKIw2jrbfqpCR yL0ZY9lvF04TgcuJiM87RVCQabV7hzEmIgFNC4PTMHp04xELuqD25hAmD2ySdXCx qeKZfDWLjUgrUvB5+RbmG8tvqVSIIBqVQ7X5PWjBU7Gs8jqFHjm+UdDPYWhbWdx6 C5N8fazvObqhThq9O1+5vsIz5nvvoaI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:38 2025 by rpki-client