$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9c71e1a-828d-3dc4-8756-089364b027d9.roa File: d9c71e1a-828d-3dc4-8756-089364b027d9.roa (raw, json) Hash identifier: Ui9CCs06pbNSVmAwpKEc6aQey7o+ZHImqeH9/PhE32s= Subject key identifier: FA:B1:B5:19:EC:1D:98:2E:F9:EA:67:53:8A:E6:20:2E:06:FC:FB:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE349C1A247BAFD223A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9c71e1a-828d-3dc4-8756-089364b027d9.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.129.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e3:49:c1:a2:47:ba:fd:22:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=58036230-6136-4e8e-a48a-2d2dae3e430c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:5e:3a:ff:9e:1f:d6:b2:b6:63:69:86:64: db:b7:5d:48:8a:e8:89:d9:88:b1:97:af:49:cb:55: 04:b9:a2:80:c1:3f:23:77:c5:22:e7:ec:a8:75:7b: ef:d9:30:49:df:dd:83:04:32:57:0d:d8:c6:7a:d8: 5b:e0:95:55:27:73:e2:f8:e4:43:1b:f4:4a:d3:49: cf:f2:e3:56:de:58:d7:41:f1:94:ee:1f:a4:ef:1c: d2:03:1c:9c:6e:6d:8d:31:e6:20:ff:0c:93:93:ac: 08:c8:ed:22:8b:a1:39:5f:e1:1a:e1:fd:5c:ca:c9: f2:10:c9:7f:43:d5:16:0f:36:40:dc:65:6f:fd:1e: f8:4f:10:b8:4b:f4:6c:b6:cc:9b:0a:c2:d7:62:5b: e5:08:c4:c0:91:eb:32:db:63:02:5a:4f:81:d6:b2: 1f:56:36:5f:d1:0b:92:19:ed:f2:3b:2b:3a:bf:a6: 04:1f:b5:52:36:bd:5d:82:f4:e8:55:ff:3c:11:6f: f9:3d:ca:3f:dd:b2:da:14:49:9c:a4:83:f6:37:c7: 5e:67:b6:e2:92:7c:67:a0:04:79:5a:7a:83:fd:5d: e9:d1:86:26:5b:6d:b5:f7:db:31:94:4c:34:23:7e: ae:1d:da:a2:7f:1d:4b:2d:f5:d3:46:a8:d6:ea:8f: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:B5:19:EC:1D:98:2E:F9:EA:67:53:8A:E6:20:2E:06:FC:FB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d9c71e1a-828d-3dc4-8756-089364b027d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:bf:7a:9b:44:18:42:8e:5e:43:1f:0e:85:d2:1e:a3:fe:46: d4:ee:2d:55:60:b7:c3:f4:3a:2b:02:35:c4:f8:cb:80:6b:f0: 32:c8:30:fe:d5:1a:a3:ae:4d:a2:18:83:d5:e4:d9:17:bf:67: 73:50:15:30:4c:c7:35:b9:7e:95:8a:23:46:78:b6:f1:55:e8: dd:07:ab:d0:e0:bd:a9:9d:5c:56:8f:26:02:0e:7f:09:9d:81: 64:be:31:04:c7:94:e1:c2:86:65:42:de:00:23:65:ef:8a:fd: 3d:65:9e:af:f3:43:8d:fb:7c:c6:ad:d1:55:e0:de:f9:6a:b2: 1f:1f:4e:8d:1e:c9:4f:22:72:ef:51:6e:67:52:96:f9:ec:02: ae:c1:33:9a:b5:b0:3a:e6:fb:83:bd:ea:fc:f8:15:6a:11:05: 12:39:9e:49:b3:6f:ab:0e:04:00:1b:9b:1e:f4:eb:be:04:ba: 06:35:aa:a6:f5:08:6f:43:7f:cf:3d:00:3c:04:b4:ad:ba:8a: 64:aa:0a:b9:60:96:20:f7:71:a7:7f:98:9e:0e:fe:74:95:16: 3c:b7:44:b6:01:21:bd:48:ac:9c:de:fa:13:03:bd:1f:fb:45: 50:4e:df:77:03:41:64:fa:6f:eb:53:3f:00:57:53:b7:e0:e3: 20:f5:97:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+NJwaJHuv0iOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTgwMzYyMzAtNjEzNi00ZThlLWE0OGEtMmQyZGFlM2U0MzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOleOv+eH9aytmNphmTbt11IiuiJ2Yixl69J y1UEuaKAwT8jd8Ui5+yodXvv2TBJ392DBDJXDdjGethb4JVVJ3Pi+ORDG/RK00nP 8uNW3ljXQfGU7h+k7xzSAxycbm2NMeYg/wyTk6wIyO0ii6E5X+Ea4f1cysnyEMl/ Q9UWDzZA3GVv/R74TxC4S/RstsybCsLXYlvlCMTAkesy22MCWk+B1rIfVjZf0QuS Ge3yOys6v6YEH7VSNr1dgvToVf88EW/5Pco/3bLaFEmcpIP2N8deZ7biknxnoAR5 WnqD/V3p0YYmW22199sxlEw0I36uHdqifx1LLfXTRqjW6o+RrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqxtRnsHZgu+epnU4rmIC4G/PvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDljNzFlMWEtODI4ZC0z ZGM0LTg3NTYtMDg5MzY0YjAyN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu/eptEGEKOXkMfDoXSHqP+RtTuLVVgt8P0OisCNcT4y4Br8DLIMP7V GqOuTaIYg9Xk2Re/Z3NQFTBMxzW5fpWKI0Z4tvFV6N0Hq9DgvamdXFaPJgIOfwmd gWS+MQTHlOHChmVC3gAjZe+K/T1lnq/zQ437fMat0VXg3vlqsh8fTo0eyU8icu9R bmdSlvnsAq7BM5q1sDrm+4O96vz4FWoRBRI5nkmzb6sOBAAbmx70674EugY1qqb1 CG9Df889ADwEtK26imSqCrlgliD3cad/mJ4O/nSVFjy3RLYBIb1IrJze+hMDvR/7 RVBO33cDQWT6b+tTPwBXU7fg4yD1l7k= -----END CERTIFICATE-----Generated at Fri Mar 14 08:44:47 2025 by rpki-client