$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab50aa8-dd2a-388d-b524-9975916f25ee.roa File: dab50aa8-dd2a-388d-b524-9975916f25ee.roa (raw, json) Hash identifier: 8mJUsupJ9aLkoEymNMe7bqETjQQfs4nZRoVdu5UCE4Y= Subject key identifier: F2:82:0E:F9:79:74:4A:E8:53:9F:1F:63:23:1E:B8:4D:32:88:5D:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD48D46ED343C53CD4680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab50aa8-dd2a-388d-b524-9975916f25ee.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.79.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d4:8d:46:ed:34:3c:53:cd:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a03ded9f-1559-4eaa-973d-fd97e7b3e592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:db:79:b2:3e:9c:8e:43:75:ca:84:d1:d6: fe:36:e8:fc:b2:44:78:21:78:fa:a1:3f:aa:c3:20: 82:1b:a6:7d:6b:c7:3b:18:78:af:9c:78:10:ec:c9: 8a:40:57:fa:7a:a3:d7:a7:b5:c0:45:d8:66:7c:62: c3:91:4f:ed:48:80:9e:d6:75:bc:ba:78:ca:56:71: aa:2d:24:7e:5f:85:af:54:32:72:47:5e:7c:18:fe: 90:b7:a2:17:f8:29:a9:83:72:38:2c:5c:91:69:23: e5:b6:92:52:40:d8:fb:31:a1:2d:29:56:62:35:79: 6a:d4:b3:9d:71:b8:db:bc:4f:f7:03:b6:28:77:8c: 50:a8:c1:0d:5c:95:45:bd:32:00:2a:c2:fc:20:6c: 37:0c:b4:3b:ce:c4:31:3b:59:28:ac:25:d0:61:2b: dd:79:02:73:ba:5d:3d:04:8d:87:99:53:08:a7:24: a8:c6:c4:d5:3b:08:8a:6f:7e:72:7c:e1:7c:29:f4: c1:a5:e2:a9:88:bc:0e:57:3a:60:63:7a:91:ed:91: c9:d4:54:c7:bb:ea:f6:24:01:e6:3d:b6:0e:11:63: a7:65:45:61:59:d6:00:96:d2:91:f2:b9:20:bf:07: 93:8a:86:ab:96:20:c2:4c:a2:22:49:b1:82:52:60: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:82:0E:F9:79:74:4A:E8:53:9F:1F:63:23:1E:B8:4D:32:88:5D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dab50aa8-dd2a-388d-b524-9975916f25ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.79.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1a:1b:53:c9:b5:2c:f0:17:8d:23:f2:10:52:20:b1:6c:12: 26:1a:31:c4:41:2a:7a:4b:61:99:78:8a:7e:04:ed:16:8a:6f: 1a:aa:4c:70:be:9f:f9:9b:f6:c8:a8:d2:ad:96:0a:fa:55:63: 64:89:6e:7d:71:42:a0:c3:d5:53:5f:fc:ef:83:b4:44:08:29: 41:99:42:06:2b:e6:17:72:f1:7c:cd:b8:75:fc:4c:9e:f5:50: 4c:a4:34:5a:a5:f5:99:eb:90:66:97:2c:a6:d5:e3:93:0b:49: 24:25:61:28:d6:5a:09:c5:23:b2:40:3f:52:f7:4b:43:95:88: 00:ee:71:b2:df:94:5c:e5:81:e0:5f:ca:e8:e3:4d:fb:c5:b5: 4c:ff:17:15:cf:36:57:8a:14:66:11:fa:f0:be:fe:0d:7e:ed: 94:21:5e:f7:d3:af:e7:89:64:aa:5d:02:6d:8c:56:39:a7:71: 7e:f5:89:fe:76:43:13:78:fb:c7:97:15:b6:62:fb:f7:4c:f9: d9:57:ed:06:8c:1a:39:2b:d5:44:75:e5:d8:2d:9e:23:c5:7a: 41:35:8d:51:0d:f4:d1:3c:c3:fd:04:bb:84:d6:2a:dc:f4:e7: a6:52:c2:1d:d1:60:0f:92:4c:be:ec:30:df:8c:1a:4c:82:16: f1:29:2b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9SNRu00PFPNRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTAzZGVkOWYtMTU1OS00ZWFhLTk3M2QtZmQ5N2U3YjNlNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszTbebI+nI5DdcqE0db+Nuj8skR4IXj6oT+q wyCCG6Z9a8c7GHivnHgQ7MmKQFf6eqPXp7XARdhmfGLDkU/tSICe1nW8unjKVnGq LSR+X4WvVDJyR158GP6Qt6IX+Cmpg3I4LFyRaSPltpJSQNj7MaEtKVZiNXlq1LOd cbjbvE/3A7Yod4xQqMENXJVFvTIAKsL8IGw3DLQ7zsQxO1korCXQYSvdeQJzul09 BI2HmVMIpySoxsTVOwiKb35yfOF8KfTBpeKpiLwOVzpgY3qR7ZHJ1FTHu+r2JAHm PbYOEWOnZUVhWdYAltKR8rkgvweTioarliDCTKIiSbGCUmAq6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKCDvl5dEroU58fYyMeuE0yiF2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGFiNTBhYTgtZGQyYS0z ODhkLWI1MjQtOTk3NTkxNmYyNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsaG1PJtSzwF40j8hBSILFsEiYaMcRBKnpLYZl4in4E7RaKbxqqTHC+ n/mb9sio0q2WCvpVY2SJbn1xQqDD1VNf/O+DtEQIKUGZQgYr5hdy8XzNuHX8TJ71 UEykNFql9ZnrkGaXLKbV45MLSSQlYSjWWgnFI7JAP1L3S0OViADucbLflFzlgeBf yujjTfvFtUz/FxXPNleKFGYR+vC+/g1+7ZQhXvfTr+eJZKpdAm2MVjmncX71if52 QxN4+8eXFbZi+/dM+dlX7QaMGjkr1UR15dgtniPFekE1jVEN9NE8w/0Eu4TWKtz0 56ZSwh3RYA+STL7sMN+MGkyCFvEpK00= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:57 2025 by rpki-client