$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dec7a80a-794e-3e44-bce0-468f8f622f97.roa File: dec7a80a-794e-3e44-bce0-468f8f622f97.roa (raw, json) Hash identifier: oD8YwyXOgxdKAxWOtBFaEvTqdhPYxdUuU1tyNm9pCQY= Subject key identifier: 22:C9:87:0A:87:9E:A7:2B:12:41:B6:BD:15:2A:FA:42:64:C2:FC:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58224E56A9B1C9C91716800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dec7a80a-794e-3e44-bce0-468f8f622f97.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.119.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:24:e5:6a:9b:1c:9c:91:71:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=363e14be-49d5-4c51-9d8f-23ea76976c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:cd:4e:be:bb:d2:0a:b1:1a:94:f6:52:ed: d6:76:cc:65:8e:a7:b2:cb:2c:40:3f:a9:23:2f:ee: fd:0a:d5:29:63:9e:84:13:df:b0:4b:89:6b:88:e1: c2:b4:18:4d:8d:51:2f:6b:91:00:b6:3d:6c:7d:2f: 79:96:d0:03:63:91:2d:39:83:7a:0e:58:02:bc:f2: b4:b3:94:73:19:7d:50:f1:7a:b1:a7:18:98:90:79: a4:57:37:c1:17:ce:a4:02:d8:d6:59:5e:d6:0b:2b: 67:56:ed:1a:ee:09:66:f3:59:7b:bd:d2:9c:4d:d8: f2:0d:f4:52:f3:91:55:83:cc:0c:3f:ca:d0:48:42: ba:69:f0:d6:08:f6:14:e1:9a:f4:01:7e:28:98:5d: b4:8f:35:97:25:e5:65:38:0d:db:bb:60:66:43:47: 3a:05:43:0a:f0:ff:55:9b:70:73:64:05:c1:53:54: 16:67:54:f6:d6:a2:e5:a7:45:78:f9:c7:0e:44:69: c5:b9:6e:cd:97:97:0b:11:6c:f7:da:af:87:b2:87: 0d:d1:f7:72:c9:d4:13:96:5e:b0:f1:dd:de:74:7e: 95:09:e1:4b:0a:c9:d7:dd:6f:b2:ab:ae:3f:a5:ac: 40:0e:5b:f9:7c:08:10:e4:29:02:d2:1f:b8:b3:d4: 98:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C9:87:0A:87:9E:A7:2B:12:41:B6:BD:15:2A:FA:42:64:C2:FC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dec7a80a-794e-3e44-bce0-468f8f622f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2e:f0:9d:b7:f7:e8:7e:4d:5e:5b:3b:79:7e:e4:76:f3:8a: f6:a1:53:51:2c:d9:17:45:63:1b:d9:d9:25:9f:1b:ff:eb:63: a7:1f:63:6a:0a:74:f2:9a:02:0f:c9:f6:f6:80:d1:79:37:bf: 10:4d:53:7e:e4:a0:b0:f6:70:52:bb:60:42:81:1e:4d:34:a0: ec:27:8a:f6:68:02:a5:26:b4:7e:4e:ac:b8:46:bf:29:3d:86: 29:e6:7e:ab:4e:f2:76:c7:2b:86:3f:ee:27:ba:0a:16:22:94: 9b:87:40:44:73:1d:24:c3:d9:0a:66:78:09:e5:81:2f:d3:3e: 25:c0:cc:64:e6:59:8a:f1:19:0a:75:1b:e3:66:a9:fa:67:a4: 5c:7e:2a:aa:d4:02:44:fa:db:61:29:10:2a:2d:70:d7:39:37: 8c:5b:9b:3f:77:8e:48:11:92:6e:82:54:81:21:af:12:b7:41: 1a:48:0e:06:1b:40:b5:38:fd:36:be:4a:23:00:49:23:0a:e7: c5:61:ba:d7:15:92:51:5c:c6:5a:2a:cf:f8:e3:15:db:25:dc: 1d:4d:40:fb:53:a5:9a:f5:a6:0c:ae:72:b2:87:65:8d:4b:2c: af:4e:c0:9e:dd:f8:53:be:8f:19:c5:4d:9c:4a:5c:fd:c4:3f: cc:12:94:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiTlapscnJFxaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzYzZTE0YmUtNDlkNS00YzUxLTlkOGYtMjNlYTc2OTc2Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI3NTr670gqxGpT2Uu3WdsxljqeyyyxAP6kj L+79CtUpY56EE9+wS4lriOHCtBhNjVEva5EAtj1sfS95ltADY5EtOYN6DlgCvPK0 s5RzGX1Q8XqxpxiYkHmkVzfBF86kAtjWWV7WCytnVu0a7glm81l7vdKcTdjyDfRS 85FVg8wMP8rQSEK6afDWCPYU4Zr0AX4omF20jzWXJeVlOA3bu2BmQ0c6BUMK8P9V m3BzZAXBU1QWZ1T21qLlp0V4+ccORGnFuW7Nl5cLEWz32q+HsocN0fdyydQTll6w 8d3edH6VCeFLCsnX3W+yq64/paxADlv5fAgQ5CkC0h+4s9SYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLJhwqHnqcrEkG2vRUq+kJkwvxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGVjN2E4MGEtNzk0ZS0z ZTQ0LWJjZTAtNDY4ZjhmNjIyZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACou8J239+h+TV5bO3l+5HbzivahU1Es2RdFYxvZ2SWfG//rY6cfY2oK dPKaAg/J9vaA0Xk3vxBNU37koLD2cFK7YEKBHk00oOwnivZoAqUmtH5OrLhGvyk9 hinmfqtO8nbHK4Y/7ie6ChYilJuHQERzHSTD2QpmeAnlgS/TPiXAzGTmWYrxGQp1 G+NmqfpnpFx+KqrUAkT622EpECotcNc5N4xbmz93jkgRkm6CVIEhrxK3QRpIDgYb QLU4/Ta+SiMASSMK58VhutcVklFcxloqz/jjFdsl3B1NQPtTpZr1pgyucrKHZY1L LK9OwJ7d+FO+jxnFTZxKXP3EP8wSlPs= -----END CERTIFICATE-----Generated at Wed Apr 9 17:57:03 2025 by rpki-client