$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e327d900-2e67-3075-a7fa-9efc72e2b331.roa File: e327d900-2e67-3075-a7fa-9efc72e2b331.roa (raw, json) Hash identifier: ZL0DFJ/NI4E5g/rP5lvZgiTN8oXfXKp8r6iwBONFgMY= Subject key identifier: 09:13:C7:28:03:D2:D2:6D:D7:FD:B3:CF:25:E0:BE:CB:71:77:4B:96 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1814DFCF1EDDD50FF400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e327d900-2e67-3075-a7fa-9efc72e2b331.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.88.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:18:14:df:cf:1e:dd:d5:0f:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a199c27e-b88d-4a73-9c85-a0b5f9b205b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:21:ba:88:e8:65:83:46:66:c8:07:b8:e3: 23:4c:0e:56:d0:64:f2:a6:49:9b:20:77:75:92:61: 55:8f:6c:30:f3:b1:6c:4f:52:84:63:83:ad:26:10: 76:9d:7f:05:88:44:98:f7:ab:d0:08:d3:be:72:54: ba:ee:a2:7e:62:89:a2:6b:b6:f0:71:b2:64:ce:83: 05:f8:f8:83:14:2d:c0:77:51:57:dd:da:3d:d8:9a: 87:4d:6e:09:46:64:90:15:8a:07:57:f7:dd:f3:cf: 33:97:a5:a3:02:58:4f:6a:36:b1:eb:61:8f:5f:dc: 81:03:98:a5:f7:a6:b5:db:60:3e:54:0c:03:07:16: 1a:b8:f3:fb:ef:ec:e5:80:5f:73:50:58:eb:80:1a: bc:27:ba:06:eb:0a:d9:e1:b1:8a:a8:5f:30:76:fd: 9c:cc:37:d1:ac:5d:71:0c:2e:44:53:8b:72:54:85: 65:78:cb:8d:e0:5c:cb:f7:d1:71:b4:98:12:08:9e: f9:33:a7:db:24:44:20:d1:fc:f3:90:f7:b8:75:25: 5d:47:fd:60:3c:1d:4a:2d:95:57:5b:59:57:d2:92: 90:e5:f9:9d:97:2d:1a:41:91:94:8b:a8:a4:73:29: 32:6d:ce:97:91:f9:67:40:9b:57:14:45:bf:39:fb: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:C7:28:03:D2:D2:6D:D7:FD:B3:CF:25:E0:BE:CB:71:77:4B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e327d900-2e67-3075-a7fa-9efc72e2b331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:62:7f:57:e7:3e:1e:90:b4:5a:5e:d7:14:33:68:20:aa:ec: 47:e9:4c:f0:d9:9e:6e:d6:ce:1c:77:53:32:32:71:12:c5:dc: 4b:c7:4e:8f:1b:ac:8a:6e:80:4a:13:58:f5:47:fc:27:b8:1e: 87:9d:96:72:32:52:1d:a4:96:06:18:f3:e8:f4:36:7a:27:9e: e1:7d:8e:ae:e6:2f:8a:19:47:fd:8a:da:6c:2e:12:72:74:f5: e8:3d:3e:66:de:f1:4c:1a:97:a0:d0:dc:a7:4e:14:48:c8:27: fd:35:0b:45:b6:56:c1:33:71:72:22:95:e5:e1:6e:77:8a:f7: 72:74:93:42:4a:01:b8:d0:83:12:d5:78:8e:56:e0:f0:1e:06: 03:da:71:e8:2e:3c:b1:bf:7a:5d:b4:02:cd:1e:73:78:8a:86: 88:47:7b:a0:03:70:6b:cb:f5:01:f5:fc:b0:2a:8f:ca:9c:98: 08:7b:29:5c:72:0d:ed:c3:c1:a7:7d:49:d2:bb:e8:30:09:6e: 05:ed:29:4c:cd:31:23:60:5d:ce:fd:ef:f4:8a:c2:a5:7e:15: fa:fb:5b:96:fe:55:86:28:09:5c:cf:c6:28:2d:f8:6f:ad:39: bd:c0:ef:95:c8:b8:58:f4:fa:21:12:f2:89:a6:b4:31:a4:19: e5:86:cb:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBgU388e3dUP9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTE5OWMyN2UtYjg4ZC00YTczLTljODUtYTBiNWY5YjIwNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj94huojoZYNGZsgHuOMjTA5W0GTypkmbIHd1 kmFVj2ww87FsT1KEY4OtJhB2nX8FiESY96vQCNO+clS67qJ+Yomia7bwcbJkzoMF +PiDFC3Ad1FX3do92JqHTW4JRmSQFYoHV/fd888zl6WjAlhPajax62GPX9yBA5il 96a122A+VAwDBxYauPP77+zlgF9zUFjrgBq8J7oG6wrZ4bGKqF8wdv2czDfRrF1x DC5EU4tyVIVleMuN4FzL99FxtJgSCJ75M6fbJEQg0fzzkPe4dSVdR/1gPB1KLZVX W1lX0pKQ5fmdly0aQZGUi6ikcykybc6XkflnQJtXFEW/Ofv80wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkTxygD0tJt1/2zzyXgvstxd0uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTMyN2Q5MDAtMmU2Ny0z MDc1LWE3ZmEtOWVmYzcyZTJiMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIliQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlif1fnPh6QtFpe1xQzaCCq7EfpTPDZnm7Wzhx3UzIycRLF3EvHTo8b rIpugEoTWPVH/Ce4HoedlnIyUh2klgYY8+j0NnonnuF9jq7mL4oZR/2K2mwuEnJ0 9eg9Pmbe8Uwal6DQ3KdOFEjIJ/01C0W2VsEzcXIileXhbneK93J0k0JKAbjQgxLV eI5W4PAeBgPaceguPLG/el20As0ec3iKhohHe6ADcGvL9QH1/LAqj8qcmAh7KVxy De3Dwad9SdK76DAJbgXtKUzNMSNgXc797/SKwqV+Ffr7W5b+VYYoCVzPxigt+G+t Ob3A75XIuFj0+iES8ommtDGkGeWGy88= -----END CERTIFICATE-----Generated at Fri Mar 14 13:39:27 2025 by rpki-client