$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5d7ecaf-3da8-3745-9198-02c8886c078b.roa File: e5d7ecaf-3da8-3745-9198-02c8886c078b.roa (raw, json) Hash identifier: R1oqPZliYmfyfVfiDIQ1rOaPhzFN+sgbbKRxwARixaM= Subject key identifier: 08:A7:4A:D6:DB:80:4D:A8:B5:7A:90:85:92:E1:94:CC:F6:A9:0C:CC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCC0264B7228D6B1A6850 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5d7ecaf-3da8-3745-9198-02c8886c078b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.140.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cc:02:64:b7:22:8d:6b:1a:68:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c6573967-9da6-421f-b8be-dfbeb3f9ae0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b6:af:fe:1b:db:9f:77:31:74:78:2c:22:94: 9d:b0:65:22:a5:4e:39:ce:1c:cc:15:7a:f8:80:65: 0e:29:d1:75:34:0a:ff:38:cc:68:82:85:cf:70:2a: a1:99:22:0c:be:6f:a1:5d:50:6b:26:74:43:cf:2f: f1:ca:61:73:53:82:94:3f:25:58:df:39:b9:7d:2d: d8:f3:72:90:c8:d3:b6:d1:dd:eb:a7:62:70:f7:5f: 70:74:d3:54:63:b6:91:79:6c:fd:79:87:81:a6:1c: e3:7c:6e:af:43:b4:bf:06:4c:a0:9b:80:b2:89:cf: a5:54:6e:c1:c9:07:a7:06:1b:5a:7d:22:9a:c6:09: d2:24:b4:20:5a:bc:e1:b3:05:f7:49:ba:42:61:f3: fb:3c:71:be:22:41:a5:37:34:ca:3a:56:76:a7:7d: b0:34:a6:90:1c:fd:50:f7:9b:a5:c0:b6:35:17:39: 2c:84:60:7f:f4:48:12:73:7e:18:ce:b3:97:52:3c: 33:5d:dc:ce:76:d0:90:f1:5a:5a:9f:c1:92:68:9b: 77:be:90:53:f4:61:73:fe:eb:9c:49:81:da:63:8a: 07:1c:ca:12:10:5d:9b:25:4b:65:83:9f:45:f9:6f: 5e:22:4c:f8:72:f5:1d:87:63:fc:b9:ab:47:7a:59: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A7:4A:D6:DB:80:4D:A8:B5:7A:90:85:92:E1:94:CC:F6:A9:0C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5d7ecaf-3da8-3745-9198-02c8886c078b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.140.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:20:bd:44:7f:3c:10:bb:f5:16:d3:32:6b:98:b6:e8:72:88: 56:6b:7a:3d:14:70:af:36:de:d0:78:a4:82:cd:08:23:67:54: 4a:03:c9:ab:80:d1:c3:1a:1a:da:c0:95:7d:b8:e9:51:5b:25: b1:90:b2:43:0e:1a:72:9c:a0:14:f7:92:f6:cd:2f:08:e2:5a: d1:2e:87:0c:36:e7:35:bd:f7:32:d2:e9:3d:93:72:75:a3:2c: cd:5b:1f:06:05:c0:ad:d8:49:09:2b:ce:8d:1d:d6:31:b4:14: cb:db:d1:6c:da:14:cc:de:6b:e8:69:59:14:a4:0b:af:63:3a: c2:40:9f:af:98:bc:39:bf:e5:27:bd:be:8e:5a:88:fe:41:02: af:11:d9:f6:23:ca:2d:0c:62:a5:49:0e:67:d1:df:61:bd:dd: ae:58:e2:72:d4:90:f4:fe:53:6f:82:7d:7f:be:d0:13:22:a0: bf:4d:bb:5f:9b:d4:d8:bf:0f:f0:9c:54:09:24:34:bb:44:70: b7:a8:3a:23:ff:9d:69:40:b1:db:04:b0:44:ba:d6:a8:71:5d: b3:cc:a0:a4:72:76:2e:a2:56:eb:d0:cf:e9:f9:2b:52:0a:c5: d3:27:25:b3:49:02:1d:03:7a:0b:6c:b0:a6:5d:9a:f2:26:6d: fd:18:73:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8wCZLcijWsaaFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzY1NzM5NjctOWRhNi00MjFmLWI4YmUtZGZiZWIzZjlhZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbav/hvbn3cxdHgsIpSdsGUipU45zhzMFXr4 gGUOKdF1NAr/OMxogoXPcCqhmSIMvm+hXVBrJnRDzy/xymFzU4KUPyVY3zm5fS3Y 83KQyNO20d3rp2Jw919wdNNUY7aReWz9eYeBphzjfG6vQ7S/Bkygm4Cyic+lVG7B yQenBhtafSKaxgnSJLQgWrzhswX3SbpCYfP7PHG+IkGlNzTKOlZ2p32wNKaQHP1Q 95ulwLY1FzkshGB/9EgSc34YzrOXUjwzXdzOdtCQ8Vpan8GSaJt3vpBT9GFz/uuc SYHaY4oHHMoSEF2bJUtlg59F+W9eIkz4cvUdh2P8uatHelnUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAinStbbgE2otXqQhZLhlMz2qQzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVkN2VjYWYtM2RhOC0z NzQ1LTkxOTgtMDJjODg4NmMwNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEgvUR/PBC79RbTMmuYtuhyiFZrej0UcK823tB4pILNCCNnVEoDyauA 0cMaGtrAlX246VFbJbGQskMOGnKcoBT3kvbNLwjiWtEuhww25zW99zLS6T2TcnWj LM1bHwYFwK3YSQkrzo0d1jG0FMvb0WzaFMzea+hpWRSkC69jOsJAn6+YvDm/5Se9 vo5aiP5BAq8R2fYjyi0MYqVJDmfR32G93a5Y4nLUkPT+U2+CfX++0BMioL9Nu1+b 1Ni/D/CcVAkkNLtEcLeoOiP/nWlAsdsEsES61qhxXbPMoKRydi6iVuvQz+n5K1IK xdMnJbNJAh0DegtssKZdmvImbf0Yc/k= -----END CERTIFICATE-----Generated at Fri Apr 4 21:48:02 2025 by rpki-client