$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f0844c-6bd4-3c78-be76-589addff6c05.roa File: e5f0844c-6bd4-3c78-be76-589addff6c05.roa (raw, json) Hash identifier: 8q3a+Inqo6r9SqlBLg7fvIqKIr24+IJ4R5ayKpSoM3Q= Subject key identifier: E0:9C:97:08:63:36:85:9F:F2:00:8E:A7:6A:78:A5:A5:33:4A:60:7B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF1A1678FCDFC7273F180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f0844c-6bd4-3c78-be76-589addff6c05.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.127.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f1:a1:67:8f:cd:fc:72:73:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=05906a1e-e408-4b41-8a87-5969e9d60682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:49:91:9c:06:b2:42:6b:ab:5e:97:47:5c:ed: 9a:5f:0d:7e:75:dd:06:b2:06:5c:68:47:d3:5c:9f: 52:37:d7:60:7a:d9:e2:9b:6b:41:fa:3d:28:02:c4: 6d:25:85:4e:34:53:cc:2a:b2:0d:0b:16:78:e0:b3: 08:e5:24:d8:df:6b:6b:0c:c9:03:30:ed:a3:09:5a: bb:e3:b4:c7:cd:b0:c6:a0:67:51:ac:c6:06:be:90: ba:e7:b5:d9:d2:54:e8:2c:43:de:17:df:b5:1a:db: 3f:ac:f1:d6:21:e3:57:a9:9a:1c:90:54:c1:ff:cc: c6:38:ba:67:41:cd:a8:7a:0f:c9:a8:dd:38:17:36: 72:a6:d8:07:39:91:c8:71:37:0b:5e:6d:fd:bc:f7: 0d:0d:ed:7c:06:f6:6d:7f:94:59:54:13:3d:d0:c8: 49:5b:ce:58:c3:40:2f:c9:fb:03:6c:cf:c4:bf:c5: fc:5b:9a:a1:fe:5e:b6:15:b8:5b:67:d3:84:33:00: 4d:ec:0b:2b:9a:64:d5:45:11:01:50:aa:8f:48:5a: 4f:dd:05:15:55:98:bd:bb:76:b6:76:71:f4:28:e8: bb:ca:a7:c8:7c:08:47:2b:e3:7d:e2:9a:f3:f3:15: 6f:01:ce:73:42:40:6d:90:47:bd:a1:ef:6b:93:d5: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9C:97:08:63:36:85:9F:F2:00:8E:A7:6A:78:A5:A5:33:4A:60:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5f0844c-6bd4-3c78-be76-589addff6c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.127.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ea:df:51:c2:3d:2f:cf:65:df:2c:00:e6:62:80:b4:2b:56: e4:a4:16:b4:0b:18:00:ec:2b:94:ad:30:28:6a:91:c4:f0:f1: f0:d7:9d:c5:b1:89:f1:44:9d:93:48:a0:fa:cf:3d:d9:21:3b: f9:f8:11:3f:44:53:85:a3:c5:f9:c4:86:28:b0:92:5d:8c:48: 48:d0:4d:31:c5:13:35:2d:0f:b0:21:a0:d3:0d:78:ca:78:98: 31:3a:13:80:97:6c:4e:35:6b:dc:5e:43:01:2a:4f:fe:02:5b: af:87:6f:1f:3d:ec:cd:af:23:77:36:92:66:bc:b9:6b:9e:09: 5c:41:8d:93:26:87:26:00:8e:cd:00:22:82:69:13:04:32:e4: be:8a:be:93:d8:4a:14:a8:67:a6:e7:f0:d3:d6:6a:97:d4:6c: 6d:8a:bd:1e:56:13:9c:af:ab:0a:98:26:7b:6d:f0:61:b9:19: 38:59:6b:1f:ae:26:eb:c2:a9:e8:6d:81:7f:4c:a4:2d:69:2a: a8:a9:f4:73:66:68:b1:85:b0:69:9c:51:a9:4c:26:44:5e:35: 41:e3:15:25:8c:c0:b5:b3:11:f3:11:59:d4:38:03:ca:37:7a: 05:91:e4:74:ab:74:8d:41:23:52:e4:c9:a3:5b:9a:01:f9:de: 46:31:db:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/GhZ4/N/HJz8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDU5MDZhMWUtZTQwOC00YjQxLThhODctNTk2OWU5ZDYwNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90mRnAayQmurXpdHXO2aXw1+dd0GsgZcaEfT XJ9SN9dgetnim2tB+j0oAsRtJYVONFPMKrINCxZ44LMI5STY32trDMkDMO2jCVq7 47THzbDGoGdRrMYGvpC657XZ0lToLEPeF9+1Gts/rPHWIeNXqZockFTB/8zGOLpn Qc2oeg/JqN04FzZyptgHOZHIcTcLXm39vPcNDe18BvZtf5RZVBM90MhJW85Yw0Av yfsDbM/Ev8X8W5qh/l62FbhbZ9OEMwBN7AsrmmTVRREBUKqPSFpP3QUVVZi9u3a2 dnH0KOi7yqfIfAhHK+N94prz8xVvAc5zQkBtkEe9oe9rk9V3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCclwhjNoWf8gCOp2p4paUzSmB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTVmMDg0NGMtNmJkNC0z Yzc4LWJlNzYtNTg5YWRkZmY2YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXq31HCPS/PZd8sAOZigLQrVuSkFrQLGADsK5StMChqkcTw8fDXncWx ifFEnZNIoPrPPdkhO/n4ET9EU4WjxfnEhiiwkl2MSEjQTTHFEzUtD7AhoNMNeMp4 mDE6E4CXbE41a9xeQwEqT/4CW6+Hbx897M2vI3c2kma8uWueCVxBjZMmhyYAjs0A IoJpEwQy5L6KvpPYShSoZ6bn8NPWapfUbG2KvR5WE5yvqwqYJntt8GG5GThZax+u JuvCqehtgX9MpC1pKqip9HNmaLGFsGmcUalMJkReNUHjFSWMwLWzEfMRWdQ4A8o3 egWR5HSrdI1BI1LkyaNbmgH53kYx24s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:55 2025 by rpki-client